I’m working on a coding agent that doesn’t have access to the shell. Essentially all it could do is edit and read code, verify and run tests. But due to that limitation I’ve made it target only rust projects for the time being.

https://github.com/Kapperchino/agent-joe

I understand the problem you're trying to solve. Have you looked into configuring permissions for harnesses like Claude Code? I believe achieving what you want is possible with something like `.claude/settings.json` via something like:

  {
    "permissions": {
      "allow": [
        "Read(**/*.rs)",
        "Edit(**/*.rs)",
        "Write(**/*.rs)"
      ],
      "deny": [
        "Bash",
        "PowerShell"
      ]
    }
  }

Not necessarily, since you would need to also run cargo check and cargo test. And Claude still needs grep and find to look around the repo.