AI agents are getting wallets, and a permission prompt is already lying to one. Claude Code's VS Code plugin shows a symlinked path as inside your workspace when it resolves outside it, so a prompt-injected agent could reach ~/.ssh. Reported unpatched as of v2.1.322 (UltraStrike). The CLI shows the real location. ultrastrike.io/2026/11/claude-code-vscode-plugin-workspace-escape-via-misleading-permission-prompt/ Brave Search API now takes x402 payments: no account, no API key, an agent pays $0.005 per request in USDC. brave.com/blog/search-api-agentic-payments/ LibreAGI is a private torrent tracker for keeping copies of open models alive if their hosts vanish. libreagi.com/ Daily reads like this: t.me/kazanireads
