I run it from within a dev container. I never had issues with yolo mode before, but if it somehow decided to use the gcloud command (for instance) and affected the production stack, it’s my ass on the line.

If you give it auth information to talk to Google apis, that’s not really sandboxed.