An agent can act, not just suggest
An enabled agent workflow can run commands or work with project files in an authorized environment. That is more authority than receiving a text suggestion. Use a dedicated, appropriately permissioned account and a project whose contents you are prepared to expose to the selected tool.
Project file and Git automation requires a supported execution environment. Current local project automation requires a supported Linux host and its working sandbox; other desktop platforms can use an enrolled compatible Linux agent. Automatic creation of agent Git worktrees and automation inside linked worktrees are not available. Do not infer support solely from an agent tool appearing in a menu.
Prepare and supervise a task
- Select the intended agent, server and project.
- Review AI tools on this server where available, including compatibility and credential status.
- Refresh the tool inventory when the environment has changed. Installed does not necessarily mean ready or authorized.
- Review the requested task, permissions and any spending controls before starting it.
- Follow activity and results in the enabled task view.
- Inspect the resulting files, commands or remote state before accepting the work as complete.
A task status is not a substitute for verifying the outcome. Keep backups and review changes before relying on generated work in production.
Budgets and cancellation
Where Recorded spending is available, distinguish configured limits, reserved amounts and recorded spend. Unknown-cost attempts or delayed provider reporting are not proof of zero cost. A displayed budget is not a universal cap on every third-party bill.
Stopping a task or losing the app connection may not undo a completed command or terminate every detached process. Confirm remote state for sensitive operations. A supported isolation mechanism also does not make all permitted file contents or commands harmless.
Use connected assistants to review external tools with persistent access, and privacy and trust before granting access to private projects.