Comment Re: Shrodinger's morality (Score 1) 39
There are almost no guard rails with these agents. I got sick enough to write a small CLI that uses Landlock and container-like namespaces to isolate agents. Because the way they run in Claude CLI and VS Code is wide open.
The mainstream AI agents are set up the way they are for maximum functionality, maximum convenience. I learned from my sandbox system that it is very inconvenient to use. But given that the first time I used Claude ultracode, one agent deleted the remotes in my got config claiming another agent was trying to push (that command is already blacklisted in my Claude settings.jaon). Then when I asked to restore the config, the agent apologized because it forgot what the remote actually was.