I gave my self-hosted AI shell access — then immediately sandboxed every conversation

I wanted my assistant to be able to actually do things. Run scripts, read files, execute code. The...