Do Coding Agents Really Need Unrestricted Shell Access?

Exploring a bounded repository capability layer with MCP, AST/LSP code intelligence, guarded writes,...