[Bug] Agent bypasses safety constraints and policy restrictions

Bug Description
mais um exemplo: ele acha um caminho pra contornar as regras

Environment Info

• Platform: darwin
• Terminal: Apple_Terminal
• Version: 2.1.101
• Feedback ID: d5cca3ca-545a-433d-a7e0-66272f422312

Errors

[{"error":"MaxFileReadTokenExceededError: File content (14136 tokens) exceeds maximum allowed tokens (10000). Use offset and limit parameters to read specific portions of the file, or search for specific content instead of reading the whole file.\n    at ZY7 (/$bunfs/root/src/entrypoints/cli.js:4449:12671)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-11T23:04:22.254Z"},{"error":"Error: File does not exist. Note: your current working directory is /Users/gus/Faz o PIX.\n    at call (/$bunfs/root/src/entrypoints/cli.js:4458:7632)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-11T23:07:16.684Z"},{"error":"MaxFileReadTokenExceededError: File content (72325 tokens) exceeds maximum allowed tokens (10000). Use offset and limit parameters to read specific portions of the file, or search for specific content instead of reading the whole file.\n    at ZY7 (/$bunfs/root/src/entrypoints/cli.js:4449:12671)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-12T00:16:43.204Z"},{"error":"Error: File does not exist. Note: your current working directory is /Users/gus/Faz o PIX. Did you mean swift-architect?\n    at call (/$bunfs/root/src/entrypoints/cli.js:4458:7632)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-12T00:16:52.998Z"},{"error":"Error: Request was aborted.\n    at pE_ (/$bunfs/root/src/entrypoints/cli.js:1268:12089)\n    at next (native:1:11)\n    at sm7 (/$bunfs/root/src/entrypoints/cli.js:7918:9109)\n    at next (native:1:11)\n    at Hp7 (/$bunfs/root/src/entrypoints/cli.js:7923:11439)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-12T00:25:05.245Z"},{"error":"Error: File does not exist. Note: your current working directory is /Users/gus/Faz o PIX/.claude/worktrees/agent-a796b14e.\n    at call (/$bunfs/root/src/entrypoints/cli.js:4458:7632)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-12T00:27:20.913Z"}]