@dagda @druid @snacks Most agents can have their behaviour configured to an extent, like you can tell it hey, don't touch X, Y or Z file in the prompt and it will usually listen. Alternatively, if you sandbox it, you can also set some files to be read-only for the process.
Sometimes I do see the AI changing tests to get rid of a regression, though. If it's just told "make sure all tests pass", it won't really care about the spirit of the statement. Like most tools, it depends how it's wielded.