Agent systems are being boxed in by context, tool, cost, and safety controls
This period’s clearest signal is operational control for agents already doing real work. Context Sculpting tests editable context, clawdcursor exposes guarded desktop actions, and Cursor adds spend controls.