Agent Runtimes Move Trust To The Exit Gate
OpenClaw, Codex, and Hermes all changed runtime trust surfaces this week, making the last moment before a tool call, secret handoff, or approval the place operators need to inspect.
More From This Edition
All editions ›Builder Work: Ralphy Gives Coding Agents A Video Runtime
LangChain Stops Retries From Eating Interrupts
API Discovery: Ma Cantine Turns Lunch Rules Into Agent Checklists
Recent Editions
Full history ›An Agent's Sign-In Link Is Not a Timeout
OpenWork's newest MCP work carries a provider's structured authorization link through a failed tool call, so the person who owns the account can act instead of watching an agent retry the wrong problem.
The Diff Can't Be Guesswork Once an Agent Writes
OpenClaw is making a simple rule explicit: when an agent writes a file, a review surface should show the patch it can prove—and show uncertainty when it cannot.
A Computer-Use Agent Needs a Second Meaning of Success
Hermes now tells a desktop-driving agent whether an input merely reached a driver or was actually confirmed to have changed the interface—and it makes foreground escalation a separate decision.
Gemini CLI’s Caretaker Has Permission to Read, Not to Act
Gemini CLI’s new issue-triage worker gives its model a read-only repository view, then keeps labels, comments, retries, and escalation in a separate validated program.
How AI Agents Work
The long-form map behind the daily paper: context, tools, loops, memory, delegation, safety, interface, and trust.