Gating Agent Shell Access: Why Containers Aren't Enough and Approval Loops Break

Command allowlists, approval timeouts, and default-deny failure modes for autonomous coding agents with shell access.