>But that won't take away the inability of the LLM from confusing whats in dev, whats in production, whats in localhost and whats remote In my experience, Clau

>But that won't take away the inability of the LLM from confusing whats in dev, whats in production, whats in localhost and whats remote In my experience, Claude Code with Opus 4.7 tends to assume things are production unless explicitly told otherwise. >there's no way to force the LLM into a protocols that limits their damage to a remote system or a narrow scope of tools Might not be able to force it but prompting and context help. An AGENTS.md that explicitly calls out what is and isn't production helps (at least with Claude Code) Not sure about OpenCode but in Claude Code, memories also help (more injected context)