--- kind: trend trend_doc_id: 1665 granularity: day period_start: '2026-06-28T00:00:00' period_end: '2026-06-29T00:00:00' topics: - AI agents - credential security - coding agents - agent workspaces - model routing - software economics run_id: materialize-outputs aliases: - recoleta-trend-1665 tags: - recoleta/trend - topic/ai-agents - topic/credential-security - topic/coding-agents - topic/agent-workspaces - topic/model-routing - topic/software-economics language_code: en pass_output_id: 288 pass_kind: trend_synthesis --- # Agent products are centering on bounded access and visible supervision ## Overview Today's corpus treats agents as operational tools that need safer credentials, clearer work surfaces, and tighter supervision. DevFortress supplies the strongest risk evidence; Iris and Notion show the product pattern: assign agents small bounded work where review and permissions stay visible. ## Findings ### Credential security for agent execution The highest-risk item is credential exposure. The DevFortress piece argues that agents, Model Context Protocol (MCP) servers, CI/CD tools, IDE plugins, and cloud integrations often run close to reusable secrets. Its cited incident set is concrete: 28,649,024 new secrets exposed on public GitHub in 2025, 64% of credentials leaked in 2022 still active in January 2026, and 24,008 unique secrets found in MCP configuration files. The proposed control is credential aliasing. Agents and integrations receive an alias while the real credential stays in controlled infrastructure. The product claims include session monitoring, scoped credentials, signed payloads, anti-replay checks, and under-two-second quarantine or revocation. The evidence is strong on incident scale, but the product itself has no third-party benchmark, false-positive rate, or latency distribution in the excerpt. #### Sources - [AI Agent Credential Crisis: Six Months of Incidents](../Inbox/2026-06-28--ai-agent-credential-crisis-six-months-of-incidents.md): Summary gives the credential-aliasing proposal, incident metrics, MCP secret counts, and limits of the evaluation evidence. ### Agent work inside team tools Two items frame agents as assignable coworkers inside existing collaboration surfaces. CrewAI’s Iris works through Slack: an engineer tags `@Iris`, and the agent can file Linear issues, run Claude Code, open GitHub pull requests, and report back in the thread. The concrete example is small and useful: a two-line whitespace fix that would have taken nine manual steps was closed in about three minutes, with a test added for the reported newline case. Notion’s /Dev product makes the same bet at workspace scale. Users can @mention agents in pages, comments, or chats. Notion Workers run isolated code for syncs, custom tools, webhooks, and external API calls on Notion-managed infrastructure. The product claims are about shared permissions, review points, and agent-visible workspace data; the excerpt gives no reliability or latency numbers. #### Sources - [My coworker Iris isn't a person](../Inbox/2026-06-28--my-coworker-iris-isn-t-a-person.md): Summary gives Iris workflow, the three-minute example, and the lack of benchmark evidence. - [/Dev/Notion](../Inbox/2026-06-28--dev-notion.md): Summary describes Notion agents, Workers, permissions, review flows, and absence of quantitative results. ### Operator control for coding agents Coding-agent use is being shaped around human attention. Mux is a narrow tool for people running several Claude Code sessions in tmux. It reads Claude Code status files, matches them to live panes, and opens an fzf overlay that sorts waiting sessions above working or idle ones. The useful action is direct: press Enter and jump to the blocked session. The Usefulness of AI Agents essay reaches a similar operating rule through personal use. The author reports better results when coding agents are limited to one or two files, asked to state a plan before coding, and gated before changes above 100 lines or multiple files. The claim is qualitative. Agents helped with smaller prototypes and setup work, while research outputs looked coherent but weak as research. #### Sources - [Mux – A tmux overlay for managing Claude Code sessions](../Inbox/2026-06-28--mux-a-tmux-overlay-for-managing-claude-code-sessions.md): Summary explains Mux status tracking, sorted overlay, one-key jump, and lack of benchmark data. - [The Usefulness of AI Agents](../Inbox/2026-06-28--the-usefulness-of-ai-agents.md): Summary gives the author's restrictive coding-agent rules and qualitative assessment of agent usefulness. ### Routing and product value under model abundance Role-model and Comparative Advantage in Software both treat general models as a resource that needs product-level discipline. Role-model proposes an open protocol for routing AI requests by task, capability, policy, modality, cost, locality, and observed endpoint behavior. Its RouterDecision records the chosen endpoint, fallbacks, exclusions, and selection reasons. The excerpt provides a design and runtime claim, with no routing-quality or latency measurements. Comparative Advantage in Software gives the business version of the same constraint. If a customer can ask a large language model (LLM) to create a tool, paid software needs a clearer reason to exist. The essay names two levers: reduce the tokens needed for a task, or raise correctness through persistent state, evaluations, typed data, and error-correcting workflows. Restaurant operations supply the concrete example: automated procurement needs precise state and approvals because purchasing can affect about 30% of revenue. #### Sources - [Role-model: protocol for assigning the right AI model for the right job](../Inbox/2026-06-28--role-model-protocol-for-assigning-the-right-ai-model-for-the-right-job.md): Summary states Role-model's task- and capability-aware routing protocol, decision artifacts, and lack of quantitative results. - [Comparative Advantage in Software](../Inbox/2026-06-28--comparative-advantage-in-software.md): Summary gives the token-cost and correctness argument, restaurant examples, and 30% revenue claim.