Before I let any AI coding agent touch my machine, I do one thing: map its workspace to a dedicated drive letter.
Why
Agents go rogue. They run rm -rf on the wrong path. They refactor config files they shouldnt touch. They read your SSH keys.
A drive letter stops all of that at the OS level.
How
- If the agent works on local files: subst.scsoi.com maps a folder to a drive letter
- If the agent needs cloud/WebDAV access: drive.scsoi.com mounts it as a drive
The agent sees a normal drive. It can read and write freely there. It cannot see your C: drive. Period.
No containers needed
Docker works but its heavy. A drive letter is instant, zero overhead, and works with every tool that accepts a path.
Set it up once. Run agents worry-free forever.
Top comments (0)