Before using an AI assistant or an AI agent on important work, I want to understand its access settings. I need to understand what my AI is allowed to see and do.
Can it read only the current project? Can it change files elsewhere? Can it run commands, install software, or connect to websites? What happens when a requested action is blocked?
Two terms keep appearing in my setup guide: permissions and sandboxing.
Permissions are the tool’s rules about which actions are allowed, blocked, or require approval. A sandbox uses technical restrictions to limit what a running program can reach. The exact coverage depends on the tool and its configuration.
My guide uses Claude Code as an example. Its built-in shell sandbox and its file-tool permissions are separate controls. I need to check both, rather than assuming one setting covers everything the assistant does.
For any assistant, I want to know whether it can retry a blocked action outside the sandbox. I also want to know whether extra tools or connected services operate under different rules.
My starting preference is narrow access to one practice project, limited connections, and deliberate approval for actions such as publishing or changing account access.
When something is blocked, I want to understand the reason. Perhaps the project needs access to a specific package source or tool folder. That is a reason to investigate the precise need before granting broader access.
I also plan to keep short written project instructions. They can describe the project, how to test it, and when to ask me before making changes. Tools differ in how they load these files, so I will check the instructions actually being used.
A written rule helps communicate expectations. It does not enforce a file restriction by itself.
For now, I will learn one assistant before adding another. Each new tool brings settings and connections to review.
Today’s task: open your AI assistant’s access settings and write down what it can read, change, run, and connect to. Leave unanswered questions visible until you have checked them.