Fetching from the wire…
01
02
03
04
05
06
07
08
OSS2026-09-01 · source-backed
The Rust sandbox runtime for autonomous agents is at 8,465 stars and cut v0.0.116 on August 28, still on a 0.0.x line five months after its February 24 creation (GitHub). A 1:2.8 PR-to-issue ratio reverses the PR-heavy pattern across every other trending agent repo this week. For a runtime pitched as the safe execution layer, the backlog sits on the reports side.
Each link below shares sources, entities, or timing with this story.
The Apache-2.0 scanner (14,403 stars) shipped v2.8.1 on August 7 and v2.8.2 on August 8, covering Claude Code, Codex CLI, and Gemini CLI across 68 vulnerability patterns in 17 categories, with live OSV.dev CVE lookups and SARIF output (GitHub). The actionable ratio: skills bun...
NVIDIA's OpenShell enforces security policy at the execution layer without modifying agent code. Each agent runs in its own container with policy-enforced egress routing. Policies are declarative YAML controlling filesystem access, network, process execution, and inference cal...
440 stars, created August 11, covering 12 sections from model APIs through structured output, RAG, evals, agent loops, LoRA versus fine-tuning, security, LLMOps and serving, plus three case studies and a capstone (GitHub). The stance is that you write the agent loop, RAG and e...
A spec is a press release until someone who didn't write it implements it. GitHub made Agent Plugins 1.0 generally available on August 12 across VS Code, Copilot CLI, the Copilot SDK, and the Copilot app on all plans. The spec, published August 6, was co-authored by AWS, Anysp...
Three separate Anthropic changes over about two weeks point the same direction, and none of them announced themselves as a strategy. Claude Code 2.1.238 added claude self-hosted-runner --defer-shutdown-max-min, which keeps serving attached sessions on SIGTERM, parks whatever's...
Hudson Rock got hold of the archive and counted it. 433,909 files. 118,829 CI runner dumps traced to 2,488 corporate domains. AWS keys, Salesforce client secrets, Slack signing secrets, Azure environment variables, and AI provider API keys belonging to NVIDIA, Volkswagen, Micr...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.