Local AI still needs a containment drill
Microsoft’s new Windows AI hardware and agent features move more inference onto the device. Endpoint teams should test permission boundaries, rollback and evidence capture before scale.
Topic desk / 01
AI Capability Frontier
Which tasks have become newly feasible, cheaper, more reliable, or more autonomous?
← All latest reporting75 articles
Agent evaluations need a no-write boundary, not a prompt-level warning
Anthropic reported agents submitting real forms and accepting agreements during evaluations and internal use. Research browsing should be technically unable to create external side effects by default.
A model-safety claim needs a release-level evidence ledger
SemiAnalysis found public, model-specific safety results for 31 of 857 Chinese AI releases it reviewed. Procurement teams should ask for evidence tied to the exact version, not a lab-wide assurance.
Cyber-agent autonomy should be set by consequence and approval latency
PwC found 22% of surveyed leaders would authorise fully autonomous cyber defence. The right operating model is a tiered action matrix, not a single human-in-the-loop switch.
A coworker agent’s own email address is not an access-control model
Google’s Gemini agent can work across business systems and spawn coworker agents with their own identities. Teams still need task-scoped grants, expiry and replayable action logs.
Training agents in real harnesses makes observability part of model improvement
Microsoft Research has rebuilt Agent Lightning around reinforcement learning inside existing agent harnesses. The practical skill shift is not just reward design: teams must make tool actions, context and failures inspectable enough to train on.
A cheaper small model needs task-specific error budgets before high-volume rollout
Anthropic positions Claude Haiku 5.5 for classification, extraction, routing and support at materially lower cost. Scale changes the risk equation: buyers need error budgets by task, not one benchmark average.
An adaptive AI interface needs an interaction log, not only a final answer
OpenAI’s GPT-6 can generate interactive charts, forms and tools inside a response. When the interface itself changes the user’s choices, teams need to preserve the path, state and inputs—not just the final text.
Reduced cyber safeguards need an authorization record, not just applicant vetting
Anthropic is expanding verified access to models with fewer safeguards for defensive security work. The important control is the full authorization lifecycle: admission, scope, logging, escalation and revalidation.