Install-time supply chain guardrails

One authorization flaw survives both plan and default mode across six agent-built apps

Datadog Security Labs put one document-portal prompt through three coding agents in both modes and audited all six builds. An insecure direct object reference appeared in each, and one build per cell leaves mode effects entangled with noise.