Three separate shippers landed systems this week whose load-bearing part is a checker that sits outside the model and that the model cannot talk its way past.

Three separate shippers landed systems this week whose load-bearing part is a checker that sits outside the model and that the model cannot talk its way past.

Four launches in four days all moved the same piece, the control point sitting between an agent and everything it can touch, and each one moved it somewhere different.

Two frontier labs shipped cyber-specialized capability inside 48 hours, one gated behind a vetted-defender program and one subsidized by a billion dollars, while a specialized scanner already in curl's rotation found six real CVEs in a week where two labs' security products reported nothing new.

Three agent launches in three days ship the same primitive, a human confirmation in front of the irreversible step, while a measurement of the retrieval layer those agents read finds six of ten citations outside the hundred-thousand most-visited sites.

The unit that now carries agent capability between machines is an installable Agent Skill fronted by an instruction file, and every governance control that shipped this week reaches models, MCP servers and source files instead.

Frontier models are now shipping in matched pairs built on shared foundations and separated by which safeguards an account is entitled to, which turns capability into a permission rather than a property of the model.

This week's announcements all describe machinery that sits between an agent's decision and the action landing, moving the safety boundary from a property of the weights to a runtime component that watches a job while it runs.

Anthropic shipped two models today that are the same model, and everything around them moves the control surface off the weights and onto the account, so who you are now decides what identical weights will do.

An AI reviewer only buys you reliability when it is structurally unable to cooperate with the thing it reviews, meaning a different model…

ArcBox moves the agent trust boundary from the prompt down to a microVM, which is the correct place for it, but the project's own…

The license badge on a local AI repo describes the code while the downloaded weights carry their own separate and often non-commercial…

MCP tool annotations are self-declarations by the server you are trying to constrain, so they belong in your UX and never in your safety…

Magnitude ships install-by-prompt as its documented happy path, which hands your coding agent a global npm install plus write access to its…

The empty findings lists in curl's viral AI-security comparison were a one-week delta from scanners already in the project's rotation, not…

Utopia's append-only decision ledger is enforced by Postgres triggers that its default single-role deployment is privileged enough to drop,…

An audit of 7,534 citations behind AI product recommendations found six in ten pointing outside the 100,000 most-visited sites, with three…