NVIDIA OpenShell and the case for agent controls outside the harness
NVIDIA's open-source OpenShell enforces agent policy outside the model and harness. What version 0.1.0 does, what is only a reference design, and what to copy.
5 min read
Blog tag
#Agents
AI agents that plan and act: coding agents, background agents and multi-agent setups.
Using the OWASP Top 10 for Agentic Applications as an engineering checklist
How to turn the ten OWASP agentic AI risks, from goal hijack to rogue agents, into concrete backlog items for a coding-agent rollout this quarter.
6 min read
Protocol pivoting: when MCP trust leaks into another agent protocol
Research on protocol pivoting shows how an injected instruction can cross from MCP into agent-to-agent delegation. Why per-protocol fixes miss it.
SWE-Bench Pro Verified: when coding agents were reading the answers
SWE-Bench Pro Verified closes gold-patch leakage channels and refines 102 tasks. Some model scores fall sharply once agents can no longer fetch the solution.
4 min read
Claude Code hooks can now fail closed when enforcement breaks
Claude Code v2.1.295 adds onFailure: block for command and HTTP hooks so missing scripts, timeouts and unexpected exits deny the action instead of failing open.
The ICO's agentic AI call for evidence: what engineering teams should prepare
The UK ICO's call for evidence on agentic AI runs 8 October to 20 November 2026. Map security, transparency and ADM evidence now.
4 min read
What the Bank of England told firms about autonomous AI risk
The September 2026 FPC Record treats frontier AI autonomy and open-weight models as cyber and ops resilience issues for firms.
5 min read
AI agents write more code; review still sets how much software ships
A 718-firm study finds AI agents raise code volume and PRs while resolved issues stay flat and review time rises sharply.
Copilot local sandboxing is generally available: what it actually restricts
Copilot local sandboxing is GA in the CLI, app and VS Code Agent Host. What OS limits cover, leave out, and how they sit with policy.
4 min read
MCP TypeScript SDK OAuth flaw: credentials followed the wrong issuer
A high-severity MCP TypeScript SDK flaw let the server choose which authorization server got client secrets. Patch, bind and rotate.
Claude Haiku 5.5 for coding sub-agents: what the price cut changes
Anthropic's Haiku 5.5 makes high-volume subagent work cheap enough to measure. When to route there, and when Sonnet still leads.
Download counts aren't trust: a lesson for AI coding agents
A malicious copy of a popular maths library reached six million downloads in two days. Why agents that pick packages are exposed, and what limits the damage.
3 min read
Browse by tag
- #Security (55)
- #Agents (41)
- #AI coding tools (38)
- #LLM costs (23)
- #MCP (16)
- #Evaluation (14)
- #Observability (12)
- #Compliance (11)
- #Enterprise (9)
- #Platform engineering (9)
- #Data privacy (8)
- #DevOps (7)
- #Model routing (7)
- #Open-weight models (7)
- #Research (7)
- #Tutorials (6)
- #Code review (4)
- #Developer productivity (4)
- #Guardrails (4)
- #Networking (4)
- #OpenTelemetry (4)
- #Budgets (3)
- #Prompt engineering (3)
- #Self-hosting (3)
- #MCP gateway (2)
- #Release notes (2)
- #Skills (1)
- #Testing (1)