Tagged MCP · show all articles
Claude Code ships its own permission system, hooks, subagents, and memory files. Each is documented, each has already failed in a specific and traceable way, and each failure is distinct from a generic "AI agent risk."
Claude Code is not a chatbot with a code icon. It is an agentic harness: a loop that calls a model, executes real shell and filesystem operations behind a permission gate, and manages a shrinking context budget one turn at a time.
Coding-agent security is a systems property: untrusted observations become dangerous when they can steer broad tools, credentials, mutable tests, and irreversible actions.
The consequential differences are in trust boundaries, configuration, state, hooks, subagents, and workflow—not whichever model topped a changing leaderboard this week.
Codex, Claude Code, RAG, and MCP make more sense when treated as components in a measured feedback system rather than as personalities with tools.