Stop making your agent ask permission for everything. Or nothing.

A container keeps your agent off the disk. It does nothing once the agent reaches past it. Here is the line worth drawing, plus the classifier code that enforces it.