Checklist
On the Glasswarp side
- Use a dedicated rig when you can — not your everyday PC
- Turn API access on only when you need it (Console → Rigs)
- Scope API keys to one rig when possible
- Keep Live View open on first runs; kill from Console if needed
- Always
end_sessionwhen finished
In your agent code
- Ask a human before delete, send, purchase, install, or security changes
- Allowlist apps the agent may launch
- Set a max steps / max minutes budget
- Don’t put passwords or secrets in prompts
- Log what the agent is about to do
Simple split
You need both.
Patterns
Watch first. Open Live View (or thelive_view_hitl template) before full autonomy.
Confirm risky acts.
Console
In our examples
Helpers live insdk/python/examples/safe_session.py (budgets, intent logs,
allowlist, optional REQUIRE_CONFIRM=1). Templates and demos use them. Long
showcases (Paint / Minesweeper) stay unattended by default — set
REQUIRE_CONFIRM=1 if you want prompts.
