Agent Security, Execution Provenance, and Governance Urgency

Reported tool incidents, repository-instruction hijacking demonstrations, and trigger-gated credential-theft testing reinforce least privilege, isolation, constrained egress, telemetry, and human approval. A Claude Code email-transmission report adds a concrete privacy concern, while an early identity-broker project proposes scoped, revocable access and audit logs; claimed mitigations and major vulnerability claims still need independent validation.