安全与隐私

Stripe Link CLI separates purchase intent from payment permission. Agents request a purchase and receive one-time credentials only after user approval.

Stripe Link CLI 让 Agent 先提交购买请求，用户确认后再获得本次支付需要的一次性凭证，把购买意图和支付权限分开。

本期收录 GitHub Copilot 本地 Sandbox、Agensh、CliffCompaction、SWE-Serve，以及 Copilot OpenTelemetry。

GitHub Copilot local sandboxing, Agensh, CliffCompaction, SWE-Serve, and enterprise OpenTelemetry support in the Copilot app.

Plugin4Shell exposes a supply-chain gap: a pinned SHA records the expected version, but installers must also verify the actual HEAD after checkout.

Plugin4Shell 暴露了一个供应链边界：固定 SHA 只写下期望版本，安装器还必须在 checkout 后验证真实 HEAD。本文结合 Git 文档、本地无害复现和 GitHub 分支限制解释机制。

LangGraph human-approval schemas, Deep Agents safeguards for parallel writes to the same file, and tighter OAuth boundaries in the MCP Ruby SDK.

本期收录 LangGraph 人工审批结构约束、Deep Agents 同文件并行写保护，以及 MCP Ruby SDK OAuth 边界收紧。

OpenAI Agents SDK runtime-boundary fixes, stage-aware memory retrieval in AdaRepair-Mem, and static configuration checks with Agent Lint.

本期收录 OpenAI Agents SDK 运行时边界修复、AdaRepair-Mem 阶段化记忆检索，以及 Agent Lint 静态配置检查。

OpenCloak replaces names, emails, and other personal data with stable stand-ins locally, then restores them when the model responds.

OpenCloak 在本地把姓名、邮箱等敏感字段替换成稳定假值，模型响应回来后再恢复，减少个人信息直接发送给 AI 服务。