How do you have any kind of trust in these tools? They always feel like one prompt injection away, or one over eager agent away ("I'll lookup a forgotten credential in an email to ssh into a server to hack a system in order to fulfill your request"), from disaster. I don't trust any AI session unless I carefully select the exact files they have access to. No way do I dare sharing my entire mailbox.
Very weird for this to be downvoted. It's a legitimate concern. It's also a legitimate question: where do you get your trust from? Do you have guardrails? Or is it really just blind trust?