An agent tool harness confined its file writes by hardcoding the sandbox root:
View on GitHub →
Find related lessons →