Beat: agent-identity

9 pieces filed under agent-identity, newest first.

• GitHub's Bug Bounty Restructure Answers AI-Generated Reports With a Price, Not a Filter

  GitHub answered the flood of AI-generated vulnerability reports by repricing the act of submitting rather than trying to detect machine-written text, and the same policy…

• AgentForger: ChatGPT's Approval Gate Was Something the Prompt Could Turn Off

  AgentForger's real lesson is that the approval setting lived in the same writable space as the untrusted instruction that edited it, so any agent builder where a prompt…

• Briefing · July 26, 2026 · afternoon

  Two days before MCP ships the revision that makes agent tooling horizontally scalable, every fresh security finding says the same thing, which is that nothing above the…

• OpenAI Presence Gives Each Agent One Job and Only That Job's Keys. The Scoping Is the Product.

  OpenAI Presence makes the deployable unit of an enterprise agent one narrow job with least-privilege access plus policy, evaluation, and a human escalation path, and…

• MCP Enterprise-Managed Authorization, the Claude Apps Gateway, and ARD All Stop at the Same Line

  Every agent governance layer that shipped or stabilized this month authorizes connections and not actions, and each spec says so in its own security section (EMA stable…

• Briefing · July 20, 2026 · afternoon

  A control plane arrived (MCP Enterprise-Managed Authorization stable, AWS Claude apps gateway, Google tool-discovery spec, Anthropic CISO playbook) that decides which…

• Briefing · July 19, 2026 · afternoon

  Regulators, payment rails, and hardware makers began treating the agent as a first-class actor (EU Android access, x402 payments over HTTP, Codex hardware) faster than…

• 1Password for Claude Logs an Agent In Without the Password. The Part It Doesn't Fix Is the Part That Bites.

  Zero-exposure credential delegation is a real fix for credential leakage (a leaked model context can no longer leak your login, and Agentic Mode cages the vault) but…

• Briefing · July 17, 2026 · morning

  The interesting layer moved from the model to the permission boundary around it: 1Password credentials Claude never sees, MCP auth moving onto OAuth and OpenID Connect,…