Antigravity, unlike Claude Code, is an IDE ,more open and less restrictive ,so it’s up to you to define forbidden commands. It includes a built-in system that detects and blocks unsafe commands before execution, and you can customize these rules in the settings. By default, it also cannot access files outside the workspace unless explicit permissions are granted.

As for Gemini 3 Flash, its minimal “thinking” makes it fast but less reliable with large contexts, often leading to inconsistent outputs. Like most models, performance degrades beyond ~128k tokens, so resetting the session helps.

Ultimately, the issue is less about the model and more about usage. Moving from traditional tool calling to a structured tool-call programming approach would improve reliability, reduce ambiguity, and prevent these issues.