should we also restrict a model if it can clone a repo, set up the tooling and build a project?