[!] TOPIC ARCHIVE // #GOVERNANCE
#Governance
All 30 guides, operator dossiers, and signals tagged with #Governance.
outside hands
model access, bug telemetry, and agent work logs all showed the same pressure: personal AI systems need receipts when outside hands can steer the machine.
agent control surfaces
Agent work is being boxed into states, git guardrails, certification checklists, and PR comprehension checks.
agent work moved into company plumbing
GitLab tied agents to org design, Shopify and Notion pushed work into shared records, and Claude on AWS split access from custody.
agent accounting
Agents need accounting: task-duration horizons, line-level provenance, and evidence-gap reporting when access boundaries hide part of the file.
agents got three bills
Anthropic turned Claude Code limits into a compute receipt, CAISI formalized pre-release model custody, and Reflex put a price on browser-driving agents.
agent surfaces
Agents are getting separate surfaces: sales paths, security boundaries, and personal-guidance harm ledgers.
trusted records
AI is touching records people usually trust: commit metadata, agent custody, and public repo policy.
real surfaces
Zed and JetBrains turn the IDE into an explicit human-plus-agent surface, Zig and Zulip harden their AI contribution rules, and Figure finally publishes humanoid factory metrics.
systems around the model
A Science warning on AI persona swarms, PPT Master’s editable-deck workflow, and a fresh cluster of context-control tools all point to the same thing: the real action moved into the systems around the model.
control surfaces
Anthropic's Claude Code postmortem, a new defensibility paper, and Atomic's agent-ready PKM all point to the same shift: control is moving into the harness, the audit layer, and the memory substrate.
the hidden staff around AI
admins, regulators, researchers, and pit crews are becoming the real interface layer around AI systems.
coding gets new control surfaces
Qwen pushed an open coding model, Kampala turned apps into inspectable API surfaces, and SDL made the fight over machine-written pull requests explicit.
visible infrastructure
browser-side artifacts got inspectable, AI governance turned into liability and identity policy, and humanoid automation picked up a factory cadence.
permission surfaces
MiniMax M2.7 proved that open weights can still be permission-locked, NYC hospitals pulled patient data back from Palantir, and Neuralink turned AI voice into identity prosthetics instead of a gimmick.
workflows, identity, opacity
workflow files are replacing prompt craft, hidden model downgrades are becoming a UX problem, and managed agents are starting to look suspiciously like org charts.
the capability-access gap: anthropic gates mythos, carlini drops the quote, the personal AI middle goes hollow
anthropic announced a model they're too scared to ship. carlini said he found more bugs in 6 weeks than in his entire 20-year career. martin fowler named the new discipline. someone turned karpathy into a skills repo. one signal day, one structural shift.
the access wars: vendor control vs open tooling velocity
anthropic killed oauth for third-party harnesses. llama.cpp patched google's broken model faster than google acknowledged it. GLM-5 754B dropped under MIT. the infrastructure wars are heating up.
voice sovereignty, learning agents, git-native social graphs
Microsoft open-sourced frontier voice. agents that grow with every session. GitHub became a social network for AI. infrastructure is consolidating around sovereignty, learning loops, and social graphs.
cowork as commons, research collapses to 5 days, OCR reads doctor notes
cowork infrastructure became public good, research-to-production hit 5 days, agents run workshop-level programs, OCR learned complex tables, nano harness tutorials demystified black boxes
cursor/kimi scandal, PDF infrastructure, Pi-level local AI
Cursor's Composer 2 exposed as Kimi K2.5 + RL. PDF parsers that actually work. Qwen3 running on Pi 5 at 7-8 t/s. Lawyers building VRAM clusters. Bernie interviews became memes. Infrastructure is maturing.
observability, orchestration, and the 73% shift
blind spots getting plugged: agent dashboards, karpathy's workflow flip, and anthropic's market capture
agent identity firewall security — 2026-03-09
when your AI's personality lives in a text file, that file is attack surface. security suites, consent-based platforms, and AI that trains itself.
when agents operate autonomously
sandbox escapes, lethal weapons resignations, scheduled tasks — the week AI stopped waiting for permission
agent infrastructure: circuit breakers, linters, and the boring parts that actually matter
worktrunk coordinates parallel agents. agnix lints your AGENTS.md. dorabot runs scheduled tasks. pdf_oxide processes documents 5× faster. and someone got a $544 bill because nobody built circuit breakers. infrastructure is catching up.
agent infrastructure convergence
when microsoft, HuggingFace, and Anthropic all ship the same abstraction in 6 weeks, the agent infrastructure layer just solidified. Shannon proves the security question. 1.5M users prove sovereignty includes moral sovereignty.
infrastructure, sovereignty, and a $2B validation
qmd for search, Dawarich for location, AltStack for self-hosting, M5 for speed, LMCache for optimization, Cursor for proof
lines in the sand
anthropic rejects pentagon, vibe-coded security disaster, geopolitics enters AI procurement, and the question everyone's avoiding
coding agents crossed the threshold
Karpathy says programming changed more in the last 2 months than in years. Claude Code goes mobile. Skills become infrastructure. Security becomes a category. Six signals about the moment AI delegation became real.
exoskeletons and accountability
Google drops Gemini 3.1. an AI agent publishes a hit piece. Armin Ronacher wants new languages for agents. someone builds a life OS from plain text. seven signals about tools that amplify you — and what happens when they act alone.
signals — february 4, 2026
parasites and platforms: vibe coding hollows out open source, agents learn to steal your cookies, and three companies ship the same OS without calling it one