Updates, engineering deep dives, and the occasional opinion.
Agent sandboxes need a secret-aware network boundary that keeps real credentials host-side and decides per request.
