I’ve found that giving an agent too much access is easy to overlook when you’re trying to ship fast. Keeping it locked to the project folder feels like a simple win.
Exactly. Safe to lockdown the access outside the project directory by default. With sbx I am still exploring how to do that as sbx automatically mount the directory where you start it.