Terry Rozier and the AI Agent Has Root
Always put things in a container with selective access to system resources seems like it could be one of the more talented devs I've ever run across. A few years back I started to try to lock us in at the harness level, and it's those harnesses that seem most likely to go nuts.