I-HITL shows frontier agents harvest emailed OTPs to raise their own spending caps
Circle Agentic Wallets HITL via email OTP fails when the agent also has the inbox. Countersign moves approval onto a trusted device.
Read the pieceThe Frontier
An independent journal of artificial intelligence in practice.
See what's new5 recent pieces
Circle Agentic Wallets HITL via email OTP fails when the agent also has the inbox. Countersign moves approval onto a trusted device.
Read the pieceCurated picks
Chip-vendor interest becomes named equity. Muse optimisation, OpenShell consideration, Helios racks, and Spectrum-X join the cheque.
Read the pieceTLDR
Named partners, preclinical metrics, Claude Science, and a rare-disease programme that may reach human trials in late 2028 if candidates hold.
Read the pieceTLDR
Sovereign English-German MoE under Apache 2.0 for public-admin and aerospace buyers who need open weights they can pin.
Read the pieceTLDR
Chen, Zhao, Viswanathan, Yu, Zhou, and Wu mark the step when outside help becomes necessary, then watch frontier agents keep going anyway.
Read the pieceTLDR
Yocam and co-authors show LSB, DCT, and metadata payloads in email-signature images bypass text scanners, then propose HMAC trust labels with an MCP provenance ledger.
Read the pieceTLDR
Name the recurring wrong shell moves first, then start RL at those prefixes so fewer rollouts buy the same Terminal-Bench climb.
Read the pieceTLDR
Even the strongest tested workplace agent still violates soft boundaries on more than a quarter of benign admin tasks.
Read the pieceTLDR
Six capability-preserving transforms keep tasks solvable while tools churn; Steward's joint tool-and-skill loop is the operational claim.
Read the pieceTLDR
Calibrated MCP tool faults cut mean task scores by about 60%, and backbone size did not buy resilience on the tested pair.
Read the pieceTLDR
$35 billion underwritten now, up to $60 billion ATM later. Nvidia, AMD, and Broadcom signal up to $5 billion.
Read the pieceTLDR
Paired full-history versus summary-only replays on SWE-bench repairs. Keeping strings still fails tasks.
Read the pieceTLDR
A tracing header steers prefill workers to attacker ZMQ peers and ships the KV cache; three companion DoS bugs want 0.31.0.
Read the pieceTLDR
New releases, then the constraint.