> Treat each agent like a non human identity

Why special-case it as a non-human? I wouldn't even give a trusted friend a shell on my local system.