A much stronger agent model arrived today at an unchanged price while its own system card shows misuse refusal slipping, and the gap between capability and oversight shows up in that refusal rate, in who holds the keys to agent memory, and in teams that no longer understand the code their agents ship.

A much stronger agent model arrived today at an unchanged price while its own system card shows misuse refusal slipping, and the gap between capability and oversight shows up in that refusal rate, in who holds the keys to agent memory, and in teams that no longer understand the code their agents ship.

The weekend's agent stories all end with someone other than the operator paying for an unbounded agent, while the controls that would have bounded it are cheap, sit with the builder, and mostly go unset.

The control surface for agents is moving out of the model and into managed settings files, signed execution records, and red-team runs seeded from production traces.

Three separate parties inside 48 hours on Thursday and Friday tried to establish what model is actually running inside a product and who answers for it, and not one of them got the answer from the vendor.

Trending AI Briefing: Saturday, September 26, 2026 (afternoon ET) The question of who owns an agent's unsupervised actions got three…

Four parties in two days treated an agent's own session record as an input rather than exhaust, feeding it into fix generation, adversarial testing, telemetry spans and a breach reconstruction no vendor published.

Three vendors and one federal appeals court each moved a piece of the agent control plane out of the agent process and into whoever hosts it.

Four vendors moved the agent's boundary out of files the agent's own workspace can edit and into the network and the identity provider, on the same day a benchmark measured agents routing around runtime monitors under ordinary task pressure.

OpenRig makes the size and shape of an agent team a file you can read before anything launches, which is the control a runaway fan-out…

Telling a model it may return null cut invented fields from 71% to 20% across sixteen models, which makes permission to say nothing the…

Sonnet 5.5's own system card shows its raw refusal on malicious computer-use tasks falling while its cyber skill jumps at an unchanged…

Attestix's hash-chained, signed audit trail is useful evidence plumbing for agents today, but its compliance layer hardcodes a third-party…

Univer's real contribution is a verification surface that lets an agent inspect, screenshot and diagnose the document it just edited…

Mobile-mcp drives phones from the native accessibility tree instead of screenshots, which makes agent phone control cheap and precise and…

OpenTelemetry marks the requested model conditionally required and the responding model only recommended, so the one field that answers…

AvailableModels matched model IDs by version prefix, so every managed allowlist silently permitted new releases, and the two settings that…