A current concern of mine, also when using Claude Cowork, is that I don’t want files to be modified if I can’t control their versions/ if they aren’t versioned at all.

And even though it doesn’t actually get full sudo access, giving an LLM permission to edit files without being able to track exactly what it’s doing still feels risky.