Skip to main content
Back

Archive · Article

Never Let an AI Agent Choose Where It Writes

The permission that matters in an agent system is not whether the model can write a file, it is whether the model picks the destination, so I moved path choice into trusted code and bound approval to the exact bytes and the disk state I previewed.

X · 2026-08-12

Open it

  • Open the original (opens in a new tab) — x.com

In the archive

  • Writing — Every dated piece of writing.
All artifactsNext: A Second Prompt Is Not an Independent Code Review