the developer laptop is the first production environment for agents (opens in new tab)

Docker published a post this week about securing AI agents, and the most interesting part was not really Docker. The post makes the now-familiar argument that agents need execution isolation, tool access control, identity and credential management, and runtime monitoring. It also says the quiet part clearly: permission prompts are not enough. That should be obvious. It is not obvious enough. Most of the discussion around coding agents still treats the developer machine as a convenient place w...