Governance
20 practitioners working with Governance:
agent identity firewall security — 2026-03-09
when your AI's personality lives in a text file, that file is attack surface. security suites, consent-based platforms, and AI that trains itself.
agent infrastructure convergence
when microsoft, HuggingFace, and Anthropic all ship the same abstraction in 6 weeks, the agent infrastructure layer just solidified. Shannon proves the security question. 1.5M users prove sovereignty includes moral sovereignty.
agent infrastructure: circuit breakers, linters, and the boring parts that actually matter
worktrunk coordinates parallel agents. agnix lints your AGENTS.md. dorabot runs scheduled tasks. pdf_oxide processes documents 5× faster. and someone got a $544 bill because nobody built circuit breakers. infrastructure is catching up.
coding agents crossed the threshold
Karpathy says programming changed more in the last 2 months than in years. Claude Code goes mobile. Skills become infrastructure. Security becomes a category. Six signals about the moment AI delegation became real.
coding gets new control surfaces
Qwen pushed an open coding model, Kampala turned apps into inspectable API surfaces, and SDL made the fight over machine-written pull requests explicit.
cowork as commons, research collapses to 5 days, OCR reads doctor notes
cowork infrastructure became public good, research-to-production hit 5 days, agents run workshop-level programs, OCR learned complex tables, nano harness tutorials demystified black boxes
cursor/kimi scandal, PDF infrastructure, Pi-level local AI
Cursor's Composer 2 exposed as Kimi K2.5 + RL. PDF parsers that actually work. Qwen3 running on Pi 5 at 7-8 t/s. Lawyers building VRAM clusters. Bernie interviews became memes. Infrastructure is maturing.
exoskeletons and accountability
Google drops Gemini 3.1. an AI agent publishes a hit piece. Armin Ronacher wants new languages for agents. someone builds a life OS from plain text. seven signals about tools that amplify you — and what happens when they act alone.
infrastructure, sovereignty, and a $2B validation
qmd for search, Dawarich for location, AltStack for self-hosting, M5 for speed, LMCache for optimization, Cursor for proof
lines in the sand
anthropic rejects pentagon, vibe-coded security disaster, geopolitics enters AI procurement, and the question everyone's avoiding
observability, orchestration, and the 73% shift
blind spots getting plugged: agent dashboards, karpathy's workflow flip, and anthropic's market capture
permission surfaces
MiniMax M2.7 proved that open weights can still be permission-locked, NYC hospitals pulled patient data back from Palantir, and Neuralink turned AI voice into identity prosthetics instead of a gimmick.
signals — february 4, 2026
parasites and platforms: vibe coding hollows out open source, agents learn to steal your cookies, and three companies ship the same OS without calling it one
the access wars: vendor control vs open tooling velocity
anthropic killed oauth for third-party harnesses. llama.cpp patched google's broken model faster than google acknowledged it. GLM-5 754B dropped under MIT. the infrastructure wars are heating up.
the capability-access gap: anthropic gates mythos, carlini drops the quote, the personal AI middle goes hollow
anthropic announced a model they're too scared to ship. carlini said he found more bugs in 6 weeks than in his entire 20-year career. martin fowler named the new discipline. someone turned karpathy into a skills repo. one signal day, one structural shift.
the hidden staff around AI
admins, regulators, researchers, and pit crews are becoming the real interface layer around AI systems.
visible infrastructure
browser-side artifacts got inspectable, AI governance turned into liability and identity policy, and humanoid automation picked up a factory cadence.
voice sovereignty, learning agents, git-native social graphs
Microsoft open-sourced frontier voice. agents that grow with every session. GitHub became a social network for AI. infrastructure is consolidating around sovereignty, learning loops, and social graphs.
when agents operate autonomously
sandbox escapes, lethal weapons resignations, scheduled tasks — the week AI stopped waiting for permission
workflows, identity, opacity
workflow files are replacing prompt craft, hidden model downgrades are becoming a UX problem, and managed agents are starting to look suspiciously like org charts.