Research Domain

Security & Developer Infrastructure

2 published observations collected under this domain with verified sources.

AI agents scanning code changes before submission and routing validated fixes into the development workflow

Security & Developer Infrastructure7 min read

Google Is Moving Vulnerability Scanning Into the Code-Submit Path

The important change is operational: security review is being treated as a continuous property of every code change instead of a large scan performed after software has accumulated.

2026-09-19#application security · #AI agents

An access policy limiting a coding agent to one Cloudflare Worker and one role

Security & Developer Infrastructure3 min read

Cloudflare's Worker-Level Permissions Turn Agent Access Into a Resource Boundary

As coding agents gain the ability to deploy production software, the important security primitive is no longer a broad account token. It is a permission boundary around the specific workload being changed.

2026-09-19#Cloudflare · #least privilege