Anthropic shipped two models today that are the same model, and everything around them moves the control surface off the weights and onto the account, so who you are now decides what identical weights will do.

Anthropic shipped two models today that are the same model, and everything around them moves the control surface off the weights and onto the account, so who you are now decides what identical weights will do.

Four separate releases in 48 hours all rebuild the same layer, the boundary around an agent, and all four start from the assumption that the boundary will be crossed rather than that it will hold.

Four separate agent stories today each rest on one headline number, and in every case the number is accurate while the system underneath it behaves differently, starting with a commissioned 0.00 percent prompt-injection score that coexists with a working remote code execution chain.

Five days of releases and papers all pushed on the same component, the agent's working context, making it shared between people, durable across sessions, and editable by the model, while the failure story everyone passed around this morning is six months old and turns on that context quietly dropping a rule.

The week's sharpest stories all turn on a setting nobody chose, and in most of them the only way to discover the setting was to read a diff.

Five vendors shipped changes in the same 48 hours that all stop accepting a claim about identity or permission at face value, and start demanding proof at the moment of the call.

Four institutions drew the line between machine autonomy and human responsibility this week, each in a different place, and the one that assumed the line already existed found out it was imaginary.

Access to models and to agents is now decided at the identity and ownership layer rather than the API layer, and four separate moves inside 48 hours pushed that gate in different directions.

Anthropic now enforces its anti-distillation thinking-block check by API account creation date, so harness maintainers on older keys will…

OpenMAIC's agent workbench is a genuinely good model for how agents should edit structured artifacts, and its persistence layer ships with…

Obscura replaces Chromium with its own three-week-old Rust paint engine, which turns an agent's screenshot from evidence about the web into…

A statement about the environment is a claim the model will test against evidence, so Anthropic now asks evaluators to phrase agent…

Scientific-agent-skills is MIT at the repository level while each SKILL.md declares its own license, including noncommercial and…

ContextPilot's terminal reward is answer correctness plus format plus an invalid-call penalty, with no term for whether a given deletion…

ChatGPT Work Cloud's /workspace is one writable volume shared across sessions, and a write that lands there crosses no sandbox boundary, so…

Claude Code's auto mode classifier approved the process that started the malware and then denied the command Claude wrote to kill it, which…