That’s why I only run coding agents in containers with limited access to host resources.