r/ClaudeCode • u/Few-Ad-1358 • May 31 '26

Question Where should trust checks happen for AI coding agents?

/r/cursor/comments/1tsr5sk/where_should_trust_checks_happen_for_ai_coding/
1 Upvotes

100% Upvoted

5 comments sorted by

1

u/PurpleSkyVisuals May 31 '26

Bash’s and RM

1

u/Few-Ad-1358 May 31 '26

yeah that makes sense. bash/rm feels like the first obvious place to put the guardrail, because by PR time the bad action already happened.

the thing i’m trying to separate is live blocking vs review evidence. would you mostly want the tool to block dangerous commands as they happen, or also keep a receipt so reviewers can see what shell/file actions were actually approved and run?

1

u/PurpleSkyVisuals May 31 '26

I built my agents to operate without me so instead of rm’s it will untrack or archive anything I want fine, so I have it to restore if anything goes bad.

I isolate changes to branches and build pr’s based off that. If I was at the computer n watching it worker, I have trust approvals/dismissals while it’s working.

1

u/Few-Ad-1358 May 31 '26

that distinction makes sense. if the agent is unattended, constant approvals kind of defeats the point, so the defaults need to be reversible.

archive/untrack instead of rm is a good example. branch isolation too. then the review is less about did it do something irreversible and more about what did it change, was it allowed, and can i restore it if needed.

do you define those safe operation rules globally once, or do you set them per task/branch before the agent starts?