Here's the joke nobody's laughing at yet: we spent a decade building SIEMs and EDRs to watch what humans do on endpoints, and we just handed a new class of non-human actor commit access, shell access, and package manager access without blinking. Context An AI coding agent (Claude Code, Codex, whatever your team has wired into CI or your local dev box) isn't a chatbot anymore. It reads files, runs commands, installs dependencies, opens PRs. That's a real attack surface, and it's a...