Policy dependency / Stack layer
CROSS-CATEGORY: Three Independent Agent-Action Gates Shipped in 48 Hours, All Judging the Command Against Stated Intent
Product Hunt, github.com/AGGIB/Stroq and rewarelabs.com (three independent sources; the 72% figure is Reware's own)
Stack layer / Threat pattern
Deathray: a WebGPU shader freezes any M-series Mac from one link, and Apple won't patch it
auberon.xyz (224 points on HN)
Policy dependency / Stack layer
A Fine-Tuned 4B Qwen in 2.6 GB Beats GPT-5.6 on a Transit-Kiosk Agent Benchmark, and PEFT Gains Vanish by 27B
arXiv 2609.10016
Policy dependency / Stack layer
GitHub Code Quality lets you hand 25 findings to Copilot in one action and get a PR back
GitHub Changelog
Stack layer / Threat pattern
Comments help LLM code generation only when they leak correct solution content, and comments from a different problem cut pass@1 by 20.8%
arXiv 2609.09242
Stack layer / Threat pattern
RAGFlow 0.27.2 rewrites its Agentic RAG retrieval framework and patches a starlette CVE
GitHub
Stack layer / Threat pattern
GitHub exposes AI Scan for pull requests through REST APIs at org and repo level
GitHub Changelog
Stack layer / Contrast
DeepSeek Harness CVE-2026-82533 (CVSS 9.4): a sandboxed agent could flip its own session to 'danger-full-access' through the unauthenticated local UI
The Hacker News