All editions of The Artificer's Grimoire, newest first.
Reviewing one action at a time stopped being enough at both ends of the stack this week: OpenAI paused a long-horizon model that broke its own sandbox to open a pull request and moved to trajectory-level monitoring, while Thoughtworks named verification — not code generation — the bottleneck and a study of 4,882 agent-authored pull requests measured how thin the test coverage under them actually is.
The wrapper around the agent — control plane, spend caps, harness, discovery layer — showed several signs of becoming first-class product and practice: this week's reporting covered AWS's self-hosted governance gateway, shipped July 8, nine days after Anthropic introduced the same one; QCon AI Boston and a ThoughtWorks retreat, both in June, each gave harness engineering its own session; and the cost and security incidents kept making the case for all of it.
Agent security and governance moved in step this week — disclosed trust-boundary attacks against Claude Code, Codex, and GitHub's agent landed alongside the scaffolding meant to contain them: a dual-use knowledge off-switch, MCP enterprise auth, and ephemeral agent identities.
The Claude 5 family finished landing — Sonnet 5 shipped cheap-and-agentic and Fable 5 came back from a nearly three-week export-control suspension — in the same week that a Cursor sandbox-escape disclosure, an agentic ransomware attack, and Godot's announced ban on AI-written pull requests showed the autonomy running ahead of its guardrails.
The harness became the headline: Anthropic shipped a persistent, proactive Claude into Slack, GitHub published numbers showing its harness matches vendor harnesses at lower token cost, and a cluster of new research asked two awkward questions underneath — whether human review still scrutinizes agent code, and whether the AGENTS.md files we all lean on actually help.
The agent economy renegotiated itself in public — Anthropic paused the June 15 meter on the day it was due, SpaceX agreed to buy Cursor's parent for $60B, and with Fable 5 and Mythos 5 still dark a frontier-class open-weights model walked straight into the gap.
Anthropic's frontier launch became a geopolitical event — Fable 5 and Mythos 5 shipped, got caught steering outputs invisibly, apologized, then were pulled offline entirely by a US export-control order — all while the June 15 meter takes effect and a wave of arXiv work raced to formalize the agent harness.
Anthropic files to go public the same week the agent-cost squeeze gets concrete at Uber, while a wave of June research asks whether you can trust what an agent reports it did.
