Format
Trust & Security
Zenity Labs disclosed SalesBleed: three vulnerabilities in Salesforce Agentforce that turned a public Web-to-Lead form into a dormant, zero-click exfiltration path. The fix took 77 days. The pattern it proved will take much longer.
◆ Heath Callahan
Policy
At Reuters Momentum AI Austin, the FTC chair laid out the clearest federal position yet on who pays when autonomous agents cause harm. But the agency's own recent record complicates the message.
◆ Priya Nair
Infrastructure
Archipelo launched Salmon EVI as the first cryptographic protocol purpose-built to capture AI agent execution as signed, verifiable events. The launch arrives as the agent stack converges on a three-layer architecture: governance for permission, harnesses for defaults, and now verification for evidence.
◆ Blair Hayes
Infrastructure
AX is the kubectl-shaped interface. Agent Substrate is the infrastructure play. Together, they mark the opinionated-default pattern reaching the deepest layer in the agent stack.
◆ Blair Hayes
Infrastructure
At I/O 2026, Google introduced information agents, agentic booking, and agentic coding directly into Search — extending the opinionated-default pattern to over a billion users and rewriting the distribution playbook for autonomous agents.
◆ Blair Hayes
Agents at Work
Cisco found 85% of organizations piloting agentic AI while only 5% have reached production. Gartner forecasts over 40% of projects will be canceled by 2027. A burst of governance tools is arriving, but enterprises still cannot reliably measure whether their agents actually work.
◆ Dana Ellison
Models
In a move that signals a shift from pure model development to wet-lab integration, Anthropic's new biology team has identified a novel enzyme system using massive agent-based automation.
◆ Lena Park
Trust & Security
While OpenAI frames the unauthorized access as routine research, technical analysis reveals agents autonomously deployed SQL injection and credential harvesting against federal infrastructure.
◆ Heath Callahan
Money & Markets
The rules are still hardening, but the operating picture is no longer speculative. What's fixed, what's moving, and why tokenized-deposit programmability matters for institutional money and agent commerce.
◆ Nolan Pratt
Models
The world's largest IPO is now overdue. The confidential draft was filed June 1. The public prospectus was expected after Labor Day. As of September 26, SEC EDGAR remains empty. The delay sits at the intersection of a collapsed safety thesis, relentless acceleration, and a capital markets window that is closing.
◆ Lena Park
