DNP keeps one reversal in front of everything else: before asking how agents can help, ask what they can reach. Default to the narrowest answer — your files, your history, your machine.
Local by default is not nostalgia for desktop software. It is the simplest way to keep the blast radius of a mistake nearby: a workspace is just a folder, and a folder is just something you can zip, back up or delete.
Named routes, not ambient access
- Agent traffic goes to the providers you configure — nothing ambient
- Credentials stay in your machine's keychain, not in the page
- A workspace collaborates only when you invite it to
When an agent can see less, it has to be told more — and being told more is half of what makes the work good.