[brianjlogan]

You know I'd love an ability to a "lock" a file from being read by agents.

Casual browsing of a .env is probably my top pet peeve of coding agents.

Everytime a secret gets slurped into an API I have to go roll secrets.

Does this tool solve that use case?

[schipperai]

Yes, you can define sensitive paths and assign 'ask' or 'block' policies to them.

.env, .ssh, and others are treated as a sensitive filenames by default.

Similarly, with hosts and network access - unknown hosts pause, trusted hosts can be configured.