安全与隐私

Five updates on model routing, sandbox snapshots, Cloud CLI MCP, Data Agent Kit, and sending production failures directly to coding agents.

Seven readings on browser authorization, task cost, isolated workspaces, MCP events, runtime safety, and multi-agent routing, with source limits intact.

EmDash 1.0 separates author identity, signed releases, plugin discovery, and runtime permissions. Installers verify records independently.

How Agents API separates site approval, login credentials, and screenshots, and why network access and site approval cannot replace action-level confirmation.

Cloudflare cf, Kitesurf WebMCP, Claude Sonnet 5.5, and Forge: agent tool interfaces, browser tool calls, and schema-driven generation.

NVIDIA OpenShell places sandbox, network, credential, and policy controls outside the agent workload, with a Supervisor enforcing permission boundaries.

Independent Codex Guardian history shows why generation context and review evidence need separate records, with provenance through resume and rollback.

Seven updates on Codex prewarming and Guardian, remote sandboxes, MCP OAuth, secret stores, and agent software factory production data.

Five updates on tool and skill context budgets, context doctor, persistent scheduling, tool-loop limits, and fail-closed approvals.

Company Brain scopes team-agent memory by room and user permissions, with personal authorization, traceable sources, and separate tool-write access.

Codex network policy changes explain revocable permits for redirects, long responses, and WebSockets, and why tool and network permissions need separate layers.

Seven updates on token efficiency, Codex networking, Copilot Memory, local agent server security, self-practice, skills, and reproducibility.