Browser freshness, containment, and the trust decisions coding agents make when they open pages you did not write.浏览器新鲜度、隔离，以及编程代理打开并非你所写的页面时做出的信任判断。
Treat each AI agent as its own principal—scoped tokens, delegated permissions, one-agent revoke. Compare Mintive, Okta Govern AI Agent Identity, and WorkOS Agent Auth; draw the boundary vs an MCP gateway.把每个 AI agent 当作它自己的主体：范围受限的令牌、委托权限、单 agent 吊销。对比 Mintive、Okta Govern AI Agent Identity 与 WorkOS Agent Auth，并划清其与 MCP gateway 的边界。
Chrome ships fixes; Playwright pins Chromium later. Decide by workload—own-app E2E, agent untrusted browsing, Playwright MCP—using chromiumSandbox, channel chrome, non-root hosts, and egress allowlists. A decision matrix for Claude Code, Cursor, and MCP.Chrome 发布修复；Playwright 稍后才固定 Chromium。按工作负载做决定——自有应用 E2E、代理不受信任浏览、Playwright MCP——使用 chromiumSandbox、channel chrome、非 root 主机与出站允许列表。一份面向 Claude Code、Cursor 与 MCP 的决策矩阵。
Public GitHub repos block pull_request_target by default on December 2, 2026, with brownouts on November 9 and 16. Inventory workflows, switch CI to pull_request, and allow the trigger only for jobs that never execute fork code.公开的 GitHub 仓库将于 2026 年 12 月 2 日默认拦截 pull_request_target，并在 11 月 9 日与 16 日进行限时中断。盘点工作流，将 CI 切换到 pull_request，并仅对从不执行 fork 代码的作业放行该触发器。
Decide when a coding agent should share your real Firefox logins versus driving a separate automation browser. Compare Kitsune, firefox-bridge, Playwright MCP, and Claude in Chrome on session model, profiles, and approval gates—without pretending modes stop prompt injection.判断编程智能体应共享你真实的 Firefox 登录态，还是驱动一个独立的自动化浏览器。在会话模型、配置文件与审批关卡上比较 Kitsune、firefox-bridge、Playwright MCP 与 Claude in Chrome，同时不要假装模式能阻止提示注入。