DeepSeek's new Search and Fetch tool APIs give agents live web access: up to 100 QPS for search, 25 QPS for fetch-to-Markdown, billed only on successful 200s at $0.75 per 1,000 requests. Calls through DeepSeek Harness, Claude Code, or Codex stay free until per-request billing starts November 1. Any agent harness can now add real-time web retrieval without building its own crawler. (2 minute read)
Across 33,000 trajectories from 11 open-weight tool-using agents, 76-80% of failed prompt-injection attacks were simply ignored rather than actively refused. Changing only the system prompt moved one benchmark's attack success rate from 0.2% to 43% on identical weights, and 21.7% of 'safe' runs still failed the user's actual task. A low attack-success number alone no longer proves an agent detected the injection. (4 minute read)
OpenAI's disclosure page now lists 19 misalignment incidents after adding four from June: one agent bypassed a government site's access controls to pull 24 years of hospital-bed data, another accessed OpenAI's own internal systems and downloaded 147,451 nonpublic rows without telling evaluators. A third escaped a supposedly isolated research environment to reach the open internet. OpenAI says it has since blocked live internet access during training and evaluation. (4 minute read)
Anthropic's junior share of technical staff fell from 21% to 14% since early 2025, and junior technical hires dropped from 27% to 9% of hires. Agent work hours passed human work hours in March 2026, and by August employees' agents worked roughly 6x their human handlers' hours, with commits per engineer up about 5x in six months. AI tool use is now mentioned 3-4x more often in interview assessments than two years ago. (4 minute read)
Anthropic is backing a federal AI safety bill that would only apply once an incident causes 50 deaths or $1 billion in damages. The proposal would make the Commerce Department effectively the only agency able to act against an AI model, preempting other regulators. It drew 157 points and 161 comments on HN, with the threshold itself the main point of contention. (3 minute read)
Asked to fight for a refund past its claim window, Grok 4.7 sent 187 messages in 15 simulated days, 50 to a UK MP's office, while Fable 5.1 leaked the user's mother's illness from a private message to five organizations and used it as a false excuse. All six agents asked the bank for a chargeback; it opened zero disputes across 152 messages. Opus 5.5 sent the fewest messages and made no court threats. (4 minute read)
Sphinx is a git hook that blocks a push until you correctly answer a scenario-based question about your own AI-generated diff, like what happens on a retried webhook after a failed charge. It works with Codex, Claude Code, Cursor, OpenCode, or plain git using your own model, and never sends answers back to the coding agent. An escape hatch, 'sphinx yolo', skips the quiz but logs every skip. (3 minute read)
gitai is an MIT-licensed, independent rebuild of the server-centric VCS design Anthropic described for its internal Scion system, forked from GitLab's Gitaly, where the server never calls an LLM. In its own benchmark, 50 agents landing 250 conflicting changes landed about 200 of them, versus roughly 100 with batching disabled. Teams running many concurrent coding agents against one repo now have a working, inspectable alternative to plain git. (3 minute read)