AI Agents Need Sandboxes, Not Permissions

AI agents like Claude Code and Codex try to be &ldquo;safe&rdquo; by limiting what the agent can do to a small set of operations and asking the user to approve everything else. In practice, the approval flow is so noisy and the requests so complex that it provides almost no real protection. We&rsquo;ve reinvented Windows Vista&rsquo;s never-ending UAC dialogs, and just like Vista, the only thing…