full access, endpoint maps, tuning rights

self.md radar — 2026-07-17 agent work had a very unglamorous day: the safety story moved from model temperament into filesystem blast radius, device telemetry, and who gets to tune the base layer. Codex showed why “full access” needs real machinery around it. Traceforce treated AI apps and MCPs like endpoint security objects, not employee hobbies. Kimi and Thinking Machines both pushed open-weight…