talkarimli

agreed, ttl alone is weak. but brokers get hard with google oauth. scopes are coarse and the agent acts as the user. how does plimsoll handle refresh tokens?

congrats on the launch.

i think the sandbox part is getting commoditized, like others said. the harder part is what the agent can touch inside it.

you connect google, the agent gets access to everything. sandbox protects the host. it does not protect your tokens.

scoped, short lived credentials per task. that i would pay more for. is it on your roadmap?