Thanks for the very detailed response! In this case I believe the right way to conduct the publisher vetting is through the verified accounts process (See Verified Accounts). This will be needed regardless the decision about what permissions can be granted. Thus, I think it will be great if you can fill the request for verified account already to speed up things a bit.
At this point, I’m still more inclined to strict confinement + personal-files. manual-connection is certainly acceptable (after successful publisher vetting). It will also be easier to support the auto-connection if paths could be tightened to logs/session files (see similar request Auto-connect request: codeburn personal-files (ai-agent-session-logs)).