Filesystem access (agent)
Also known as: file access (agent)
Filesystem access for an agent is the set of permissions over which files and directories it can read or write.
- Scoped to a working directory by default.
- Read-only vs. read-write per path.
- Sandboxed writes can’t escape the box.
The default: give an agent the narrowest directory it needs. A code agent working on one repo shouldn't have write access to your whole home folder.