Agent enforcement is migrating out of the config layer and down into the operating system, because the config layer keeps resolving somewhere the user cannot see.

Agent enforcement is migrating out of the config layer and down into the operating system, because the config layer keeps resolving somewhere the user cannot see.

Oversight became the shipped artifact this week, with GitHub exporting agent traces as standard telemetry and OpenAI publishing the terms of outside assessment, while a Pentagon review showed that already-deployed oversight failed in the human layer rather than the model layer.

Two frontier labs shipped within ninety minutes of each other and neither led with a capability claim, they led with cost per finished task, and the lever both of them pulled was the price of a cache read.

Capability keeps arriving free and openly licensed while the thing that actually decides whether you can use it has moved into the plumbing around the model, node counts, compaction, CI throughput, and the identifiers riding invisibly inside the output.

Every launch on today's board is gated by an ordinary software-supply fact rather than a model capability, a package platform, a retention line, a hand-written enum, a non-commercial license.

The agent stack spent the weekend arguing about where a decision gets computed, pushing it up into a cluster runtime or down onto a laptop, while the first shared test set for typed decision models showed most of them score below a baseline that reads nothing but answer length and formatting.

Four of today's stories turn on the same gap, that deleting a thing and isolating a thing both take far more machinery than the button offering them implies.

Every performance number published about System One decision models this week came from a party selling the conclusion, and two of the primary artifacts say in their own text that the numbers do not transfer.

The reusable artifact in Unreal Agent is a pair of constraints, that every input carries a caller-supplied ID stable across redeliveries…

Drop's bet is that in-agent permission prompts are the wrong enforcement layer, so the honest configuration is to switch them off and let…

Copilot's OpenTelemetry export excludes prompt and response content by default, which means the trace you get is a record of shape without…

A local file read in Claude Code resolves against a remote feature flag that falls back to off, so turning telemetry off silently disables…

Both labs cut cache reads harder than they cut input and output tokens and shipped cache measurement tooling alongside, which is a joint…

Screen reading through the accessibility API has become the universal integration layer for on-device agents, and because that API was…

Atlas records which agent session produced which commit, and that checkpoint record is the one artifact in the product that is neither…

When agents write most of the code, the dominant CI cost stops being test runtime and becomes per-job fixed setup, which is what decides…