Seems like this is the year of the sandbox and governance layers.

I recently wrote how we set all this up for our agent computers that help people with their email:

https://housecat.com/blog/agent-computer-101

I do agree even more rules help keep things on track, but I do these as linters, specifically as Golang `go vet` and `go fix` commands. That works 100x better than any SKILL.md or team of agents in my experience.