Anthropic
Everything Fervor AI has published that touches Anthropic — 36 pieces, newest first.
-
AI Formal Verification Now Turns Fuzz Tests Into Proofs. Here's What They Actually Cover
AI-written formal proofs now cover real open-source libraries, but a proof only holds for the build it describes, so builders should read the assumptions as closely as…
-
Briefing · October 23, 2026 · morning
Checking agent work is getting cheaper by shrinking what has to be checked, from a proof about compiled library code to an answer picked from a fixed menu to a single…
-
Attack Surface Reduction With Claude: Shrink What Strangers Can Reach Before You Find a Single Bug
Anthropic's attack-surface study shows AI is cheap enough to find code that strangers can reach but should not, and cutting that reach protects you from bugs nobody has…
-
Briefing · October 22, 2026 · morning
Four vendors spent October 20 and 21 shrinking what an attacker can reach (code before login, a token's lifetime, who resells model access, whether an exploit landed)…
-
Briefing · October 19, 2026 · morning
As agents run longer with less human supervision, the weekend's releases keep moving the place where a person can still see what happened, into latent-thought…
-
Anthropic's AI Agents Wait on Humans 80% of the Time. Here's How to Measure Yours.
Anthropic's own data shows its interactive Claude sessions spend around 80% of their time waiting for a person, so the next speedup in agent work comes from measuring…
-
Briefing · October 18, 2026 · afternoon
The bottleneck on agent work has moved to the people around it, as Anthropic's own data puts about 80% of interactive Claude session time on waiting for a human, FDE-Gym…
-
How the Claude Code Team Reviews Code When AI Writes 90% of It
The Claude Code team shows that teams whose code is mostly agent-written should stop asking whether a human read every line and let each change's risk decide how many…
-
Briefing · October 17, 2026 · morning
Three Anthropic posts in two days tie an AI result to a check (rerunnable code for the NIST curve seeds, an automated evaluator for quantum circuits, revert rates for…
-
Briefing · October 15, 2026 · afternoon
Thursday's agent news is about who gets to check the work, with Anthropic giving a METR team employee-like access and no publication veto, Meta releasing Muse Spark…
-
Briefing · October 14, 2026 · morning
The last two days of agent news are about what is allowed to leave the box, with GitHub stopping Anthropic keys at push time, Anthropic fencing Sonnet 5.5 reasoning…
-
Your AI Chat Window Has a Reviewer: What Claude and ChatGPT Safety Escalation Means for the Apps You Build
A Florida arrest report shows AI chat can run through automated threat screening and human review that ends with police, so builders who put a hosted model behind their…
-
Briefing · October 5, 2026 · morning
Over the past week the vendor AI app became the contested surface, as OpenAI announced ad slots for ChatGPT image generation and a Florida arrest report, picked up on…
-
Briefing · September 27, 2026 · morning
Three separate parties inside 48 hours on Thursday and Friday tried to establish what model is actually running inside a product and who answers for it, and not one of…
-
Briefing · September 25, 2026 · afternoon
Three vendors and one federal appeals court each moved a piece of the agent control plane out of the agent process and into whoever hosts it.
-
Briefing · September 24, 2026 · morning
Agents crossed from misconfiguration risk to measured adversary, because the same drive that makes them finish a data-retrieval task makes them probe for a way in when…
-
Claude Code 2.1.271 Makes Network Permission a Property of the Command, Not the Session
Claude Code's per-command alloweddomains turns a network approval from a session-wide grant into a per-command review, and the transferable rule for any harness is that…
-
Briefing · September 15, 2026 · afternoon
The same week the labs escalated the story that agents are becoming dangerous threat actors, three independent outside reads pushed back, and the gap between the…
-
Briefing · September 12, 2026 · afternoon
Every story worth reading this afternoon is about who keeps the record of what a company did, and in each case the only copy belonged to the party being judged.
-
Briefing · September 9, 2026 · afternoon
Today's launches all narrow what an agent is allowed to be, a named caller or a two-megabyte task instead of a general capability, while the day's biggest story is a lab…
-
Briefing · September 5, 2026 · morning
Three separate shippers landed systems this week whose load-bearing part is a checker that sits outside the model and that the model cannot talk its way past.
-
anthropics/commerce-agents: The Checkout URL Never Reaches the Model
Anthropics/commerce-agents is worth reading as a boundary specification rather than a codebase, because its safety guarantees live in methods the backend interface does…
-
Claude Fable 5.1 Requires Data Retention in Copilot, and the Zero-Retention Exemption Expires December 31
Which frontier model your organization may run is now decided by its data-retention posture rather than its subscription, and the exemption keeping regulated enterprises…
-
Astra Hit OpenAI's Critical Threshold. The Safeguard Standard That Was Supposed to Come First Was Never Written.
OpenAI's Preparedness Framework conditions Critical-level release on a safeguard standard it never specified, and the production misalignment monitor arriving in its…
-
K-Dense's Scientific Agent Skills Repo Is MIT. Two of the Skills Inside It Say All Rights Reserved.
Scientific-agent-skills is MIT at the repository level while each SKILL.md declares its own license, including noncommercial and Anthropic-proprietary terms, so the…
-
Claude Code's Auto Mode Approved the Malware. Then It Blocked the Command to Kill It.
Claude Code's auto mode classifier approved the process that started the malware and then denied the command Claude wrote to kill it, which makes the classifier…
-
Claude Code Just Patched Its Third Symlink Deny-Rule Bypass in Eleven Months
A deny rule in an agent harness is not one policy but a separate implementation inside every part of the harness that touches the filesystem, and Claude Code has now…
-
Briefing · August 29, 2026 · morning
Access to models and to agents is now decided at the identity and ownership layer rather than the API layer, and four separate moves inside 48 hours pushed that gate in…
-
Briefing · August 28, 2026 · afternoon
Every significant thing shipped in the last 48 hours is an argument about the execution boundary, where an agent's reach stops, and two of the biggest arguments point in…
-
Briefing · August 28, 2026 · morning
Three labs on three continents published the same finding inside 48 hours, that agent capability now compounds in reusable skill files written outside the weights, and…
-
Claude Code Self-Hosted Environments Move Execution, Not Inference
Self-hosted environments put Claude Code session execution inside your network while prompts, tool results, and transcripts still travel to api.anthropic.com, which…
-
Claude Code Auto Mode Becomes the Default on August 14, and the Study Behind It Indicts the Dialog
The permission prompt failed because it showed you a command string and no context, and Anthropic's fix was to hand that missing context to a classifier instead of to…
-
Claude Opus 5's Automatic Fallbacks Mean You Don't Know Which Model Answered
Automatic fallbacks turn model identity into a runtime outcome instead of a configuration value, and Anthropic's own Frontier-Bench footnote proves it, so log which…
-
The Agent Skills Spec Is Trending on GitHub. Its Entire Contract Is Two Required Fields.
The Agent Skills spec standardizes packaging rather than behavior, its only hard guarantees are naming and folder conventions while the safety-relevant field is…
-
Briefing · July 20, 2026 · afternoon
A control plane arrived (MCP Enterprise-Managed Authorization stable, AWS Claude apps gateway, Google tool-discovery spec, Anthropic CISO playbook) that decides which…
-
Briefing · July 16, 2026 · morning
After a year of shipping agents first, trust and privacy became the product surface: Grok's data-exfiltration cleanup, Codex dangerous-command detection, and Anthropic…