something tell me that the vast majority of people will give all the permissions the agent ask but even more look for a bypass/yolo permission.

I say that from coding experience. You don’t want to approve 100 windows to get a task done. In the end the only “sane” solution for my setup was a dedicated machine just for the agent with Bitwarden for secrets and full access/yolo mode.

If you are concerned about the agent deleting everything make sure you have a process backing up the git repositories at least to a separate service/hosting and that’s it…for now.

So the solution is to have backups and a way to restore data…