In what world would we run a bad actor on an end-user device? Why do we let one of the most powerful hacking tools in the world run in the user's context, inside our security boundary?

Most enterprises control the server side of their coding agents, then run the agent itself on a laptop with little limit on its blast radius, and hope. In this talk, Michael Forrester covers CLI coding agents as a platform service: each in its own runtime and identity on Kubernetes, with explicit grants to explicit services, MCP servers included. Every session reports to OpenTelemetry, and its history shows how the work can improve.

Attendees will see:

Session telemetry
Which tool calls and MCP servers ran
Session history turned into what matters to the business