Category
Security
Security reviews, supply-chain checks, and safe-use guidance for AI agent tools.
REA: give your coding agent a reverse-engineering toolkit, safely
One MCP server for inspecting binaries, Electron apps, .NET and websites locally, with evidence. Plus the safety lines: ToS, model context, and impersonator copies.
Read →An Alien Mind and the 3.1 agent-workday: brakes, metrics, shipping calendar
OpenAI's Jakub Pachocki asks for voluntary slowdowns on Sep 6 2026 — same day as 3.1 agent-workday metrics, three days after GPT-6 Astra.
Read →When is a harness OS worth the install tax? Looking at ECC
When a big agent harness pack is worth the context cost: evaluating ECC for skills, instincts, memory, and AgentShield — official channels only.
Read → SecurityCloudflare OS deep dive: safety, trade-offs, and customizing it on day one
I reviewed open-source Cloudflare OS for call-home behavior, the Gatekeeper security model, and how hard it really is to make it *your* company OS.
Read → SecurityIs diri safe to install? A security review of the multi-agent macOS orchestrator
I audited diri's trust model, install path, remote access, and MCP blast radius — then laid out the field trial for part two.
Read → SecurityIs Alibaba Open Code Review safe for GitHub Actions?
I traced where the code goes, how the Action updates itself, and which GitHub permissions it needs—then built the hardened setup I would actually test.
Read →