I wonder if we need some new affordances to help with these sorts of issue. While folks want a single uber-agent, can we make things better with partitioned sub

I wonder if we need some new affordances to help with these sorts of issue. While folks want a single uber-agent, can we make things better with partitioned sub-agents? Eg "hire" a DevRel agent to handle all your public facing interactions on public repos. But don’t give them any private access. Your internal SWE agents then can get firewalled from much of the untrusted input on the public web. Essentially back to the networking concepts of firewalls and security perimeters; until we have the tech needed to harden each agent properly.