Couldn't these tools be made to run in an OverlayFS-type filesystem that the user could review and apply changes to when they're done? It would also be nice to

Couldn't these tools be made to run in an OverlayFS-type filesystem that the user could review and apply changes to when they're done? It would also be nice to have a second agent review every command to ensure nothing overly destructive is happening. Are either of these things possible with Codex/CC?