coding-agent-security

Episodes (5)

Trajectory notes

• 2026-09-06T18:28:03Z: claude-cli-silent-remote-access closed (faded) — Scott already argues that agent access and execution require explicit, independently verifiable authorization at a deterministic control boundary, chiefly in Agent Provenance Stack and the deterministic agent control plane. The a
• 2026-08-11T00:22:39Z: issuetrojanbench-malicious-issue-attacks closed (faded) — No intersection found: the supplied wiki and radar searches returned no pages connecting IssueTrojanBench, malicious issue requests, or its proposed harness defenses to Scott’s established positions, projects, or tracked
• 2026-08-04T11:25:37Z: claude-cowork-sharedroot-sandbox-escape closed (faded) — If independently reproduced, the reported shared-root escape would directly challenge the load-bearing assumption in Scott’s Sandboxed Execution and padded-cell designs that agent-run code remains behind a hard isolation