https://relmhq.com/blog/ Field notes on autonomous agents. en https://relmhq.com/blog/auto-mode-is-not-a-security-boundary/ https://relmhq.com/blog/auto-mode-is-not-a-security-boundary/ Sun, 09 Aug 2026 09:00:00 +0000 On August 14, Auto Mode becomes the default in Claude Code: a model reviews each command instead of a human approving it. It caught 89% of dangerous commands in testing; humans caught 13.6%. That is a real improvement, and it is still not a security boundary. https://relmhq.com/blog/three-incidents-three-failures/ https://relmhq.com/blog/three-incidents-three-failures/ Sat, 30 May 2026 09:00:00 +0000 Three high-profile coding-agent incidents from the past two months — a Cursor agent deleting a production database, a Gemini agent exfiltrating a token after prompt injection, and an npm supply-chain compromise — and why they don't collapse into a single problem.