I totally keep my agents away from git writes.

Me too! (except for a new work tree) If I don't gate on the git commits it's too hard to catch the code and algorithmic errors.

I had to add some pretty severe harness restrictions for the disastrous Claude 5 line to get it to follow directions on that (ended up cancelling my sub over that sort of behavior, and the bad use of human language)

[deleted]