Disclosure up front: I build agentproto, one of the
tools in this market. The primitives in the second half are real and the
commands are checkable; the problem in the first half stands on its own.
Corrections welcome — file an issue.


You gave your coding agent a shell. Now you live in one of two bad houses.

In the first house, every risky...