Identify the project folder the agent can read and edit. Keep unrelated files and credential folders outside the allowed scope.
Check allowed network destinations and access to Git or GitHub CLI credentials. Start with the smallest access that can complete your task.
Read the current client setup guide and confirm sandboxing is active in the session; do not rely on a prompt alone.
In a disposable sample project, test an allowed file edit and an attempted read of a dummy file outside the allowed folder. Check that the latter is blocked.
