Personal Agents Are Coming, and Their Security Model Is the Open Problem
Personal AI agents will soon handle real work across our email, calendar, and files. Town is a strong early example. The catch is that the security model is not solved yet, and you can read the open problems directly in the agent's own pre-prompt, because the defense for each one lives there.