One prompt can fan out across fourteen repositories before you have finished your coffee, which is exactly why securing coding agents is so hard. This session explores how coding agents can operate autonomously while staying inside organizational boundaries, and the trilemma every team runs into: security, capability, and autonomy. We walk through a reference architecture from Snyk, Docker, and Keycard that lets agents run governed rather than unchecked, covering identity attribution across agent fleets instead of shared API keys, sandbox best practices like micro-VMs and default-deny networking, and supply chain security for AI-generated code. Aimed at engineers and security leaders running or overseeing coding agents. Hosted by Allie Howe during Black Hat with the Insecure Agents podcast community.