Subagents Grow Up: Gemini Isolates Tool Boundaries While Codex Shares Trust by Default
Two agent platforms shipped subagent changes within hours of each other. One tightened what a child agent can see and use . The other tightened what a child agent can teach the rest of the system to trust . Same category. Very different instinct.
Edition File
All editions ›Recent Editions
Full history ›A Computer-Using Agent Needs a Room, Not a House Key
OpenWork’s merged macOS 14+ preview gives a desktop-driving agent one person-approved window and a short-lived native session—a meaningful boundary, but not an operating-system sandbox.
No Mail Server Is Not a Free Pass
QM’s new admin-login route lets an already authorized administrator open a portal before outbound email exists—but only through a five-minute, origin-bound, one-use handoff that gets checked again at the door.
An Agent’s ‘No’ Needs a Way Back—But Not a Shortcut
Qwen Code now offers one manual review only for the exact action its AUTO mode blocked—turning a false positive into an accountable decision instead of a workaround hunt.
Hermes Decides That a Preference Can Have a Home
Hermes is redrawing a deceptively important line: a correction learned while doing one task belongs with that task's skill, while persistent memory is for facts that should matter everywhere.
How AI Agents Work
The long-form map behind the daily paper: context, tools, loops, memory, delegation, safety, interface, and trust.