Every public agent incident so far ends with the tool, the platform, the operator and the agent each blamed, each partly right. Teaching hospitals settled this before the patient arrives. What that means for agent runs.
Retry a failed agent test twice and your CI gate stops asking whether the agent works and starts asking whether it can work once in three tries. The arithmetic, and a fix borrowed from factory inspection.
A randomised trial put two ambient AI scribes head to head. One cut documentation time, one cut none, and both made the work feel better. Relief and throughput are not the same purchase.
Everyone is counting the 23.62 million records. The inventory is the story: OCR text extracted from every image, EXIF location, upload IP and source URL, most of it attached to uploads from before January 2019.
A new preprint is being reported as LLM agents colluding in 94% of runs. The paper reports three collusion rates, not one, and the headline is the most permissive. The finding that matters is that task accuracy held at 89.3% while the checking stopped.
HSBC blocked its Android app inside Samsung Secure Folder and Android Private Space with no notice, locking some customers out of online banking for up to ten working days. It is the second time in nine months a coarse device signal has denied service to the careful.
Anthropic measured its own permission prompt, found 93% approved, called it approval fatigue and built something else. The MCP consent requirement everyone quotes is lowercase, and a gate with no timeout is an incident.
Every test layer you have assumes the contract lives in your repository. An MCP tool has no version field, so the contract your model reads can change on somebody else's server and your build stays green.
Cisco Talos pulled apart a 16.4MB Windows binary that polls four commercial language models and acts on the majority vote. The mechanism is clever. The defensive problem it creates is worse than the mechanism.
Contractors paid to rate ChatGPT were fired for using AI to do it. The tells they were caught by are the same ones that wrongly flag non-native English writers 61% of the time.
ZCode packaged 345MB of a developer's workspace and tried to upload it 564 times. It had two privacy switches. Both were honest, and both were wired to the wrong end of the pipeline.
The median stablecoin payment now prices below interbank. The cost did not disappear, it became a routing decision, and most payments systems cannot see it.