POSTMAN'S INSTALLER APPROVED ITS OWN HOOK
A GitHub issue shows Postman desktop 12.33.4 installing plugins into Claude Code and Codex without asking, then writing the trust record for the startup hook it had just added. The self-approval was merged on purpose three days earlier, and Postman's own AI reviewer flagged it three times.