Your Folder
Is Now a Door.
This week I trained one of my most senior staff — senior in age, almost sixty — to work with an AI agent. First thing she did: connected her entire working folder. Her files and the agent's workspace, one and the same. I stopped the session and gave her a warning I'll repeat here: if you share your live working folder with an agent, you lose the right to be surprised when something goes missing or gets edited without your consent. She looked at me like I was being dramatic. I wasn't. Let me explain what changed.
File management used to be a habit. Now it's a perimeter.
For thirty years, messy folders only punished their owner. Files scattered across the PC, documents on the Desktop, three versions of the same spreadsheet in three places — annoying, time-wasting, but private. Nothing could reach into that mess except you.
An AI agent ends that era in one click. The folder you connect is the agent's entire world — it can read everything in it, write over anything in it, and reorganise whatever it believes needs reorganising. Which means the question "which folder do I share?" is no longer a convenience question. It is an access-control decision — the same class of decision as handing someone a key.
Here's the framing that made it click for my team: connecting a folder to an agent is hiring a very fast new employee and giving them full write access to your originals — on day one, with no supervisor. You wouldn't do that with a human. Yes, the agent asks permission before destructive actions — but permission dialogs suffer the same fate everywhere: after the tenth one, people click yes without reading. One tired "yes" against your only copy is all it takes.
Two generations, same mistake
The senior made the trust version of the mistake: share everything, because the machine is helpful and asking questions feels rude.
My younger staff make the chaos version. Long before agents arrived, their file management was already a mess — folders assigned anywhere on the PC, no structure, no logic. The worst case I found: a .env file — the file that holds passwords and API keys — sitting on the Desktop. In the agent era, that isn't untidiness. The Desktop is exactly the kind of folder people casually connect. That key file is now one careless "share" away from being read by anything, and one sync away from being sent somewhere it shouldn't be.
Opposite generations, opposite instincts, identical result: no boundary between what the machine may touch and what it must never see. Neither of them was ever taught this — because until last year, nothing automated could reach their mess.
The structure that fixes it
The fix is not complicated. Four rules:
One — agents get project folders, never your world. Create a dedicated folder per project and connect that. Never the whole drive, never your live working folder, never the Desktop. The blast radius of any mistake is one project, not your career.
Two — secrets live in one place agents don't get. Keys, passwords, .env files: one dedicated folder, never inside anything you connect, never on the Desktop. If an agent needs a credential, it gets a placeholder; the real value stays outside its world.
Three — anything an agent can edit must be versioned. Git, or at minimum automatic backup. Version control is the consent log and the undo button — "edited without your consent" stops being a disaster and becomes a diff you can review and reverse. No versioning, no write access. That's the trade.
Four — the Desktop is a lobby, not a filing cabinet. Things pass through; nothing lives there.
That's it. Not an IT department. Four habits — or rather, four defaults, which brings me to the part of this story I'm least proud of.
I shared my structure. Nobody cared. Then I understood why.
I showed the team my own folder structure — the one that lets AI agents work across our company daily without ever touching a secret or losing a file. Polite nods. Zero interest. For a day, I gave up.
Then I recognised the lesson, because I'd already written it about instructions: a rule that depends on being remembered is a hope, not a control. Teaching structure is asking people to remember. It doesn't survive contact with a busy Tuesday.
So the real fix isn't a better training session. It's making the structure the default: new staff get the folders pre-created on day one; the agent workspace is already separated from the private one; the secrets folder already exists; version control is already on. Nobody has to be interested in file management — the system is interested on their behalf.
The bottom line
AI agents didn't create the file-management problem — they raised the price of it. What used to cost you a lost afternoon can now cost you a client folder or a leaked key, at machine speed, with your own tired "yes" as the signature. Decide what the machine may touch before it touches anything. And if your team won't adopt the structure — build it under them.
Published by IMA AI — July 2026. AI agents work across our company every day — inside structures designed so the worst they can do is a reviewable diff. That design is the difference between adopting AI and gambling on it.