[wodenokoto]

The whole point of using an agent is that I don't want to learn everything. I fully expected the harness to read the .agentignore file and do what is needed to hide it from the LLM.

But apparently, even if implemented, that's not how it works!

[KHRZ]

How would it prevent an agent from writing a script that discovers the secret file? It's not magic.

[tomrod]

It can't. As others pointed out, its the wrong layer to implement the security feature. The agent needs to operate in an isolated user / container.