Security · Posture /fix-this-first, ranked by leverage

How safe the fleet is — and exactly what to fix first

▲ 2 wk

4 points to targetmean across 7 instrumented agents

Highest-leverage move: fix “No tool-approval policy” on 5 agents = +50 posture. Worst agent marketing-gpt at 25.

reported 76 worst-case band ↓ 7 target 80~2w to target

Critical agents

1/ 8

posture < 50 · highest blast radius

Instrumentation

88%

7 of 8 reporting telemetry

Shadow agents

blind

installed but unmonitored

Weeks to target

at recent slope

Fix this first — ranked by leverage

ROI = agents affected × points each

Clear “No tool-approval policy” on 5 agents — the single biggest available move (+50 posture). Do it and the fleet jumps fastest toward 80.

No tool-approval policy

5 agents × −10 pts each

+50 2

Running as root

2 agents × −25 pts each

+50 3

Approvals & sandbox bypassed (yolo)

1 agent × −35 pts each

+35 4

Sandbox disabled

1 agent × −20 pts each

+20 5

Permission checks bypassed

1 agent × −15 pts each

+15

Posture index — trending to target

6 weeks · target ≥ 80

Up +18 over 6 weeks (58 → 76). At the recent slope, ~2 more weeks to hit 80.

−6w · 58target 80now · 76

Posture bands

8 agents

Hardened (≥ 80)50%4

At risk (50–79)38%3

Critical (< 50)13%1

4/8 hardened · moving 3 at-risk into the green is the path to 80.

Effective posture — pricing the instrumentation gap

shadow agents have no telemetry · their posture is assumed

Reported (instrumented only)

76/ 100

1 shadow agent excluded.

−7→

Worst case (shadows = Critical)

~69/ 100

If unmonitored agents are as bad as our worst.

Instrumenting Zed Agent closes a blind spot worth up to 7 points of uncertainty — you can't claim 76 while 1 agent is dark.

Posture regression — current vs worst observed

agents that have recovered from a worse state

support-copilotworst observed 50 · Running as root

now 65▲ 15

Critical & at-risk agents

posture < 80 · lowest first

Agent	Owner	Severity	Governance	Top risk factor	Score
marketing-gpt	root	Critical	ungoverned	Approvals & sandbox bypassed (yolo)	25
Zed Agent shadow	jane	Elevated	ungoverned	No tool-approval policy	60
support-copilot	svc-support@qpoint.io	Elevated	governed	Running as root	65
Codex CLI	dev-7f3@duck.com	Elevated	ungoverned	Sandbox disabled	70

At-rest installations — coverage

4/5 instrumented · 1 unmonitored

Adapter	Version	Executable	Config	Coverage
claude-cli	2.1.161	/Users/mark/.local/bin/claude	present	instrumented
claude-desktop	1.9255.2	/Applications/Claude.app/Contents/MacOS/Claude	present	instrumented
cursor-cli	3.5.17	/Applications/Cursor.app/Contents/MacOS/Cursor	present	instrumented
cursor-desktop	3.5.17	/Applications/Cursor.app/Contents/MacOS/Cursor	present	instrumented
zed	0.229.0	/Applications/Zed.app/Contents/MacOS/zed	present	unmonitored

Do next

Derived: fleetPostureScore · hardeningROI · postureBands · postureIndexTrend · weeksToTarget · shadowAgents — from app/data/c16-fleet.ts (qcontrol /api shape). Score = 100 − Σ FACTOR_PTS deductions. Inline PostureHero / LeverageRank / TrendArea / BandBar are proposed additions.