Codex sandbox mode: what it actually contains and where it leaks
Codex CLI runs every command in a restricted shell by default. Here's what that sandbox actually blocks, how to grant network access when you need it, and what it can't protect you from.
Cursor Privacy mode: what it actually does and what it doesn't
Cursor Privacy mode stops your code from being used for training and stored beyond a request. Here's what that covers, what it doesn't, and where the real gaps are.
MCP spec 1.1 ships with stronger permissions and authentication
The Model Context Protocol gets a 1.1 spec adding granular permissions, OAuth flows, and signed packages. Addresses real concerns about supply chain risk.
