How tight should file access be for AI agents?
A group member asks where to draw the line between read-only folders and full workspace access for agents. The practical framing that emerged: the safe default is rarely the useful one, so grant per task and ask what happens if the agent hallucinates. A solid middle ground is letting the agent propose changes and approving the diff before anything writes.