Agents stopped borrowing human software this week, with a human-shaped agent browser switched off the same week a browser written for agents shipped, and coding agents getting their own compute fleets and their own message bus.

Agents stopped borrowing human software this week, with a human-shaped agent browser switched off the same week a browser written for agents shipped, and coding agents getting their own compute fleets and their own message bus.

Three separate disclosures this week describe attacks in which the model never gets a turn at all, and the defenses that shipped in the same 48 hours moved enforcement off the prompt and into the request path.

The scaffolding around the model is now the product, and yesterday it started editing itself, which arrived in the same 24 hours as a zero-click exfiltration proving nobody has a containment story for a harness that rewrites its own prompts and skills.

In four days the industry issued agents the full kit of a human employee (a computer, a wallet, an identity, an operating system) and every control shipped alongside sits in the identity and scope layer, not in the model, which is a quiet concession the week's Hugging Face forensics make explicit.

Four separate disclosures in 48 hours all land on the same control surface, a human reading a diff, and the same week's biggest launch is an orchestrator built to run agents while that human is asleep.

Three separate stories today all break at the same joint, systems that verify which identity signed an action but never verify what caused that identity to sign, which is the exact gap Cloudflare is now selling a product into.

Every significant agent launch on today's board answers the same two questions, where the agent is allowed to work and how a human checks what it did, which means the industry has quietly stopped competing on agent capability and started competing on containment and review.

Three projects on today's board run frontier-scale models on machines that cannot hold them by streaming weights off NVMe, which moves the binding constraint on local inference from RAM to storage bandwidth and makes every headline memory number misleading on its own.

Qwen-MM-Plugins ships vision into rival harnesses as installable skill-plus-MCP pairs rather than as a model upgrade, but everything past…

Pi hardens the npm supply chain as reviewed code and hands runtime permissions back to you entirely, and its own containerization doc names…

Kitesurf's own benchmark table shows it is slower than Chromium on wall time and three to seven times cheaper on CPU and memory, which is…

Inference hooks finally gives a security team one inline checkpoint across chat, Claude Code, and Cowork with nothing installed on user…

The permission prompt failed because it showed you a command string and no context, and Anthropic's fix was to hand that missing context to…

Bb's load-bearing decision is that agents are first-class operators of the same API the UI uses, and its thread model gives managers the…

Agent harnesses can now create, update, and delete their own prompts, skills, memory, and sub-agents from inside a running task, and not…

CoreBreak is an authorization bug rather than a prompt attack, because three separate runtimes executed tool calls without ever checking…