The AWS Kiro Flaw Is a Preview of Every Agentic IDE's Future Bug
A hidden white-on-white string on a web page was enough to make AWS's Kiro IDE rewrite its own MCP config and run code, no approval required. Here is why the fix has to sit in front of the model, not inside it.