Droid should not have file write permission outside project.

[accelas]

GLM 4.6 model have tendency to replace slash character in file path with underscore when it's nearly at max context window. eg /home/user1/work/project is changed to /home/user1/work_project. This is observed for both z.ai's coding plan and droid-core model.

When droid is running under /home/user1/work/project , model may instruct droid to touch files under /home/user1/work_project.

Regardless how model behave, the droid program itself should not give model permission to touch files outside of current project folder.

[accelas]

On 2nd though, maybe there should be some kind of whitelist. for instance bazel always store its build/test artifacts under ~/.cache/bazel folder.

[jakob1379]

Its a sane default that the droid should be allowed to operate outside the initial workspace think rm -rf ~/... I agree it should be something that can be allowed, but it should not be default behavior.

[factory-davidgu]

It is possible to configure this now!

https://docs.factory.ai/cli/configuration/sandbox#sandbox