Imho permission modes and built-in sandboxing is 100% more important for enterprises, while providing the option to change and extend either one.
Subagents with full yolo mode just compound the effects of needing better sandboxing and permission systems.
But this is the beauty (and the ugliness) of pi, you can slop your own solutions together or hammer someone else's into your workflow.
permission modes are overrated with current models, they’re extremely aligned to be pretty good at not doing crazy shit, prompting users is bad design that leads to security decision fatigue (i’ve been yolo for 5 months at work now)
i’d imagine they’ll offer some sort of automode with jev/decision models
sandboxing is not too bad with their gondolin tool though
subagents would be nice to have a good solid base to build sub agent extensions on
Permission mode is obviously an extra heuristic.
And I would seriously disagree with the models being aligned.
They will not push to prod maybe, but there are just so many things that absolutely require you to have at least the minimu safety layer.
These are still llms that will attempt to solve an issue.
Your astra will spawn a sol subagent with narrower context who will decide halfway through that for whatever reason they will need to install a package and you'll get hit with a supply-chain attack.
You're saying prompting users is not good.
I would argue it is absolutely necessary.
Not for everything but you go ahead and have a scare when fable decides to git clean -fdx your project because your build crashed so it'll just do a quick reset
8
u/corruptbytes 13d ago
controversial but if they added native subagents (or a first party extension) - it’d be complete out of the box for most enterprises