🛡️ Security & Trust

This epic establishes a "safety-first" framework for the Gemini CLI, ensuring the agent operates within strictly defined boundaries.

Key security pillars include:

**Folder Trust** The Trusted Folders feature is a security setting that gives you control over which projects can use the full capabilities of the Gemini CLI. It prevents potentially malicious code from running by asking you to approve a folder before the CLI loads any project-specific configurations from it.

**Isolation:** Supports platform-specific isolation methods, including macOS Seatbelt for lightweight, built-in restrictions and Container-based (Docker/Podman) sandboxing for complete, cross-platform process isolation.

**Risk Mitigation:** By restricting write access and isolating shell commands, the system prevents accidental data loss or system damage, providing a consistent and secure environment for executing experimental AI-generated code.

These measures ensure users can leverage agentic capabilities with full confidence in their system's integrity.