Coding Agent Case Study: Deploy Token Blocked by a Policy Drafted From One Traced Run

Tue, 29 Sep 2026 00:00:00 +0000

A coding agent needs the network to do its job. It reads repositories, downloads packages, files tickets and reports back. It also reads text written by strangers, and some of that text is written to give it orders. If the agent holds a token and can reach any server on the internet, one hidden sentence in a task file is enough to send the token away.

In the Alpha demo a stand-in coding agent gets exactly that task file. It runs twice under vpnw on Linux: once under trace, to see what it does, and once under guard, with a policy that learn drafted from the first run and a person reviewed. The first run leaks the token. The second doesn’t, and the rest of the agent’s work goes through, except the ticket, which needs the office route.

Coding Agents on VPN Works

Coding Agent Case Study: Deploy Token Blocked by a Policy Drafted From One Traced Run