Fetching from the wire…
Research2026-09-17 · source-backed
arXiv 2609.18298 pointed a best-practices agentic workflow at ten release-quality Linux utilities, regenerated them, and measured reliability with generational black-box fuzzing and AFL++ coverage-guided mutational fuzzing against the real distribution versions as ground truth. The AI versions were typically as reliable or more reliable, with the failure shape shifting rather than shrinking: fewer buffer overflows, more hangs. Results are highly sensitive to the prompts and skills used and to how the supervising human responds. Add hang and timeout detection to your agent-output test harness, because the class of bug moves.
Each link below shares sources, entities, or timing with this story.
Running untrusted agent code safely has been a persistent headache. Docker adds startup latency and configuration overhead. VMs are heavier. Most developers, myself included, end up running agents with their real credentials on their real filesystem because the friction of san...
Microsoft's July 23 release targets a genuine gap: harness-based agents like Claude Code and Codex drive multi-turn reasoning, tool use, and external system access but were hard to train end-to-end with standard open RL infrastructure. The trick is decoupling training from inf...
Two days from now, on August 14, auto mode becomes the default permission mode for new Pro, Max, and Team sessions (Claude Code Docs, Week 32). Not opt-in. Default. Every new session you start after Thursday has a different permission posture than the ones you started this wee...
Anthropic shipped cross-session messaging for Claude Code on August 7, macOS and Linux, version 2.1.224 or higher. Two new tools: ListAgents discovers other active sessions on your machine, SendMessage delivers text to one by name. Messages between sessions on the same machine...
One Claude Code release fixed two independent permission-check bypasses on the same day. That's the story. Version 2.1.221, shipped August 4, patches a Bash tool bypass where zsh could execute hidden commands embedded inside [[ ]] regex conditionals. The approval prompt never...
Context Privilege Escalation names two classes, M-CPE where attacker-controlled low-privilege content gets folded into a higher-privileged message role, and X-CPE where it persists past the context that introduced it. The authors ran it against 12 production harnesses includin...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.