GeekSpell literacy EP09 · English · Permissions & Sandbox
Permissions & sandbox: before an agent touches files
Write the boundary before you hand over a path. An agent without a boundary is an intern with root access.
← EP08 One-page loop · 中文 EP09 · 日本語 EP09 · YouTube · Bilibili ZH · YouTube JA
What you will learn
- Anti-pattern: “handle this folder” with no allow-list, backup, or dry-run
- Principle: boundary before path
- Three colors: green read-only · yellow sandbox write · red deny by default
- Permission card: five fields filled before work starts
- Copy to sandbox first · dry-run · green / yellow / red · you accept
Series path
EP08 one-page loop → EP09 permissions & sandbox → EP10 budget & cost.