Category
Agent Systems
Agent architecture, authority boundaries, security, and operations.
Latest
Four boundaries to set before handing a repository to an AI agent
A practical guide to scope, context, authority, and verification when using AI agents on a code repository.
Don't Run That headersHelper Blind — Claude Code 2.1.238 Moves the MCP Trust Boundary
Starting in Claude Code 2.1.238, project and plugin headersHelper commands require folder trust and strip credential-like env vars. Treat shared .mcp.json as a shell execution surface — with a practical checklist.
When the Agent Wakes Itself — Treat Cursor Subscriptions and /goal as a Harness
Cursor’s 2026-08-19 cloud agent release: Subscriptions, /goal, and isolated subagent VMs. How to run always-on loops with stop conditions—not autopilot.
Cursor Is AIUC-1 Certified — What That Evidence Buys Security Teams (and What It Doesn't)
Cursor’s 13 Aug 2026 AIUC-1 certification is recurring adversarial evidence for coding-agent risk—not a license to drop Run Mode, MCP allowlists, or .cursorignore. Covers Schellman, A008/B010, and operator baselines.
Don't Install That Portable Plugin Blind — Agent Plugins 1.0 Moves the Trust Boundary
Agent Plugins 1.0 standardizes packaging for skills and MCP — not install trust. Separate Cursor Plugins from portable plugins, and lock Copilot managed-settings before opening marketplaces.
Claude Code Flips to Auto Mode on August 14 — Set Your Boundaries Before It Does
Pro, Max, and Team new sessions default to auto mode. It is a classifier gate—not bypass. Pin ask rules and autoMode.environment before the flip.
When a Comment Wakes the Agent — Trust Handoff After Black Hat 2026
In Black Hat USA 2026 week, comment-triggered Copilot automations landed beside research showing GitHub text can hijack coding agents. Treat comments as untrusted tool input.
Before You Wire Gmail Into a Coding Agent — Cursor’s Google Workspace Plugins and Trust Boundaries
Cursor’s Aug 3 Gmail/Drive/Calendar plugins expand agent blast radius. Inventory tools/list; prefer draft-first over changelog verbs.
AI Is No Longer One Chatbot: GPT-5.6 Ultra and Agent Teams
A beginner-friendly technical read on GPT-5.6 Ultra subagents, MCP vs A2A, and PapaCoder agent-team architecture.