The agent skill turned into a package format this year, and the packaging shipped well ahead of the registry, the signature, and the scanner that a package format normally needs.

The agent skill turned into a package format this year, and the packaging shipped well ahead of the registry, the signature, and the scanner that a package format normally needs.

Every launch in the last 48 hours assumes nobody will actually read the agent's work, and ships a substitute for reading it.

Every significant capability gain published in the last 48 hours came from changing the harness around the model instead of the model itself, and none of it shipped with a security evaluation.

Three labs spent this week engineering containment against their own models, and the thing being contained is offensive security capability that arrived faster than any of them planned for.

Five gates went up around the AI stack in forty-eight hours, and the GitHub daily board is quietly voting for everything you can pick up and carry out.

AI now reviews code and attacks it, and only the attacking side gets to iterate against live feedback.

Three separate moves in 48 hours all changed the layer between your app and the model, and not one of them was a model.

Four separate things that were free or open picked up a gate in 72 hours, and the counter-tooling is already climbing the trending charts.

OpenBot's reusable idea is the ordering rather than the sandbox: the audit row is written before the action so a crashed or refused call…

Teams with coding agents went from 21 to 65 pull requests a week while the number of humans reading them stayed flat, so review has already…

StateM's reproducible claim is the roughly $15 price rather than the 95.3% score, because Terminal-Bench's published leaderboard subtracts…

Bankruptcy court has become a training-data supply line, and the privacy machinery in the code protects the customers a dead company had,…

Foundry moved agent tool governance into per-request parameters, and Microsoft's own operational checklist says the denylist form of that…

Career-ops's real product is a refusal threshold, and its real risk is that the same agent enforcing the threshold will rewrite the rubric…

Watermarks-remover is the clearest published account of why text watermarking fails as a trust primitive, because its README documents that…

DSH Desktop's own known-limitations section says its auto-updater validates the download container rather than publisher identity, which is…