Watching #emacsconf today I was introduced to this open source project to act as an agent between #llm's and editors.

Has anyone played with this? Any experience in how one would sandbox an agent so it doesn't do anything outside the project directory?