AI now produces code and bug reports faster than people can review them, and this week's answers ship as context packs and contribution policies rather than smarter models.

AI now produces code and bug reports faster than people can review them, and this week's answers ship as context packs and contribution policies rather than smarter models.

Today's AI news is about the parties you never see in the loop, with Notion customers learning their AI chat transcripts sat at a breached inference vendor, GitHub shipping Claude Fable 5.2 with Anthropic retaining prompts by default, and DeepMind putting a proof checker between AI-written verification and Signal's cryptographic code.

This weekend's agent tools make deliberate choices about what an agent holds, with Google's Elephant Goldfish Model keeping reviewers out of the conversation, billion-context folding old turns into summaries, and llama-modchip squeezing a 284B model and its cache into 64 GB of RAM.

The weekend's agent stories are about what agents leave behind, with Apiiro counting 1,122 public Claude Code permission files that hold secrets, LoreKit arguing that memory files need a shared format, and MaxxBench showing several models' published coding scores fall when task requirements change.

Agent work is moving out of the chat window and into the background, and LangChain, GitHub and Cloudflare each spent November 5 and 6 on the supervision, scheduling and identity pieces that background work needs, with LangChain's notifications in beta and Cloudflare's identity scheme mostly on paper.

Memory stopped being a storage problem this week, with Anthropic publishing an offline pass that rewrites an agent's notes against its own transcripts while a reverse-engineering write-up showed macOS keeping an undocumented, unreviewed knowledge graph of its owner.

Saying no to an agent is moving into defaults and dashboards, with Claude Code 2.1.319 refusing calls its server cannot review and Cloudflare handing site owners a per-agent policy that can end in Block.

Agents now run for hours on someone's behalf, and November 5 showed both sides of the identity question, with Claude Code writing a user's email into its own web requests while Cloudflare proposed a signed way for agents to say who sent them.

A coding agent's web knowledge is frozen at its training data, and Modern Web Guidance shows the cheap fix is a small current guide…

AI vulnerability scanning has moved the bottleneck from finding bugs to triaging them, so the controls that matter now are intake controls…

The riskiest copy of an AI conversation is the secondary one kept for analytics or training at a vendor you never picked, so map those…

Billion-context swaps blind context truncation for summaries the model writes and can reopen, so before trusting it with a weeks-long…

An approval rule only binds an agent if it runs somewhere the agent cannot reach, and Pinky shows the design by enforcing phone approvals…

Llama-modchip shows a 284B mixture-of-experts model can run on a 64 GB desktop with no GPU, but its speed comes from a custom file format…

As coding agents move into the chat apps where non-engineers work, the question that decides whether it goes well is who reviews what the…

An agent's saved approval is a file that travels with the repo, so Claude Code's word-for-word allow rules put 1,122 public copies of…