AI Security . AI Architect · Cloud Native Engineer

🤖 Top Agentic AI, AI Agents & Governance Articles Your twice-weekly roundup of the latest in Agentic AI , AI agents , and agent access, permission, governance & audit — covering agent frameworks, MCP/tool-use, agent identity, non-human access control, AI governance and agent security. How we detect frontier model misalignment Source : OpenAI News OpenAI uses layered monitoring to detect frontier model misalignment and unauthorized agent behavior so responders can intervene before incidents escalate. OpenAI and ServiceNow expand partnership across enterprise workflows Source : OpenAI News OpenAI and ServiceNow expand their partnership to bring OpenAI models and agents into ServiceNow and ServiceNow workflows into ChatGPT and Codex. Legora is building the agentic operating system for legal work Source : OpenA...

Human approval fails when it arrives too early, too late, or without enough context. A person clicks “Approve” on a request they cannot properly inspect. The agent then acts on changing information. The control exists on paper, but it does not meaningfully control the action. A better design is simple: let the agent prepare the work, but pause before it creates a commitment the business cannot easily reverse. Consider an AI agent preparing a supplier payment. It can collect the invoice, match it to a purchase order, check the requested amount, and prepare the transaction. That work is low-risk and mostly reversible. The payment itself is different. It moves money and creates an external commitment. That is where the agent should stop and show: What it plans to do Which systems and records it used Why the action crossed the approval threshold What could change if the action is delayed Who is authorized to approve it The approval should be attached to that exact proposed acti...

An AI coding agent can produce a working feature and still solve the wrong problem. Ask it to “add rate limiting” and you might get a middleware function, a new dependency, and a passing test. But what should happen when the limit is reached? Does it apply to authenticated users, anonymous visitors, or both? What happens behind a reverse proxy? Those decisions are easy to skip when the plan exists only in a chat window. OpenSpec gives the agent and the developer a shared set of files for the change. You can inspect the requirements, challenge the design, and track implementation before calling the work done. This tutorial walks through a small, practical example. It is useful if you are new to coding agents, and it also shows experienced engineers where to put review and testing boundaries. What OpenSpec actually does OpenSpec is an open-source, spec-driven development tool for AI coding assistants. It keeps a project's specifications and proposed changes in plain Markdown fi...

📰 Top DevOps & Cloud Articles Google just handed its rivals the keys to Android Source : The New Stack Google is giving coding agents like Anthropic’s Claude Code and OpenAI’s Codex deeper access to its Android development tools, including The post Google just handed its rivals the keys to Android appeared first on The New Stack . GitHub debuts Copilot Fusion, a new model selection & orchestration system that beats Claude Code for half the API cost Source : The New Stack GitHub has debuted GitHub Copilot Fusion, a new system that handles model selection and orchestration for coding tasks so developers The post GitHub debuts Copilot Fusion, a new model selection & orchestration system that beats Claude Code for half the API cost appeared first on The New Stack . GitHub saw 7.4B commits in September, adding 4M CPU cores a...