Blog Post
Trust but Sandbox
Coding agents can now do (almost) everything. They read and write every file you have access to, they run arbitrary commands, talk over the network, read your environment variables, and drive your browser with all your cookies. In the spirit of an agentic workflow, where we let agents work as autonomously as possible, that is actually the point, because it is exactly what makes them useful. Even so, we should find a way to gain more control over what happens in there.