Who Changed the Decision?
💡 The gist: An agent can stay outside your systems and still consume your infrastructure, moderation time and incident-response capacity.. Plus: Anthropic found unintended real-world actions during evaluations and internal use, Exposed AI services are being compromised by ordinary malware, GPU monitoring can become an attack surface of its own, False-front operations are getting cheaper to staff, not automatically more persuasive, Anthropic separated cyber access from operational support, Deno joining Cloudflare creates a support-planning deadline for agent infrastructure, The White House is reportedly demanding notification and remediation after AI security incidents, OpenAI's text watermark is a limited provenance signal, GitHub is adding context to password detection, but inline blocking is not broadly available yet, AISI's Transect makes long agent evaluations easier to inspect, Containment should be tested before capability results are trusted, Shared-agent products are starting to preserve who triggered an action, An open-source gateway shows where enforcement configuration can fail, October 22–23: AGNTCon + MCPCon North America, San Jose, October 27–29: ODSC AI West, Burlingame and virtual, and who changed the decision?.
