Headless Cursor SDK 3.7: What Auto-Review Still Misses | PAI
7,000+ teams will see this in search before they run Cursor SDK 3.7 unattended. Where auto-review helps, where nested subagents inherit dangerous tools, and the permissions.json gates that matter.
What changed
No material change recorded since 3 July 2026. How records are made
Timeline
No events attached in current seed. Method
PSF mapping
This entity's public record implicates D1-INPUT-BOUNDARY-REGISTER, D2-OUTPUT-VALIDATION-CONTRACT, D3-DATA-HANDLING-RECORD, D4-OBSERVABILITY-SIGNALS, D5-MODEL-CHANGE-GATE, D6-AUTONOMY-OVERSIGHT-MATRIX, D7-TOOL-PERMISSION-REGISTER, D8-PROVIDER-FALLBACK-PLAN: inspect linked events and sources before changing production controls.
| Assessment | Type | Confidence |
|---|---|---|
| Headless Cursor SDK 3.7: What Auto-Review Still Misses | PAI — insight article record | insight article | 74% |