问得多了，人就会习惯性地点"同意"，确认就只剩一个动作。与其让你每次判断"这个命令危不危险"（这本来就很难），不如保证判断错了也能恢复。

Asked often enough, anyone starts clicking "allow" by habit, and the check becomes a reflex. Rather than making you judge whether each command is risky (hard even for experts), make sure a wrong call can be undone.

电脑坏之前的截图显示，agent 在系统的临时文件夹里干活。那里会被系统自动清理，也没有备份。它还在给自己写扩展，并打算自己回答自己的确认框。

The screenshots before your laptop died show the agent working in the system's temp folder, which Windows cleans out and nothing backs up. It was also writing itself an extension and planning to answer its own confirmation box.

有些命令行工具遇到中文路径会出乱码甚至出错。文件夹里面的文件可以用中文名，路径本身用英文最省心。

Some command-line tools garble or choke on Chinese paths. Files inside the folder can have Chinese names; the path itself is safest in English letters.

它的安全感来自"能撤销"：agent 在固定的文件夹里工作，文件有 git 和坚果云两层备份，系统有还原点。

The safety comes from undo: the agent works in one folder, files have two backup layers (git and Nutstore), and the system has a restore point.

很多网站用同一个密码，一个网站泄露，所有账号都危险。密码管理器给每个网站生成不同的长密码。和 agent 一起工作也会用到各种账号和密钥，放在这里比放在聊天记录或文本文件里安全得多。

Reuse one password and a single leaked site exposes every account. A manager gives each site its own long password. Working with an agent means accounts and keys too, and a vault is far safer than a chat log or a text file.

开源（代码公开，谁都能检查）、免费版就够用、电脑手机都能同步。备用：再用 KeePassXC 存一份加密的密码库，放在工作文件夹里，坚果云会自动备份它。万一 Bitwarden 连不上，你还能离线打开。

Open source (anyone can inspect the code), the free plan is enough, and it syncs laptop and phone. Fallback: an encrypted KeePassXC copy in your work folder, which Nutstore backs up. If Bitwarden is ever unreachable, you can still open your passwords offline.

• 用"密码短语"：四五个随机的词串在一起，长但好记。Bitwarden 自带生成器。
• 写在纸上、放在家里是可以的；不要存在电脑或手机里。
• 打开两步登录，把恢复代码和主密码写在同一张纸上。

• Use a passphrase: four or five random words strung together, long but memorable. Bitwarden has a generator.
• Paper at home is fine; never on the laptop or phone.
• Turn on two-step login, and write the recovery code on the same sheet.

VPN 公司能看到你访问了哪些网站（内容大多是加密的，但网址看得到），客户端软件通常也有很高的系统权限。所以"是谁做的、从哪里下载的"值得知道。

A VPN company sees which sites you visit (content is mostly encrypted, addresses aren't), and its client usually runs with high system rights. So who made it, and where you got it, is worth knowing.

不会。系统还原只恢复系统设置和程序，不动个人文件（文件靠 git 和坚果云保护）。还原点之后装的程序会被移除。

No. A restore rolls back system settings and programs, not personal files (git and Nutstore guard those). Programs installed after the point are removed.

一份写给 agent 的常驻说明，每次开始对话它都会先读：你是谁、用它做什么、喜欢怎样的回答、有哪些规矩（比如"改我的文件前先备份原件"）。agent 会一问一答地和你一起写，第一个问题是：你平时用 agent 做什么？

Standing notes the agent reads at the start of every chat: who you are, what you use it for, how you like answers, your rules (say, "back up my originals before editing"). The agent writes it with you, one question at a time, starting with: what do you use the agent for?

最值得练的不是记住命令，而是一个循环：提问 → 试一试 → 看结果 → 记下学到了什么 → 再问。让它解释"为什么"、出小测验、听你用自己的话讲一遍。不懂的地方，第一反应就是问它。

The skill worth practising isn't memorising commands; it's a loop: ask → try → look at the result → note what you learned → ask again. Have it explain why, quiz you, hear you explain it back. When something's unclear, your first move is to ask it.

Windows Terminal 的设置里都能改。中英文混排推荐"更纱黑体"（Sarasa Mono SC），中文和英文能对齐。终端是你每天看的地方，弄得顺眼很值得。

All of it lives in Windows Terminal's settings. For mixed Chinese and English, Sarasa Mono SC keeps the two aligned. You look at the terminal every day; making it pleasant is worth it.

分支就是"平行存档"：开一条分支大胆尝试，不满意就回到主线，什么都不丢。以后还可以把项目放到 GitHub 上。

A branch is a parallel save: try something bold on a branch, and if you don't like it, go back to the main line with nothing lost. Later, projects can live on GitHub too.