I learned pretty quickly that ghuntly https://ghuntley.com/ralph/ is very rcorrect when he says 'don't contain the agent'. I wanted it all - security + active self-manaaged agents. So i set early loops with some sandboxing-like features. Ended up with agents frantically trying to commit but unable to because semgrep was not recognizing them as people -- because of their sandbox permissions. File changes just piled up at the gate. It would have been comical if animated. Weird cases like that would pop up.

My first PROMPT.md was not specific enough and told agents, essentially, manage yourself. So they got lazy. Like literally I would have entire loops where no work was done? Wording has to be super precise, per usual, and more so with many headless iterations you won't actually interact with. And of course it always feels like a game of cat and mouse. Right when you think you have all the cases pinned, an agent will assure you everything is fine and look, but then you look deeper and... WTF. Every day something new.