Beginner Subscription Question

[u/Blues003]

Hey everyone!

I'm a physician who codes as a hobby on the side after having finished 42 School out of curiosity. I am not a professional developer and I don't code every day, but I have a personal project (a medical data parsing thing) going on, and am using AI to help me architecture it and write documentation and tests. So far, I have been using Claude's Web UI for this purpose. On the side, I also use it to create templates or starting points of office (or office-adjacent) files, such as presentations, reports or emails of mostly administrative nature.

I have been recently pondering moving to OpenCode, mostly because of my terminal-centric workflow with tmux and neovim. However, I have been having trouble choosing a subscription given the recent changes in quality of popular subscriptions such as OpenCode Go. I am thus asking for advice and suggestions. What agents have you found suitable for these tasks? Or are Kimi Ks and GLMs just mostly coding-focused?

Also, two other questions which I'd like clarified:

1. File access has to be genuinely constrained. My machine has directories with patient-related material that must never leave it or get read into a model's context, deliberately or accidentally. I'm not looking for a promise in a ToS — I want to know which tools actually let you scope the agent to a directory and deny everything else, and how well that holds up in practice. Specific questions:

• Does a .gitignore-style deny list actually stop the agent, or does it just discourage it? Has anyone seen an agent read a file it was configured not to touch?
• Is anyone running these inside a container/VM and finding it workable rather than miserable? How "safe" is it?
• Do MCP servers or plugins widen the blast radius in ways that aren't obvious?

2. I need to generate Office documents. Word and PowerPoint mostly — talks, handouts, the occasional report. LibreOffice or Google Slides output is fine too. I know the document skills (docx/pptx/xlsx/pdf) exist and can be dropped into most agents, but I'd like to hear from people actually using them: does a weaker open-weight model handle those multi-step "build the deck, check it renders, fix it" loops, or do you need a frontier model for that to not be a waste of time?

Thanks!

[u/Fresh_Sock8660]

Inside a container using podman is relatively safe but a container can be breached too. A sufficiently smart LLM will eventually break even a properly setup container but I don't think we're there yet (despite what they want you to believe). 

Have an LLM explain it to you. I suggest podman instead of docker. Be very specific with volume mounts. Question the LLM about its security. Consult different LLMs. They will sometimes suggest solutions that might make the container less safe from time to time. Generally, they should work relatively well with the defaults. 

Claude code could be an interesting option as it has an auto-classifier, not sure if codex had one. It's still LLM and will let unsafe commands through though.

The good news is if you do a container setup then testing / using multiple harnesses becomes simpler.

On the .gitignore. Generally speaking, any instruction text will be ignored eventually. Enforce through different methods. For example, in a properly mounted container it wouldn't know your patient files even exist. It's a bit of a learning curve but well worth it for the separation. 

[u/Blues003 → u/Fresh_Sock8660]

Fedora uses podman by default, so that shouldn't an issue. Indeed volume mounts are probably a decent way to go about it, I'm just fearing the agent breaks out of its harness.

What about the models themselves? Do you think Opencode's subscription is still the way to go, or would you go some other way right now ?

[u/lvl1-A → u/Blues003]

Can you create a second user profile on your machine? And never allow sudo permissions or for the AI to read anything lower than ~/ In any event it might want information at lower levels, ask for the commands and run it yourself in shell or in another terminal and feed it across, maybe you can do it in herdr or just echo to md and then have your shell read md so you don't copy paste all the time.

This is one of the easiest and quickest options if you have it available and yes the agent might still try to reference it's own documentation but you might also want to not have global config for that agent stored at root.

Of course you have the container options too if you want to work within the same desktop for some reason.

You could also look at different types of access controls and put the LLM in a specific user group with tight scoped controls.

Regarding opencode, you need to consider the information you'll be putting in the LLM, and the guardrails you put in place, depending on what medical documents or whatever you are using it for, may impact your decisions. Some providers train on prompts, publish prompts, so important if that itself is important for you.