Been driving my agents (CC, currently testing Pi) for a couple of weeks via Emdash. Finally, got a productive worktree setup working. There were still rough edges when I started, but the team has shipping fast [0] and is vaporizing concerns on the fly. Building on top of the native CLI seems to be the right strategy as well.
I used to work at a company (they also dealt with stuff that required NATO clearance) that had extremely restricted internet access in order to protect the internal network. To access the internet each time we logged into a virtual machine controlled by IT and each file downloaded was cleared by IT separately. This obviously slowed us down a lot and since I was an external (student) consultant there we shifted to using laptops + hotspot to actually do our work.
[0] https://github.com/generalaction/emdash/releases/