#claude-code

A field survey of local secret stores for AI agents on macOS—and the privilege boundary needed to keep an agent from erasing its own access trail.

A deep-dive security review of Claude Code's internals, reconstructed from its published source maps. Covers permission sandboxing, shell execution, credential handling, remote killswitches, and 10 findings.