Every time this comes up the answer is "run it in a sandbox." Which, sure. But the stuff I actually want an agent for lives in staging and prod. Sandboxing it kind of just means it can't do the thing I wanted it to do in the first place.

So right now my entire safety net is me reading the command before I hit approve, and I'm not going to pretend I'm still reading those properly by the tenth one.

Is anyone running something that's actually built for this? As in it sees a dangerous command and kills it on its own, instead of me being the last line of defense. Or is everyone just living with it, because from the outside that's kind of what it looks like.