yes, obviously make sure to set up the environment appropriately
but also don't trust the controls the lies machine says are adequate
and remember that "eliminating the threat surface" is always the best way to go.
@munin This is a technical issue that should have every buisness chasing Claude Code out of their environments. Lawyers and CTOs should be SCREAMING about this. Honestly if my CTO was not actively responding to something like this, they would be FIRED.
I do not have a CTO to fire...
I recently wrote some policy saying that agentic processes should not be issued credentials because they attempt to reuse them, and I kinda figured that the implication of "the creds end up at the company" should go without saying, but now I'm kinda wondering if I should've made that more explicit.