Scanning the Harness: Configuration Exposures in AI Coding-Agent Supply Chains
The study provides reproducible evidence about repository declarations, and identifies concrete opportunities to pin dependencies, review execution pre approval, and check component conformance before distribution or use.