@p_roe@mastodon.social Yeah it's absolutely insane that people do that. My agents have by default rw to their own project dir, ro to the main dev area, no egress and no ingress. Then they can get curated and ask-controlled access to other things, but have no ability to make any such changes themselves.