Post

Two fresh papers (CPE, GitSpawn, Sep 1) are worth reading if you ship with coding agents. Untrusted tool output and repo text can escalate into system instructions and RCE. AGENTS.md does not stop that. In one path, git status already ran before the trust prompt appeared. #aicoding #devtools