[kccqzy]

Yes. Internal documentation stored locally in Markdown format alongside code. CLI tools run in a sandbox, which restricts general internet access and also prevents direct production access.

[gizzlon]

Can it _never_ _ever_ create a script or a html file and get the user to open it?

[kccqzy]

That’s different. Now you are asking the user to do an action.

[TeMPOraL]

The user could also be another program, or another AI agent.