[!] TOPIC ARCHIVE // #SIGNALS
#Signals
All 23 guides, operator dossiers, and signals tagged with #Signals.
the agent passed its own test. that was the problem.
New papers test tool-using model refusals, a surrogate check for black-box agent calls, and coding agents that verify their own patches.
three interfaces moved closer to the decision
Firefox adds Mistral Small 4 to Smart Window beta, Claude merges Cowork into chat, and Datasette patches a newline permission bypass.
three places where the name is not enough
A package name, a recovery feature, a generation label. All three look reassuring from a distance. Today’s useful reading is about what sits behind the label: code provenance, a downloadable release, and the actual platf
the permission prompt lost its job
Claude Code will use auto mode by default for new Pro, Max, and Team sessions from August 14, moving safety from a stream of prompts into configurable standing rules.
the accidental message board
OpenAI’s Black Hat reconstruction shows agents using writable Artifactory files and a WebDAV cache as accidental cross-run communication surfaces during the Hugging Face incident.
the missing visitor got a ledger
Cloudflare's AEO Visibility Dashboard separates citation, mention, prominence, and operator referral data so site owners can see when AI systems read or recommend their work without sending a visitor back.
the production breakpoint got a leash
HyperProbe gives an MCP-connected agent a bounded way to inspect a live production failure: snapshot probes, local redaction, resource limits, and no silent production writes.
agent audit surfaces
PlanFlip attacks planner context, deepsec makes security review an agent workload, and a new RLHF audit treats rater state as part of preference data.
receipts for assistants
Apple routed Siri AI through PCC on Google Cloud, Google turned skills into installable agent context, and local preflight tools moved agent control before the leak, loop, or bill.
agent control under pressure
agent control is moving into the dull machinery: selective-attack evaluations, formal workflow checks, and edit tools with versioning and atomic writes.
plain text with teeth
test logs, video labels, and LLM reviews all turned into control surfaces: jqwik stdout, YouTube AI labels, and Review Arcade’s gameable review loop.
price tags and guardrails
Google shipped Gemini 3.5 Flash into agent surfaces, DecisionBench exposed bad delegation hidden behind final scores, and Forge wrapped local tool-calling in guardrails.
agent work moved into company plumbing
GitLab tied agents to org design, Shopify and Notion pushed work into shared records, and Claude on AWS split access from custody.
agent custody moved downstack
Reasoning traces picked up an order-bias audit; Frona put personal agents behind policy sandboxes; MDA made instruction files compiled and signed.
agents crossed into expensive rollback zones
Google supplied the silicon-grade proof. Mozilla and HiddenLayer supplied security evidence from both directions. The workflow repos had the boring answer: rails, logs, and stop conditions before the agent writes.
agents got three bills
Anthropic turned Claude Code limits into a compute receipt, CAISI formalized pre-release model custody, and Reflex put a price on browser-driving agents.
operational loops
GPT-5.5 clears an external cyber-attack benchmark, PAI 5.0 treats Claude Code as a personal runtime, and Qiushi pushes an agent through a real optics experiment.
real surfaces
Zed and JetBrains turn the IDE into an explicit human-plus-agent surface, Zig and Zulip harden their AI contribution rules, and Figure finally publishes humanoid factory metrics.
shared control planes
AWS brings OpenAI and Codex into Bedrock, GitHub says agentic workflows forced 30X-scale planning, and the EU moves to open Android's AI surface beyond Gemini.
contracts, meters, provenance
Three signals on AI boundary-setting: OpenAI and Microsoft rewrite the deal, coding agents get explicit price meters, and talkie turns public-domain provenance into a model spec.
operational ai
Three signals on AI as operational software: workload-tiered coding subscriptions, self-checking image generation, and a 271-vulnerability security yield from Mozilla's Firefox pass.
hard constraints
Three signals on AI under pressure: tiny public infrastructure, local model substitution, and the competence debt that shows up when the helper disappears.
signals #13: the collision
agents learning from you. agents melting down on GitHub. the S-curve moment happening in real time.