Notes
Simon Willison’s Weblog — practitioner tools, agent work and security linksSecrets outside the agent conversation: where does authority actually end?When agents become the interface, who maintains the software underneath?The agent host as an operating system problem: permission, patching, and detection