Permissions, secrets, and sandboxes are moving into the foreground
What this changes for operators
- The harness must make trust state visible: what can be read, what can be changed, which credentials are exposed, and where execution happens.
Primary sources
- commit_diff_reviewed Validate /goal objective length in TUI github.com/openai/codex/commit/f09e1936e0fd464dcea78fe55b84bd20f721cad6
- commit Goal lifecycle metrics github.com/openai/codex/commit/91b735018779daed7c40f86aab9bec9abc9922e8
- commit Spawn MCP for memories github.com/openai/codex/commit/ca257b6ce5db5c2710ec8da290b25b263154e402
- commit Session id github.com/openai/codex/commit/a98623511ba433154ec811fc63091617f5945438
- commit MCP turn metadata includes thread id github.com/openai/codex/commit/fe24a180ab6f6b3639b682cc6a1e71150fea6d48
- commit Plugin share access controls github.com/openai/codex/commit/5119680f85ed01fe039ee8fba0245de24f3a5e37
- commit Bundled Linux sandbox github.com/openai/codex/commit/26f355b67b75b040ff16990d1b2e4e8093479213
- commit_diff_reviewed Auto Memory inbox flow with canonical patch contract github.com/google-gemini/gemini-cli/commit/a7beb890d093e2cf66ed1ac8debff690b75e1f6d
- commit Tighten private Auto Memory patch allowlist github.com/google-gemini/gemini-cli/commit/7fb5146c6b084888b38dea05af6a4e95ea48810a
- commit Workspace trust visible in MCP list UX github.com/google-gemini/gemini-cli/commit/a38f393af77c0ccf50da10d73c84cfb594dd8175
- commit Shell command safety evals github.com/google-gemini/gemini-cli/commit/82f6ea5b61a6321748d81a62d34c62bf7d2c9fa2
- commit Subagents aware of active approval modes github.com/google-gemini/gemini-cli/commit/40b384de2c1d251c9d13a6359216a9e6cff5a254
- commit JSON output for AgentExecutionStopped github.com/google-gemini/gemini-cli/commit/469092a72cbe368b69df25c0caeefbc911b6d6fd
- commit_diff_reviewed Strengthen log redaction for API keys github.com/OpenHands/OpenHands/commit/61e3dc2cadbefd4e0649b7c141ac2335c021ad2b
- commit Remove debug log exposing hook_config secrets github.com/OpenHands/OpenHands/commit/0c6c461555f8651347ed140f1c555ff8a88ddf56
- commit Expose sandbox grouping strategy UI github.com/OpenHands/OpenHands/commit/90cf5f8003c247597481bcbef9a5aa73eb899e10
- commit Proxy Tavily MCP through app server github.com/OpenHands/OpenHands/commit/949a15a560ef90cd3dd7f18baf6955430401edb4
- commit Move server content to app_server github.com/OpenHands/OpenHands/commit/5232d96dab0ca98e691d6307bd0759e943220d1c
- commit Inject user secrets into ACP subprocess env github.com/OpenHands/OpenHands/commit/cf156b0073350ca8e93067bc2f4ae18b90537a0a
- commit Self-hosted GitLab support github.com/OpenHands/OpenHands/commit/4e63531fa6595ec55102f08ef129845931fcd8ff
- commit Removed V0 runtime github.com/OpenHands/OpenHands/commit/e86067c15b54242fd611877aa9038a2f7a219658
- commit_diff_reviewed Recover externalized channel plugin from stale config github.com/openclaw/openclaw/commit/329580c64d13657592c3fabb97ff567c2e292bb6
- commit Label Claude CLI OAuth status github.com/openclaw/openclaw/commit/2b4b60b5514b47d8e242b9b11d9b395037e6674b
- commit Prevent Discord voice self-feedback github.com/openclaw/openclaw/commit/1c2832526f65cf23b469e9a1dc5694915c5be548
- commit Honor Telegram access group allowlists github.com/openclaw/openclaw/commit/b6ae0b83a61a1f779ee41b5d639b6049bfd422ce
- commit Document sub-agent security boundaries github.com/openclaw/openclaw/commit/33b112ad314dc8d9dfe0f5a68caed4811a23245a
- commit Bound live exec output events github.com/openclaw/openclaw/commit/3ee7c02bcacfdf6327747c1fe24dd6d11de8612a
- commit Coarse agent turn timeline spans github.com/openclaw/openclaw/commit/61223a74a43fd8768c426d5b22f1633dbad37477
- commit Show Codex tool progress in channel drafts github.com/openclaw/openclaw/commit/3f210b10ce3a19ef6a04205aa7420353945567a2
- commit_diff_reviewed Adapters declare runtime command spec for remote provisioning github.com/paperclipai/paperclip/commit/90631b09b36fa028ad24ca5375bfa50e3602799c
- commit Fix remote workspace environment shaping github.com/paperclipai/paperclip/commit/856c6cb192e53a992875821297b5fd8d29c95c2d
- commit Add sandbox callback bridge for remote environment API access github.com/paperclipai/paperclip/commit/a4ac6ff133fbe8bdb82f4046fda85f7cb372b6a9
- commit Add E2B sandbox provider plugin github.com/paperclipai/paperclip/commit/4ef969f0840810527333aa6ee44fed89f4551f7c
- commit Issue cost summaries github.com/paperclipai/paperclip/commit/c4269bab59fff7a73ff31797578cc97ece7f160f
- commit First-class security agent role github.com/paperclipai/paperclip/commit/c036bbfa98494dcfe2521aab65019a4cd021c769
- commit Pause and resume sidebar agents github.com/paperclipai/paperclip/commit/43b0f2ae582b18f2872ae60bf468f54b99b614ba
- commit_diff_reviewed Replace browser-use agent with native browser github.com/agent0ai/agent-zero/commit/983d431a5eb785eb9deba9fdfd471fa93f349603
- commit Persistent full Chromium runtime for Browser github.com/agent0ai/agent-zero/commit/fa7eef1919901093b117a98ad6e402d809687cf6
- commit Browser multi-tab awareness and modifier-key click github.com/agent0ai/agent-zero/commit/5012dd3128aa6218cc55f6cbce8be42b2db2fee4
- commit Browser screenshot previews in tool messages github.com/agent0ai/agent-zero/commit/c2fb2c3c94e1e1c85b783252332b3fc003f39f2b
- commit Linux Desktop skill controls github.com/agent0ai/agent-zero/commit/62ac20e7b248179825e05664c1df97ebc6214c54
- commit Desktop document canvas github.com/agent0ai/agent-zero/commit/24dd548ebf221e397323b5aa3a509f037fb1b9ae
- commit OAuth disconnect and remaining quota visibility github.com/agent0ai/agent-zero/commit/0da8f3dc2b640efbce22499053507837101fdf6f
Signal metadata
Source findings
- Codex: Goals, Sessions, Memories, And Sandboxes Are Becoming The Product Surface 2026-05-07-codex-stateful-control-plane
- Gemini CLI: Memory Is Being Treated As A Reviewable Change 2026-05-07-gemini-reviewable-memory-and-trust
- OpenHands: The Open-Source Agent Platform Is Hardening Around App-Server Reality 2026-05-07-openhands-platform-hardening
- OpenClaw: Accessibility Is An Agent Capability 2026-05-07-openclaw-everyday-agent-surfaces
- Paperclip: The Agent Company Needs A Runtime Contract 2026-05-07-paperclip-agent-company-control-plane
- Agent Zero: The Workcell Is Becoming A Visible Computer 2026-05-07-agent-zero-full-computer-workcell
Featured in
- The Harness Leaves The Chat Box / 2026-05-07
Run: 2026-05-07-commit-harvest-2026-04-23_2026-05-07-frontier-v1
Schema: bitter.frontier_signals.v0 / ID: 2026-05-07-permissions-secrets-and-sandboxes
Research evidence and publication history are open in the repository.