Fetching from the wire…
01
02
03
04
05
06
07
08
Policy2026-08-07 · source-backed
arXiv 2608.05884 defines the APV as a task-conditioned abstraction for tracking persistent deployed agent instances that span multiple components and outlive any single incident. One posture produces different runtime manifestations across tasks; an APV links them to the invariant posture and stays open until authority is narrowed, a control is added, risk is accepted, or closure is verified. It distinguishes APVs from CVE-addressable product defects, OWASP Excessive Agency, and the runtime authorization-execution gap, and ships six recurring patterns, a lifecycle, a minimum record schema and a control-and-closure matrix. Usable today as a template if you're trying to file agent permission sprawl somewhere other than a wiki page.
Each link below shares sources, entities, or timing with this story.
Agentic recommenders keep user memory as narrative that further LLM calls rewrite one edit at a time, which makes exploiting full interaction history expensive and destroys graded collaborative similarity in the translation to sentences. CoVeMem makes the collaborative core a...
Gaurav Dadhich reframes agent memory from storage-and-retrieval into a lifecycle discipline with five primitives — architecting, ingesting, scoping, anticipating, and compacting & consolidation — across an organizational scope hierarchy rather than a single user. The economic...
A GitHub Issue. No code, no credentials, no access. Just a paragraph of English that tells an AI agent to copy your private repo into a public comment. That's GitLost, and it works whether the agent runs on Copilot, Claude, Gemini, or Codex. (Noma Security) Noma Security discl...
DNative-Twin records an agentic decision as a typed trajectory linking observed state, path followed and the authority behind the action, then re-executes the mechanism in isolation. I like it for the stated limit: graph structure localizes represented changes but can't determ...
Two OWASP working-group members compared the expert-consensus ranking against a corpus drawn from CVE, GHSA, OSV, and AIAAIC, with 6,639 labeled against a 20-entry taxonomy. Agreement was weak at Cohen's κ ≈ 0.20, with a 90% interval crossing zero. arXiv The 2026 candidate lis...
Three separate Anthropic changes over about two weeks point the same direction, and none of them announced themselves as a strategy. Claude Code 2.1.238 added claude self-hosted-runner --defer-shutdown-max-min, which keeps serving attached sessions on SIGTERM, parks whatever's...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.