Living off the coding agent: Two tales of tunnels and LaunchAgents

On a macOS developer workstation, vendor-signed coding agents (Claude Code and Cursor) parented shells that performed credentialized HTTP to free tunnel brokers (localhost.run/lhr.life, Cloudflare Quick Tunnels, ngrok), established reverse tunnels (cloudflared/ngrok), and installed LaunchAgent persistence to maintain access. The report reconstructs the multi-day sequence observed in telemetry, enumerates production rules that fired (e.g., Persistence via GenAI Tool, Unusual Network Connection), highlights dual-use detection challenges when trusted agents are parents, and provides practical triage and prevention recommendations.