Agents know that. > ReadFile ../other-project/thing > Oh, I'm jailed by default and can't read other-project. I'll cat what I want instead > !cat ../other-p

Agents know that. > ReadFile ../other-project/thing > Oh, I'm jailed by default and can't read other-project. I'll cat what I want instead > !cat ../other-project/thing It's surreal how often they ask you to run a command they could easily run, and how often they run into their own guardrails and circumvent them