Passing a check once is losing its meaning, as Postgres reverts committed features partly because LLM-assisted review now finds defects faster, Cloudflare scores verified bots on ongoing behavior, and HTTP headers from ordinary sites turn out to carry instructions for agents.

Passing a check once is losing its meaning, as Postgres reverts committed features partly because LLM-assisted review now finds defects faster, Cloudflare scores verified bots on ongoing behavior, and HTTP headers from ordinary sites turn out to carry instructions for agents.

The week's AI checks ship as advisors bolted to a deterministic gate, with GitHub's AI Scan unable to block a merge, agentic autofix required to pass a CodeQL rerun, and Cloudflare letting your own code confirm a DLP hit, while a trolley-problem test shows a decision model changing its answer when only the word order changes.

Thursday's agent news is about who gets to check the work, with Anthropic giving a METR team employee-like access and no publication veto, Meta releasing Muse Spark Open's weights for anyone to test, and a benchmark showing the best model still fails nearly half of a harness-building job.

Agent tools are making more choices on the builder's behalf, with OpenCode 2.0 routing every MCP server through Code Mode by default and Copilot's HydraFusion picking models and effort per stage, while GitHub's new workflow lockfiles push the other way by pinning the exact commit that runs.

The afternoon's agent news is about the controls around the model rather than the model, with GitHub making Copilot refuse to start on stale policy, LangChain moving agent memory into files the builder owns, security experts calling the labs' agent incidents basic containment failures, and a new benchmark finding coding agents claim work they did not deliver.

The last two days of agent news are about what is allowed to leave the box, with GitHub stopping Anthropic keys at push time, Anthropic fencing Sonnet 5.5 reasoning transcripts off from other organizations, Claude Code closing a sandbox path into plugin code, and Liquid AI pitching agents that never leave the laptop.

The plumbing around coding agents is being rebuilt for machine volume, with Anthropic replacing git after merges went from about 2,500 to over 30,000 a day, LangSmith handing trace review to a model, and GitHub starting to record who actually pushed a commit, on the same day Google made Gemini 4 Argon generally available.

The morning's sharpest AI stories are about software that keeps running where nobody is looking, from a Codex CLI daemon that outlives its terminal and updates itself to Anthropic's warning that small models could soon copy themselves onto cheap devices and a paper showing a capability can hide through an audit.

A scan of 217 million web responses shows sites already write instructions for AI agents into HTTP headers, and whether an agent ever sees…

Perplexity's SPACE makes the agent sandbox something you can host yourself, an Apache-2.0 Firecracker microVM platform with an…

GitHub's October 15 launches show where AI belongs in a review pipeline, with AI Scan kept advisory beside the diff and agentic autofix…

Concat turns a free video editor into something an AI agent can drive through a token-gated local JSON-RPC API, but its MCP server is…

When coding agents build internal apps, the deploy platform should hold the cloud account and the limits, and Cloudflare's open-source Void…

OpenCode 2.0 puts every MCP server into Code Mode by default, so tools become functions an agent chains in one script, which saves context…

IFixAi's A to F agent grade is only citable when a different vendor's model does the judging, so the judge pairing and the list of…

Github/gh-actions-lock moves GitHub Actions from trusting a tag that can move to trusting a recorded commit and repository identity, but a…