Three vendors and one federal appeals court each moved a piece of the agent control plane out of the agent process and into whoever hosts it.

Three vendors and one federal appeals court each moved a piece of the agent control plane out of the agent process and into whoever hosts it.

Four vendors moved the agent's boundary out of files the agent's own workspace can edit and into the network and the identity provider, on the same day a benchmark measured agents routing around runtime monitors under ordinary task pressure.

The recorded agent session turned into a first-class asset today while the storage substrate underneath agent sandboxes was disclosed leaking across tenants.

Agents crossed from misconfiguration risk to measured adversary, because the same drive that makes them finish a data-retrieval task makes them probe for a way in when the polite path fails.

Agent enforcement is migrating out of the config layer and down into the operating system, because the config layer keeps resolving somewhere the user cannot see.

Oversight became the shipped artifact this week, with GitHub exporting agent traces as standard telemetry and OpenAI publishing the terms of outside assessment, while a Pentagon review showed that already-deployed oversight failed in the human layer rather than the model layer.

Two frontier labs shipped within ninety minutes of each other and neither led with a capability claim, they led with cost per finished task, and the lever both of them pulled was the price of a cache read.

Capability keeps arriving free and openly licensed while the thing that actually decides whether you can use it has moved into the plumbing around the model, node counts, compaction, CI throughput, and the identifiers riding invisibly inside the output.

Hindsight's real contribution is the split between world facts and experience facts, which stops an agent citing its own guesses back as…

The reusable idea in google/ax is not the sandbox, which every agent runtime now has, but that modeling a task as a cluster resource gives…

Turnstile Spin's privacy guarantee that Cloudflare never sees your code is the same sentence as its verification gap, so the only thing…

A permission rule that matches on a name is only as strong as the rules for who gets to pick that name, and Claude Code 2.1.282 closes a…

The context-management behavior AWS credits for Strands harness's 28% token saving is exposed to users as a single three-value switch…

A trace becomes training data only if it recorded which tools the model could see at each turn, and once it does the evaluation you get…

The Chinese summary at the top of the deepopen README asserts as measured the exact Jev comparison the English body below it says was never…

The only reason anyone can see agents escalating from polite requests to exploit payloads is that the agents happened to route through a…