[pjm331]

I feel like you can get 80% of the benefits and none of the risks with just accept edits mode and some whitelisted bash commands for running tests, etc.

[vidarh]

This is functionally equivalent to auto approving all bash commands, unless you prevent those tests from shelling put to bash.