Field notes on coding agents, leftover cloud infrastructure, and the bills that outlive the chat.https://windtask.com/en-ushttps://windtask.com/articles/ai-agent-identity-permissions-mintive/https://windtask.com/articles/ai-agent-identity-permissions-mintive/Treat each AI agent as its own principal—scoped tokens, delegated permissions, one-agent revoke. Compare Mintive, Okta Govern AI Agent Identity, and WorkOS Agent Auth; draw the boundary vs an MCP gateway.Wed, 04 Nov 2026 00:00:00 GMTSecurityai-agentsagent-identitymintiveoktaworkosmcpiampermissionszero-trusthttps://windtask.com/articles/claude-self-assessment-snitch-privacy/https://windtask.com/articles/claude-self-assessment-snitch-privacy/Stop guessing from viral 'digital snitch' posts. Decide by account type whether self-assessment runs, what retention applies, how Cyber Verification handles research false positives, and why Claude Code telemetry is not server-side assessment.Wed, 04 Nov 2026 00:00:00 GMTPrivacyclaudeself-assessmentprivacyzdrcyber-verificationretentionclaude-codehttps://windtask.com/articles/coding-agent-hooks-hygiene-settings-json/https://windtask.com/articles/coding-agent-hooks-hygiene-settings-json/Decide which file owns a third-party hook, which official unload removes it, and which managed hooks a user disable cannot turn off after an orchestrator or desktop installer rewrites Claude, Codex, Cursor, or Copilot config.Wed, 04 Nov 2026 00:00:00 GMTDeveloper Toolscoding-agentshooksclaude-codecodexcursorsettings-jsonagent-orchestratorspostmanhttps://windtask.com/articles/foremerge-parallel-agent-intent-conflicts/https://windtask.com/articles/foremerge-parallel-agent-intent-conflicts/Decide which parallel-agent conflict class you are solving before spinning N worktrees. Compare deterministic intent claims (scope+operation), contract-first merges, ownership orchestration, and LLM mutual review—with Foremerge as a worked case, not a launch post.Wed, 04 Nov 2026 00:00:00 GMTDeveloper Toolsforemergeparallel-agentscoding-agentsclaude-codecodexcursorintent-conflictsmulti-agenthttps://windtask.com/articles/playwright-chromium-lag-coding-agents/https://windtask.com/articles/playwright-chromium-lag-coding-agents/Chrome ships fixes; Playwright pins Chromium later. Decide by workload—own-app E2E, agent untrusted browsing, Playwright MCP—using chromiumSandbox, channel chrome, non-root hosts, and egress allowlists. A decision matrix for Claude Code, Cursor, and MCP.Wed, 04 Nov 2026 00:00:00 GMTSecurityplaywrightchromiumcoding-agentsclaude-codecursorplaywright-mcpbrowser-securitychromium-sandboxhttps://windtask.com/articles/github-pull-request-target-default-block/https://windtask.com/articles/github-pull-request-target-default-block/Public GitHub repos block pull_request_target by default on December 2, 2026, with brownouts on November 9 and 16. Inventory workflows, switch CI to pull_request, and allow the trigger only for jobs that never execute fork code.Wed, 04 Nov 2026 00:00:00 GMTSecuritygithub-actionspull-request-targetci-securityworkflow-policysecretshttps://windtask.com/articles/kitsune-firefox-mcp-coding-agents/https://windtask.com/articles/kitsune-firefox-mcp-coding-agents/Decide when a coding agent should share your real Firefox logins versus driving a separate automation browser. Compare Kitsune, firefox-bridge, Playwright MCP, and Claude in Chrome on session model, profiles, and approval gates—without pretending modes stop prompt injection.Wed, 04 Nov 2026 00:00:00 GMTSecuritykitsunefirefox-mcpcoding-agentsclaude-codeplaywright-mcpbrowser-securityshared-sessionhttps://windtask.com/articles/coding-agent-cloud-waste-agent-leftovers/https://windtask.com/articles/coding-agent-cloud-waste-agent-leftovers/Coding agents create VMs, databases, and deploys mid-task—then sessions end without teardown. A practical FinOps playbook for read-only audit, human-confirmed cleanup, Claude Code/Codex/MCP blind spots, and what --verify can (and cannot) prove.Tue, 03 Nov 2026 00:00:00 GMTFinOpscoding-agentscloud-wasteclaude-codecodexmcpfinopshttps://windtask.com/articles/sample-categories-are-paths/https://windtask.com/articles/sample-categories-are-paths/A stub so the site has a second category. The FinOps essay is the real article on windtask.com.Tue, 03 Nov 2026 00:00:00 GMTNotesmeta