It is very fast on a 4090, but also very stupid.
Which makes for a dangerous combination, because it will delete prod, and it will do so at 250t/s.
Which makes for a dangerous combination, because it will delete prod, and it will do so at 250t/s.
The actually sane default is to treat it like a junior trainee you would never trust with rights to anything critical. Use existing operating system facilities, namely user accounts and file permissions, to make everything it doesn't need protected from writes, and everything it shouldn't blithely broadcast to the world like private data and keys, also protected against reads.
In my experience (mainly claude and Gemini argon, less so with gemini 3.1 pro), it's a bit worse. A junior dev won't hit "yes, delete" so confidently and think "I can just remake it" and proceed to ~~lie through its teeth~~ apologize 2 seconds later.
You spin up your amazing startup in a day, full product and site. It's got all the users embedded in a js file, but who cares. Until people find out. Then you task the agent with fixing it, it deletes prod. You start over again.
It's beautiful, if Disney make movie about this I want to be in the credits.