（一）盗窃、损毁油气管道设施、电力电信设施、广播电视设施、水利工程设施、公共供水设施、公路及附属设施或者水文监测、测量、气象测报、生态环境监测、地质监测、地震监测等公共设施，危及公共安全的；
OpenAI’s Codex CLI takes a similar approach with explicit modes: read-only, workspace-write (the default), and danger-full-access. Network access is disabled by default. Claude Code and Gemini CLI both support sandboxing but ship with it off by default.
，推荐阅读safew官方下载获取更多信息
Artificial intelligence
"It makes you feel a better person," he says.