agent-tool-permissions - The LGTM

The LGTM

Sign in Subscribe

agent-tool-permissions

A collection of 28 posts

Qwen Code 0.19.2 Makes Permission Policy a Remote API, Not a Slash Command

Qwen Code 0.19.2 Makes Permission Policy a Remote API, Not a Slash Command

Qwen Code 0.19.2 is not really about a new command. It is about admitting that a local coding agent is no longer just a terminal process with a chat loop attached. Once the same agent can be reached through a daemon, an ACP client, a browser surface, and

OpenClaw’s Inline-Eval Patch Is the Boring Guardrail Vibe Coding Needs

The boring parts of agent security keep doing the real work. OpenClaw PR #96216 is not glamorous: it teaches strict inline-eval detection that python3.13 -c, /usr/bin/pypy3.10 -c, PHP -B/-E/-R, and R/Rscript -e/--exec are still inline code execution. That sounds obvious. It was

OpenClaw Is Closing the Policy Gap Between Who Asked and What Tool Runs

OpenClaw Is Closing the Policy Gap Between Who Asked and What Tool Runs

Approval gates have a branding problem: they look like security controls, but too often they are just modal dialogs with incomplete context. OpenClaw PR #96211 is interesting because it goes after the field most agent platforms quietly hand-wave: requester origin. Not just “what tool is about to run,” but who

Copilot CLI GA Makes the Terminal an Agent Workbench, Not Just a Prompt Box

Copilot CLI GA Makes the Terminal an Agent Workbench, Not Just a Prompt Box

GitHub’s new Copilot CLI terminal interface is generally available, and the least interesting thing about it is that it has tabs. The interesting part is what those tabs imply: the terminal is becoming an agent workbench where GitHub context, MCP servers, skills, plugins, hooks, custom agents, approvals, and repo

NVIDIA OpenShell Is the Interesting Part of the Agent Toolkit Story

NVIDIA OpenShell Is the Interesting Part of the Agent Toolkit Story

The agent market has spent too much time pretending the hard problem is choosing the smartest model. It is not. The hard problem is giving an agent enough authority to be useful without giving it enough authority to become a root-cause analysis document. NVIDIA’s Agent Toolkit announcement is interesting

Qwen Code v0.19.1 Turns Auto Mode Safety Into Runtime Policy

Qwen Code v0.19.1 Turns Auto Mode Safety Into Runtime Policy

Qwen Code v0.19.1 is the kind of release that will not win a benchmark slide and absolutely should make security reviewers pay attention. The headline is not that Alibaba’s coding agent got better at writing code. It is that the runtime got more willing to say “no”

OpenClaw’s OPENCLAW_SESSION_ID PR Turns Bash Commands Into Auditable Agent Work

OpenClaw’s OPENCLAW_SESSION_ID PR Turns Bash Commands Into Auditable Agent Work

A single environment variable is not usually a headline. In an agent runtime, it can be the difference between “some shell process did something” and “session X, acting on request Y, spawned this command at this time.” OpenClaw PR #96104 adds OPENCLAW_SESSION_ID to bash tool subprocess environments, and