Policy dependency / Stack layer
'Do this as quickly as possible' repeatedly got a Claude session flagged by a corporate security director
r/ClaudeAI
Stack layer / Threat pattern
AFL++ fuzzed agent-written reimplementations of ten Linux utilities: fewer memory errors than the shipped versions, but more infinite loops
arXiv 2609.18298
Policy dependency / Stack layer
SCA-Agent reconstructs a dependency's trace across Code, Build, Release, Deploy and Runtime and beats the best traditional SCA tool by 18.76 points of F1
arXiv 2609.18391
Policy dependency / Stack layer
Overlapping VS Code extension writes were leaving ~/.claude/settings.json unparseable
GitHub
Policy dependency / Stack layer
Tip: Claude Code's Bash tool was re-sourcing your shell profile after every plugin reload
Claude Code Changelog
Policy dependency / Stack layer
Ordewell uses a read-only coding agent as planner, then spawns per-task agent sessions gated by a marker-based verdict engine
GitHub
Stack layer / Threat pattern
37,623 provenance-labeled agent PRs: Codex code was reverted half as often as human code, Devin's 31% more, and Claude Code PRs waited 12.6 hours for first review
arXiv 2609.17598
Policy dependency / Stack layer
Codex makes Code Mode wrappers transparent to Guardian policy and adds read-only policy to MCP tool requests
GitHub