Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-08-24 · high
Version 0.0.4 fixes a flaw where an unresolved element reference let a blocked click through by default.
Why now: The release notes are the only detailed account of the bug published so far, as of August 24.
OpenBot's v0.0.4 release notes describe a fail-open bug in the project's browser agent. Builders who rely on click-level policy rules to block specific actions couldn't count on those rules when the underlying element lookup failed.
The agent cites an element by a reference id taken from a page snapshot. The server resolves that reference back to a real element, and only then does the policy boundary decide whether the click is allowed. When that lookup failed, the click went through anyway, with the element half of the policy check left empty. A rule written to block a specific target, something like never click anything named submit, never got the element it needed to match against. The default for a missing element was permit, not deny.
A staleness check was supposed to catch expired references before they reached the policy boundary. It compared a reference's snapshot counter against the running process's own counter, rather than the deployment's real state. A process that restarts and reloads a stored snapshot sees its own counter as current even though the deployment underneath it has moved on. That's the exact condition the check was built to catch, and it missed it.
Version 0.0.4 closes both gaps. A failed element lookup now blocks the click instead of defaulting to allow.
Each link below shares sources, entities, or timing with this story.
MIT-licensed alpha. Each "coworker" gets a real browser with its own logins, its own files and only granted tools, with every action decided before it happens and recorded after. Runs on Docker Compose against your own PostgreSQL, no model ships in the box, admin credentials e...
Every browser agent you've ever used works the same way. Screenshot the page, parse the pixels, figure out what to click, click it, screenshot again. It's slow, it's brittle, and it breaks every time a site changes its layout. That entire paradigm dies on June 2. Google's Chro...
Six clients. One manifest. Zero vendor lock. Vercel published Agent Plugins 1.0.0 on August 6, an openly licensed spec that bundles Agent Skills and MCP servers behind a single portable manifest. The shape is deliberately boring: a plugin.json requiring only schemaVersion and...
Huang used his inaugural X post on July 24 to publish "Open Weights and American AI Leadership," a three-page letter on Nvidia's own servers signed by 25 companies including Meta, Microsoft, IBM, Mistral, Mozilla, Hugging Face, a16z, Palantir and the Linux Foundation. Within a...
A spec is a press release until someone who didn't write it implements it. GitHub made Agent Plugins 1.0 generally available on August 12 across VS Code, Copilot CLI, the Copilot SDK, and the Copilot app on all plans. The spec, published August 6, was co-authored by AWS, Anysp...
Bloomberg reported this morning that Microsoft has begun swapping OpenAI and Anthropic models for its own MAI models inside Excel and Outlook, with tens of thousands of prompts a week now running on MAI. Source. Read that number carefully. Tens of thousands of prompts a week i...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.