AI coding agents are getting longer runs, more context, and more ways to touch production workflows, but this week made the real bottleneck obvious: authorization. Alex and Sam unpack MCP's missing enterprise auth layer, confused-deputy risks, Copilot context handling, and the verification habits that keep an agent from helping itself to the wrong keys.