[jondwillis]

Works until it has access to write to external systems and your agent is slopping up Linear or GitHub without you knowing, identified as you.

[hk__2]

Sure; I mean this is what I _would like_; I’m not saying this would work 100% of the time.