Fetching from the wire…
01
02
03
04
05
06
07
08
Agents2026-07-29 · source-backed
The release adds a readOnly option to LocalFilesystem and NativeSandboxConfig, mounting an agent's working directory read-only on macOS via Seatbelt or Linux via Bubblewrap. It also stops auto-injecting reaction tools into channel-bearing agents, a breaking change that trims implicit tool surface, and replaces distributed advisory locks in Factory work-item processing with atomic claims and idempotent replay.
Each link below shares sources, entities, or timing with this story.
The attackers didn't use agents to help. They used agents to do the whole thing. Hugging Face disclosed that attackers chained a remote-code dataset loader with a template-injection flaw in dataset configuration to land on processing workers, then escalated to node-level acces...
Nothing touches your files until you accept it. shepherd-agents/shepherd (MIT, v0.3.0 on July 8) is a runtime substrate that captures agent execution as durable, inspectable traces that meta-agents can observe, fork, replay, and revert. Agent work is held as a reviewable propo...
The most quotable line in a Linux kernel commit this year: "a debug session from hell, enormously helped by an AI doing much of the grunt-work." Torvalds landed drm/xe: Don't hand out the flat CCS storage as usable VRAM on August 22. The commit message is the artifact. He note...
The changelog shows sandbox filesystem deny entries being bypassed on Linux and macOS: specifically, denyRead: "~/.aws/" written with a trailing slash was silently ignored. That follows the zsh regex bypass, the PreToolUse auto-allow bypass, and the tabs/invisible-Unicode prom...
open-design is a local-first macOS/Windows/Linux desktop app that turns your existing coding agent into a design engine, producing prototypes, landing pages, dashboards, slides, images, and video with real HTML/PDF/PPTX/MP4 export. It runs on 25 distinct local CLI executables...
The agent-security topic holds 42 repos above 100 stars, four from large companies rather than startups: NVIDIA/SkillSpector (14,498 stars, scanning Claude Code/Codex/MCP skills for prompt injection), Tencent/AI-Infra-Guard (4,467, red-teaming with Many-Shot/PAIR/GOAT/ActorAtt...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.