Rip2 is another useful alternative: https://github.com/MilesCranmer/rip2 https://github.com/MilesCranmer/rip2 I have a small wrapper around rip2, aliased to `r

Rip2 is another useful alternative: https://github.com/MilesCranmer/rip2 https://github.com/MilesCranmer/rip2 I have a small wrapper around rip2, aliased to `recycle`; files go to a `graveyard` zfs dataset. I deny `rm` usage for agents, a simple (global) instruction pointing to recycle seems to do the trick for Claude. Seems like a quick win to remove some downside risk and make me a bit more comfortable letting agents run wild in local workspaces.