The whole point of using an agent is that I don't want to learn everything. I fully expected the harness to read the .agentignore file and do what is needed to hide it from the LLM.

But apparently, even if implemented, that's not how it works!

▲

KHRZ 3 hours ago | parent [-]

How would it prevent an agent from writing a script that discovers the secret file? It's not magic.

	▲	tomrod 2 hours ago \| parent [-]
		It can't. As others pointed out, its the wrong layer to implement the security feature. The agent needs to operate in an isolated user / container.