Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-20 · source-backed
Task-Conditioned Least-Privilege Learning trained Qwen3.5-4B on 1,500 terminal and MCP tasks to choose an authority level that fits the task, audited by deterministic verifiers across six risk dimensions. Over 2,896 episodes on 500 held-out tasks, excess-authority errors fell from 4.56% to 0.79%. (arXiv 2608.18351) The authors are refreshingly clear that learned restraint sits on top of permission gates and sandboxes, it does not replace them. Which is the right framing: a model that usually asks for less is not a security boundary, it's a way to reduce how often your actual boundary has to say no.
Each link below shares sources, entities, or timing with this story.
Claude Code uses MCP / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover MCP, Which; reported by the same outlet (arxiv.org).
Claude Code uses MCP / Shared entity: Task / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Claude Code uses MCP); both cover Task; reported by the same outlet (arxiv.org).
Devin Local supports MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Devin Local supports MCP); both cover MCP, Which; overlapping topics (model, task).
Claude Code uses MCP / Shared entities / Same source domain / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover MCP, POST; reported by the same outlet (arxiv.org).
Linked by a graph relationship (Claude Code uses MCP); both cover Qwen3, Task; reported by the same outlet (arxiv.org).
Claude Code uses MCP / Shared entity: MCP / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover MCP; reported by the same outlet (arxiv.org).
Google released MCP / Shared entity: Qwen3 / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Google released MCP); both cover Qwen3; reported by the same outlet (arxiv.org).
Claude Code uses MCP / Shared entity: Qwen3 / Same source domain / Earlier coverage / Tension
Linked by a graph relationship (Claude Code uses MCP); both cover Qwen3; reported by the same outlet (arxiv.org).