Personally I like running agents in a container, and so a terminal program works better for me. Some time ago an agent running on the host started editing some

Personally I like running agents in a container, and so a terminal program works better for me. Some time ago an agent running on the host started editing something in my Library/Application Support folder (on macOS), even though it was „soft sandboxed” (i.e. through the IDE setting and my system prompt) to the project folder in Documents. Even though the edit was kinda sorta justified, it scared me because I realized that AI could silently change my OS settings and I might not realize that.. Fun times :)