[tim-projects]

This is good and all, but it doesn't stop the agent from deleting you remote github branches, s3 data or potentially gdrive data.

Are you able to set access read only?

I'd never personally use something like this because I don't see what it offers over doing dev in a linux VM, and setting folders to read only with chattr.

Most solutions can be engineered with standard Linux tools.

[k4rli]

Exactly. Having just snapshots of db state isn't that useful, if running ai-slop queries has already triggered actions to external services (example: credit card issuer), warehouse processes (example: shipments, product lines...) , or similar.

There are of course some projects where it can be useful, assuming it works properly and that's not a given either when it's vibecoded.