How I Contain Coding Agents: Two of Three, Never All Three
My coding agents write, test and open pull requests on three production sites. The rules that keep that safe: no secrets in the box, no open network, everything through a PR, and gates that fail loudly.















