What is happening?
Agent systems are moving from isolated chat into browsers, repositories and HTTP APIs. That makes the permission boundary part of the product rather than an implementation detail hidden behind the prompt.
Why people care
An agent can only be as safe as the credentials, tools and environment around it. The BragJack report shows why the browser session matters, while Casbin Gateway represents the parallel move toward policy and inspection for agent traffic.
What to watch
Look for systems that make allowed actions, rejected calls and audit evidence visible. The most useful security features will be the ones that fit into the agent loop without turning every operation into an opaque exception.