Tag
#provenance
-
Coder registry compromise: the origin pool was the identity
Attackers joined the Cloudflare pool behind Coder's module registry and served credential-stealing Terraform modules. TLS held. The trust behind it didn't.
-
Your agent's action is logged. Its reason is gone.
Agent audit trails record the tool call and drop everything the agent read before making it. The reason lived in a context window nobody kept.