Index
Every note published on Windtask, newest first.
Treat each AI agent as its own principal—scoped tokens, delegated permissions, one-agent revoke. Compare Mintive, Okta Govern AI Agent Identity, and WorkOS Agent Auth; draw the boundary vs an MCP gateway.
Stop guessing from viral 'digital snitch' posts. Decide by account type whether self-assessment runs, what retention applies, how Cyber Verification handles research false positives, and why Claude Code telemetry is not server-side assessment.
Decide which file owns a third-party hook, which official unload removes it, and which managed hooks a user disable cannot turn off after an orchestrator or desktop installer rewrites Claude, Codex, Cursor, or Copilot config.
Decide which parallel-agent conflict class you are solving before spinning N worktrees. Compare deterministic intent claims (scope+operation), contract-first merges, ownership orchestration, and LLM mutual review—with Foremerge as a worked case, not a launch post.
Chrome ships fixes; Playwright pins Chromium later. Decide by workload—own-app E2E, agent untrusted browsing, Playwright MCP—using chromiumSandbox, channel chrome, non-root hosts, and egress allowlists. A decision matrix for Claude Code, Cursor, and MCP.
Public GitHub repos block pull_request_target by default on December 2, 2026, with brownouts on November 9 and 16. Inventory workflows, switch CI to pull_request, and allow the trigger only for jobs that never execute fork code.
Decide when a coding agent should share your real Firefox logins versus driving a separate automation browser. Compare Kitsune, firefox-bridge, Playwright MCP, and Claude in Chrome on session model, profiles, and approval gates—without pretending modes stop prompt injection.
Coding agents create VMs, databases, and deploys mid-task—then sessions end without teardown. A practical FinOps playbook for read-only audit, human-confirmed cleanup, Claude Code/Codex/MCP blind spots, and what --verify can (and cannot) prove.
A stub so the site has a second category. The FinOps essay is the real article on windtask.com.