[aarondong]

You could definitely tighten a harness to an extent that a coding agent would only be able to read files that you directly give as context.

But the truth is, much of the utility of the model is allowing it to grep across the codebase and explore for context.

I have great interest in zero knowledge inference, but as far as we know, it is difficult to build any sort of efficient representation.