“Actual: the integrations were installed automatically and broad startup instructions were added.”
The reporter’s logs show that opening Postman installed plugins into Codex and Claude Code. The installer then tried to approve its own startup hook, the one step that exists so a human says yes. Seventeen comments later, Postman has not said a word. The app that holds your API keys gave itself permission.