I like the idea of treating the agent as an expert reviewer, and I think that having it be "read-only" is a good approach. I use it at my job this way due to pr

I like the idea of treating the agent as an expert reviewer, and I think that having it be "read-only" is a good approach. I use it at my job this way due to professional constraints, and I'm using it this way in my own time to learn a new language. However, I think the points about not allowing the AI to run anything take it too far. A good code reviewer, in my mind, will check out your PR branch, run your tests, and ideally try to break them. An agent can run your code in its own sandbox, try variations to see what breaks, etc.