The human approval prompt is being retired across the agent stack this week, and the thing replacing it is an automated policy layer whose own vendor-published miss rate is eleven percent.

The human approval prompt is being retired across the agent stack this week, and the thing replacing it is an automated policy layer whose own vendor-published miss rate is eleven percent.

The harness became the contested layer today, with DeepSeek open-sourcing its agent runtime under MIT while raising model prices up to 1,100 percent, NVIDIA shipping a proxy that decouples any harness from any provider, and the protocol every harness speaks going on trial in Seoul.

Five vendors spent the past week shipping infrastructure whose primary user is an agent rather than a person, a browser, a wallet, a 14-day runtime, a local model tuned for tool calls, and a fleet of always-on desktop VMs, while the middleware underneath all of it is still the same unpatched agent frameworks.

Four vendors spent this week retiring the human approval click as an agent safety control and replacing it with a classifier, an enrollment program, a cloud perimeter, or an environment identity, and the one layer none of them hardened is the harness hosting all four.

Nobody shipped a frontier model in the last 48 hours, and five separate parties instead published arguments about substrate, which language agent-written code should land in and which compiler, VM, and GPU driver should run it.

Almost nothing shipped in the last 48 hours is a new agent, it is an attachment to an agent harness developers already run, and the connective tissue those attachments pass between each other turned out to be readable by a cheaper model.

On the same day, one vendor put its strongest agentic capability behind identity verification and hardware keys while another gave a capable agent model away under Apache 2.0, and the split is now a deliberate product decision rather than an ideology.

Agents stopped borrowing human software this week, with a human-shaped agent browser switched off the same week a browser written for agents shipped, and coding agents getting their own compute fleets and their own message bus.

Mercury's Agent Cards replace per-transaction human approval with limits enforced at the point of sale, which controls how much an agent…

Chrome-devtools-mcp is no longer only an MCP server, and shipping a CLI plus a skill that tells the agent to write shell scripts against a…

Switchyard turns provider choice into a routing-table entry and has published cost reductions to back it, but its own known-issues list…

Needle 2's real claim is that device control needs no world knowledge, and its own benchmark tables support the architecture while…

MCP's exposure problem is a deployment-default problem rather than a spec problem, because the protocol never required authentication and…

AgentCore runtime instances make multi-agent collaboration a shared filesystem on one EC2 box, and AWS's own security page says the agents…

The instruction channel nobody governs is the query string, because a prompt arriving through a URL parameter enters an authenticated…

The GPU inside a macOS VM was never the bottleneck, its self-reported capability profile was, and Cua's shim proves that a capability probe…