What I lock down before letting a coding agent run commands on my laptop

GitHub made local sandboxing for Copilot generally available this week, in the CLI, the Copilot app...