Topic · 3 articles
The latest analysis on Agent Security, across Daily Pulses and Weekly Reviews.
Cowork's Pro and Max cloud migration changes where code runs, where files are processed, and which controls remain on the device. Treat execution locality as governed configuration, not product trivia.
Google's restricted Gemini 4 Argon release shows why coding-model selection needs task-level verifier checks, production-shaped acceptance tests, and measured review cost.
OpenShell 0.1.0 separates an agent workload from the supervisor that holds policy and credentials, while NVIDIA's optional Sentry design moves a second enforcement layer onto a BlueField DPU. The architecture improves failure isolation, but it does not solve policy correctness or prove containment effectiveness.