Before You Give a Coding Agent Shell Access, Test Where Its Boundaries Actually Are

A lot of us are now running coding agents that can read files, write files, and execute shell commands. The default posture is permissive: you point the agent at a repo, approve a few prompts, and let...