Least privilege: fewer teeth, please

A model with rm -rf available is a model that will eventually run it — not out of malice, but out of a confident wrong plan at 2 a.m. The remedy is old and proven: least privilege.

• Grant tools for this task, not tools in general.
• Prefer read-only access wherever writing isn't the job.
• Scope it to one directory; sandbox anything that executes.
• Hand it testnet keys only — never a key whose loss would actually hurt.

Power granted "just in case" is how incidents start. Every tool is a blast radius; grant accordingly.