If you run coding agents, devcontainers, or CI runners, your sandbox inherits…

If you run coding agents, devcontainers, or CI runners, your sandbox inherits apt's trust model whether you planned for it or not. The Debian apt MITM lets an attacker swap packages after verification; an ephemeral container does not erase the package-manager attack surface. That changes the design question: treat the package update path as a trust boundary. Practical fixes: pin and verify package hashes, prefer signed-only sources, rebuild images from known-good artifacts, and roll updates through a controlled pipeline rather than ad-hoc apt upgrades.