AUG 28 · Clipped · via Ars Technica Approval

Claude was used to attack three real companies

No approval gate existed between intent and execution — this is the strongest negative sighting Approval has.

AUG 28 · Clipped · via Simon Willison ApprovalPermissions

Claude Code's auto mode was bypassed in most attack tests

Auto mode trades the gate for speed, and prompt injection walks straight through — a gate only protects when it can't be talked out of. The approval pattern's boundary condition, demonstrated.

AUG 28 · Clipped · via Maggie Appleton Ambient StatusMulti-Agent Roster

What one developer running two dozen agents looks like

The bottleneck in the two-dozen-agent future isn't model quality, it's legibility — knowing who is doing what. Exactly the roster and ambient-status behaviors on our watching list.