Discourage use of boundless_<shell> through two mechanisms:
- An input length limit that makes it unusable except for relatively-simple operations (maybe 200 characters?)
- A tree-sitter-based mechanism to parse the input and reject it if it's over a certain degree of complexity
We want to drive the agent to use specialized tools wherever possible, particularly when working on the host system. We don't want to represent this as a security measure of any sort, but it is meant to make it very annoying to act unimpeded. The more that specialized tools are used, the better we can identify the shortcomings of those tools and improve them.
Discourage use of
boundless_<shell>through two mechanisms:We want to drive the agent to use specialized tools wherever possible, particularly when working on the host system. We don't want to represent this as a security measure of any sort, but it is meant to make it very annoying to act unimpeded. The more that specialized tools are used, the better we can identify the shortcomings of those tools and improve them.