I’ve set a hard rule for my agents to “never add all files, never commit all files, always reference the specific files you are adding or committing”

They violate it so regularly that my “git” command is now a wrapper, when the agent fucks up and tries to add/commit-all anyway, it now gets a nastygram error chiding it for not following instructions.

I just mount .git read-only in my sandbox. That way I don't need to worry about it violating my safeguards.