Realistically, the entire chain proposed by your safebots - I like the idea - but I cannot see viable ways to get it actually deployed in a useful manner.
Especially with the hardware stuff, this is plainly put unachievable by many IT departments.
The fact that models vastly outpaced their harness and permission systems - I wouldn't dare to doubt this fact.
Claude Code on auto is still rolling a dice with its sonnet classifier - whether that IaC action I told it and explicitly stated multiple times it is permitted and authorized to run - yet it always randomly allows or denies it.
Therefore this is totally still a unsolved, perhaps unsolvable problem.
Especially with the hardware stuff, this is plainly put unachievable by many IT departments.
The fact that models vastly outpaced their harness and permission systems - I wouldn't dare to doubt this fact.
Claude Code on auto is still rolling a dice with its sonnet classifier - whether that IaC action I told it and explicitly stated multiple times it is permitted and authorized to run - yet it always randomly allows or denies it.
Therefore this is totally still a unsolved, perhaps unsolvable problem.