What the agent protects

Places the agent will not touch, old copies of changed files, and the limits of both.

Places the agent will not touch

The agent will not read or change the places on your PC where passwords, keys and sign-in data are kept. These include browser password stores, SSH keys and the agent's own key. It also refuses commands that name those places.

Old copies of changed files

Before a file is rewritten, the agent keeps a copy of the old version for 14 days. So a bad change can be undone.

The limits

These guards protect against accidents. They also protect against instructions hidden in web pages or documents. They are not a sandbox.

A command run through Ponta can do anything you can do on your PC. So only connect PCs and Windows accounts you are happy for your AI app to use. Then check what it does.