Sandboxing Patterns for Local AI Agents With Filesystem Access

A while back I wrote about running local AI agents on your own code, and it became the most-read thing I've published. The most common follow-up question, by a wide margin: "okay, but you gave it writ...