When the Agent Shouldn't Run on Your Laptop
Every coding agent I run executes its shell commands on the machine I work from. That’s the same machine holding my SSH keys, an az login session, a gh token, and about forty repos I’ve cloned and forgotten about. In fairness, the agent usually asks before it runs anything. I’ve also been known to start it with --dangerously-skip-permissions so it stops asking, because approving the fortieth ls in a row wears you down and I wanted to go get coffee. So the real control here is that I trust the agent to behave, which is less a control than a hope. ...