SourcesSAFE-MCP: MITRE ATT&CK Framework for AI Agent SecurityThe New Stack·high signalXBlueskyLinkedInCopy linkCommunity-built framework adapting MITRE methodology for MCP, 14 tactical categories, Linux Foundation governanceSourceSource pageThe New Stack↳ Follow the threadPolicy dependency / Stack layerMicrosoft publishes a 37-page 'humanist AI code of conduct' for its MAI models and opens it to public consultationThe Verge (corroborated by Unite.AI and TechBriefly)Policy dependency / Stack layerPattern: four coding-agent CLIs shipped sandbox or trust work in the same weekGitHubStack layer / Threat patternAgentsDock Open-Sources an IDE That Collapses Termius, Cursor and Claude Code Into One DockAgentsDock (surfaced on Hacker News item 49678435)Stack layer / Threat patternSplitting a CTF Task Into Isolated Sub-Contexts Lets a Local gemma-4 Solve 18.52% of Challenges Standard Agent Loops FailarXiv 2609.12839Stack layer / Threat patternElva Launches Against Postman With Flat Workspace Pricing and Specs Generated From Repo CommitsElva (surfaced via the Product Hunt daily leaderboard for 2026-09-14)Policy dependency / Stack layerTarfio Launches a Budget and Metering Layer That Sits Between Agents and Paid MCP ToolsTarfio via Hacker News Show HN (single source, private beta)Policy dependency / Stack layerAgent Framework stops forwarding headers across redirects and revalidates file skill paths before useGitHubStack layer / Threat patternGemini CLI ships an external-context processor to stop indirect prompt injection through build filesGitHub