build1 distinct publisher
Pi ships four tools and no sandbox, so the guardrails are on your build list
A review of v0.84.2 is blunt: no built-in sandbox, no permission layer. Three of the four default tools change the machine, and whatever sits between them and your repo is code you own.
Publishers:dev.to
Reality
- Evidence34
- Adoption16
- Hype gap−8
- Incentives44
- Confidence38