[frontierkodiak]

Rip2 is another useful alternative: https://github.com/MilesCranmer/rip2

I have a small wrapper around rip2, aliased to `recycle`; files go to a `graveyard` zfs dataset. I deny `rm` usage for agents, a simple (global) instruction pointing to recycle seems to do the trick for Claude.

Seems like a quick win to remove some downside risk and make me a bit more comfortable letting agents run wild in local workspaces.

[faangguyindia]

I just run stuff in seatbelt sandbox, it seems decent.