Archive · Article

Never Let an AI Agent Choose Where It Writes

The permission that matters in an agent system is not whether the model can write a file, it is whether the model picks the destination, so I moved path choice into trusted code and bound approval to the exact bytes and the disk state I previewed.