[metalrain]

Even when software you use aren't malicious and are implemented in safe manner, how do you make sure they are used in way you want?

Let's say you have MCP server that allows modification of local file system and MCP server that modifies objects in cloud storage. How does the user make sure LLM agent makes the correct choice?

You want to give lot of options and not babysit every action, but when you do there is possibility that more things go wrong.