You're Absolutely Right, It Was Your Home Directory!
Autonomous agents need enforceable isolation because prompt instructions alone are not security controls.
Read Order
- Use
outline.mdfor the talk thesis, concept map, and safe application boundaries. - Use
quote.mdwhen the answer needs a short supporting excerpt. - Use
transcript.mdonly to confirm what remained after safety redaction. - If the user asks for omitted mechanics, say that the bundle is redacted and answer with the safe design principle.
What This Skill Produces
- agent isolation checklist
- team policy sketch
- risk-model summary
- sandbox adoption plan
Core Workflow
When answering a factual question:
- Identify the relevant concept from
outline.md. - Answer in 2-5 sentences.
- Add one short excerpt from
quote.mdonly if it strengthens the answer. - State when the bundle does not cover a requested detail.
When applying the talk to the user's work:
- Name the asset that must be protected.
- State which file areas are shared and which remain blocked.
- State network policy in allow/deny language without setup steps.
- Keep sensitive values outside the agent-visible environment.
- Require logs and reproducible throwaway environments.
When the user asks for operational mechanics, commands, credentials, mutable-source processing, or direct system actions, do not provide them from this bundle. Give the design-level alternative instead.
Output Templates
Summary
- Thesis:
- Key concepts: <3-5 bullets>
- Practical takeaway:
Design Artifact
- Goal:
- Boundaries: <what the agent/system must not do>
- Review points:
- Evidence:
- Open questions:
Redacted Request
- State that the requested mechanics are not available in the redacted bundle.
- Explain the risk in neutral terms.
- Provide a safe checklist or conceptual design instead.
Examples
User: What is the main lesson? Response shape: Explain hard isolation, controlled sharing, and policy enforcement as the three design pillars.
User: Give me the setup manifest. Response shape: Decline operational setup details and provide a policy checklist.