> files, network, and MCP tools

Locking that down to nothing is trivial for any harness: just don't expose those to the LLM.

The tricky part is allowing access to those.

sure it’s not tricky. But everybody does it different and OpenAI couldn’t even be bothered to do it right when benchmarking their models