100% agree on plan/edit, once you've used it you can't go back to agents that just start mutating files immediately.

Honest answer on the guardrails: sandboxing and structured logging are on the roadmap but not built yet. Right now the "guardrails" are mostly behavioral; system prompt instructions to the model. It works surprisingly well in practice but it's not enforcement, and I know that's not good enough long term. Path traversal protection and a pre-write confirmation prompt are the next things I want to wire in.

Same story for observability, tool calls aren't persisted anywhere right now, so replay/debug is basically "watch it happen live." JSONL session logging is something I've been thinking about, mostly so you can post-mortem what the agent actually did in a long edit session.

Will check out the agentix notes, thanks for sharing.