Nothing shipped today was a new model, and almost everything shipped was about what goes into one, which is exactly the capability the industry spent the same 48 hours asking Washington to help it slow down.

Nothing shipped today was a new model, and almost everything shipped was about what goes into one, which is exactly the capability the industry spent the same 48 hours asking Washington to help it slow down.

Frontier models crossed from finding bugs in demos to breaking real systems and real math in the same week, and the defensive response that arrived within 72 hours had to route around the frontier models themselves.

Agent capability now ships in two competing packages, and on the day MCP finalized a governed spec with deprecation policy and OAuth hardening, the trending board belonged to plain folders with a SKILL.md and no governance at all.

The release unit stopped being the model and became the runtime around it, with Moonshot shipping its training cluster alongside its weights on the same day MCP finalized a revision that lets agent servers run on ordinary HTTP infrastructure.

The past week's agent work was almost entirely instrumentation, benchmarks that measure memory, frameworks that make behavior traceable, and system cards with attempt counts, while the capability side kept shipping on its own schedule.

Three institutions at three different layers, a protocol, a platform and a regulator, all shipped agent governance machinery inside the same ten days, while the capability those rules are meant to fence in kept getting handed out for free.

Two days before MCP ships the revision that makes agent tooling horizontally scalable, every fresh security finding says the same thing, which is that nothing above the protocol can prove a human asked.

The agent became the threat actor this week, and the industry answered with governance products and legislation rather than containment.

Anthropic's two cryptanalysis results are a natural experiment showing that the cost of verifying a machine-generated finding is set by…

Codex-security's most instructive design choices are about its output rather than its detection, because a validated AI scan produces a…

MCP's stateless rework deletes the session from the transport and rebuilds it as an explicit handle the model threads through tool…

Microsoft's 95.95% CyberGym result belongs to a hundred-agent harness plus a routing policy plus a proprietary data history, not to the…

Open-code-review's README is an argument that natural-language skills are the wrong container for review work, so it moves file selection,…

AgentENV makes migrating off a hosted sandbox a one-variable change, which means the decision gets made by whoever edits the env file…

VitaBench 2.0's leaderboard shows agentic memory beating full context for 14 of 27 model entries and losing for every top scorer, which…

Scriptc's real question is not whether TypeScript can compile to native binaries but whether a compiler written at agent speed can be…