self.md radar — 2026-10-23
a browser session without the password
1Password is adding a per-login approval step to its personal-agent rollout. The agent can reach a signed-in browser session while the password and one-time code stay inside 1Password.
1. 1Password approves one login at a time
At a sign-in form, the agent requests a specific login; the person approves or denies it on their own device; 1Password fills the password or one-time code directly into the browser. The agent gets the working session, not a copy of the credential.
That boundary has a limit. 1Password says the agent may still view information or take actions inside the authenticated account. The approval protects the vault; it is not a review of every action after the page opens.
reading: 1Password for Agents
2. OpenShell puts sandbox-template metadata behind an allowlist
OpenShell v0.1.5 puts Kubernetes sandbox-template annotations and labels behind operator allowlists, while leaving the CLI’s --label path unaffected. The release also rejects the reserved internal.openshell.ai/ annotation prefix on sandbox creation and configuration updates.
That makes the upgrade partly an audit: a timed-out sandbox can fail to recover if its template carries metadata that the new allowlist does not permit.
reading: OpenShell v0.1.5 release notes
3. Fabric locks an address after ten bad API keys
Fabric v1.4.546 locks a client address for one minute after 10 invalid API keys arrive within a minute. Later requests get HTTP 429 and Retry-After, including a request with a valid key; requests with no API key do not count as guesses.
The release also bounds the tracked-client table and prunes unlocked entries while retaining active lockouts, so the new guard does not grow its client state without limit.
reading: Fabric v1.4.546 release notes
Related self.md routes
- Personal AI OS tools — the control-plane map for personal agents, receipts, memory, and tools
- Browser agents — where browser automation helps, where it lies, and how to keep it observable
- Sandboxing and security — give agents useful power without giving them the whole house