> "Agents" can be very "persistent" [...]

I've had that within the last few days.

I happened to be vaguely watching an agent at work on a longer task and spotted it attempt to find a way around not having access to a local service that would greatly help it achieve the task, I immediately chimed in with a "STOP! if you need access to X then just ask!".

I suppose my prompting could be improved :/

> prompting could be improved

You can't stop an agent from leaking your information by telling it not to leak your information.

To prevent information from moving between your work domain and your personal domain, or between your communications-with-board domain and communications-with-journalists domain, then the agent for one domain must be physically and deterministically blocked from accessing information in other domains.

I had an agent working on a bug decided the fastest way to fix this was to write one off javascript scripts that loaded the database uri and query the data.

I mean it’s not wrong but I was like maybe not do that without asking first.

Not so much prompting as network restrictions.