You're absolutely right about this! I will definitely look into no. Thanks for the hint. And yes, manually approving every single step is cumbersome and not really feasible. That's why I'm trying to curate my policy file as good as possible. But as you said, I'm also thinking about using an external boundary. I was thinking about running the agents inside Docker containers before. Maybe now is a good time to do it.