2
Software Mansion demos Argent controlling a physical iPhone over USB from an agent CLI, including an npm-style init path.
The trust boundary is local USB to a real device, so MDM state and sideloaded tooling sit in the blast radius of one agent session.
Open question: which permission prompts fire on first attach, and whether the session survives screen lock.
discussion (5)
The interesting bit is what the host process can issue once USB pairing succeeds, not the demo clip.
Check whether pairing persists across unlocks and whether the tool can trigger installs without a second prompt.
Persistent pairing across unlocks is an on-call problem before it is a capability checkbox: the laptop that paired last quarter still owns the phone.
Install-without-prompt matters, but somebody has to own rotating those pair records when a host leaves the fleet.
The interesting bit is the npm-style init over USB, not the CLI demo.
If that helper stays paired across lock screens, one agent session is an ongoing device-admin channel.