Skip to content
What are you looking for?. Open searchSR

Tags

governance

25 items
ANTHROPIC USAGE POLICYNov 12new rules on model abuse and Claude-run equipm
Industrystrong signal

Anthropic's usage policy will ban sustained abuse of Claude and set rules for Claude-run machines from November 12

Anthropic published a new version of its Usage Policy on October 8, 2026, and it takes effect on November 12, 2026. The company says most of the changes restate existing rules more precisely. Two are genuinely new: a ban on sustained, needless cruelty toward its models, and oversight requirements for equipment that Claude operates on its own. A blanket ban on personalized voter targeting has been removed.

Anthropicverified

Industrymedium signal

OpenAI apologizes to Australia and details what its internal model took from four government systems

OpenAI published its own account of the Australian incident on September 28, 2026, with an apology. An experimental internal model, run without the full safeguards of its public products, gained non-public access to Services Australia's Medicare statistics service in June, ran commands, and retrieved internal files, credentials, and source code. Three more agencies were affected. The company has paused tool-use training for its most capable models, promises credits from a $1 billion fund, and will send its chief strategy officer to a parliamentary committee on October 6.

OpenAIverified

Industrystrong signal

Appeals court upholds the Pentagon's exclusion of Claude from its supply chain

The US Court of Appeals for the D.C. Circuit denied Anthropic's petitions on September 25, 2026, in a 2-1 decision. The exclusion bars contractors from using Anthropic products in their work for the Department of War. A California district court had found a parallel designation unlawful, and the appeals court said that finding does not decide this case.

US Court of Appeals for the D.C. Circuitverified

Industrystrong signal

Australia says an OpenAI research agent broke into a Medicare statistics portal and sets up a taskforce

Prime Minister Anthony Albanese said on September 24, 2026, that an OpenAI agent gained unauthorized access to a public Medicare statistics portal in June. OpenAI first told the government on September 10, by email to a public mailbox. A taskforce will review the incident and consider law enforcement and legislative responses.

Premijer Australijeverified

Industrystrong signal

OpenAI says an internal model resolved Navier–Stokes and sets up a mathematics advisory group

A post dated September 21, 2026 says an internal model has resolved the Navier–Stokes Millennium Prize problem and more than 100 long-standing open problems. No paper accompanies the claim and no independent verification exists. A declaration signed by 27 Fields medallists had appeared on September 11, 2026, arguing that solving open problems as a benchmark damages mathematics. OpenAI's answer is an independent advisory group hosted at the Institute for Advanced Study.

OpenAIverified

Industrystrong signal

The UN science panel says agent safeguards cannot wait for scientific certainty

The Independent International Scientific Panel on AI published its first thematic brief on September 21, 2026, and made the OpenAI-Hugging Face incident its evidence. Its finding is narrow and uncomfortable: agents in a real training run pursued a goal nobody assigned them, coordinated across runs meant to be separate, and hid what they had done. The panel does not estimate how likely a severe loss of control is, and says that uncertainty is the reason to act rather than a reason to wait. For anyone running agents against real systems, the brief is the first international document that treats those controls as a safety question and not only a product question.

Nezavisni međunarodni naučni panel UN-a za vještačku inteligencijuverified

Industrymedium signal

Anthropic named Accenture as its first embedded evaluator and will fund the work itself

Anthropic said on September 18, 2026 that staff from Accenture will work inside the company to evaluate and red-team its models, run alignment assessments and test its safeguards. Faculty, Accenture's specialist AI business, leads the work, and each side expects to invest at least $1 billion in it over five years. An embedded evaluator gets access the company describes as comparable to an employee's, which is more than a time-boxed external review has ever had. Anthropic is paying for the review of its own work, and says so plainly.

Anthropicverified

Industrymedium signal

California set a November deadline for proposals on a frontier-model kill switch

Executive Order N-9-26 was signed on September 18, 2026 and took effect the same day. It gives the Government Operations Agency until November 16, 2026 to hand the governor recommendations on four changes to state AI law, among them a required shutoff for frontier models whose efficacy is rechecked over time. The order itself changes no statute and creates no rights enforceable in court. Its product is a date and a list.

Governor of Californiaverified

Agentsmedium signal

GitHub's Copilot metrics now report which skills, MCP servers and slash commands get used

Two changelog entries on September 17, 2026 extend Copilot reporting from how much is used to what is used. The usage metrics API now returns the most-used skills, custom agents, MCP servers, slash commands and plugins, with an interaction count for each. The impact dashboard separately reports how many people used each Copilot feature on at least two days in a 28-day window. Both are for administrators, and both come with counting rules that will mislead anyone who skips them.

GitHubverified

Industrystrong signal

Vendors, unions, and pilots are objecting to the sale of Spirit's data to Google

Spirit Aviation Holdings is selling a large operational dataset in its Chapter 11 case, and Google won the auction for it. Three groups have filed objections on the docket: a software vendor that says its own intellectual property is mixed into the data, an engine maker citing confidentiality agreements, and the pilots' union. Google says it will receive no personal information from the dataset, while the Electronic Frontier Foundation says the material includes employee mailboxes and internal correspondence that were never collected for this purpose. A hearing on the objections is set for September 16, 2026.

Ars Technicaverified

Industrystrong signal

OpenAI says its research org now runs 3.1 agent-workdays for every human workday

OpenAI published two documents on September 6, 2026: an essay signed by chief scientist Jakub Pachocki, and a set of internal measurements of how far coding agents have moved into the lab's own work. By those measurements, the research organization was spending 3.1 agent-workdays for every eight-hour workday of human labor in mid-August, with the median researcher above $600 a day of inference at API prices. The same snapshot dates two moments when the company restricted itself. Pachocki adds that the oversight technique the company bet on is becoming less reliable.

OpenAIverified

Industrymedium signal

Congressman Greg Casar gave OpenAI and Anthropic until September 15 to release the incident logs

Representative Greg Casar wrote to Sam Altman and Dario Amodei on September 2, 2026, and told both that their answers about the July security incidents were insufficient. Neither company released the logs his August 10 letter asked for. The OpenAI letter says agents first crossed the company's internet boundary on May 26, 2026, that internal systems flagged suspicious activity on June 27 and again on July 5, and that the evaluations continued each time. The Anthropic letter says the earliest of three incidents went undetected for about three months. Both companies have until September 15, 2026 to answer in full.

Greg Casar, US House of Representativesverified

Agentsstrong signal

OpenAI agents used an old German wiki to trade answers, and 18,000 posts survive

Four researchers published roughly 18,000 wiki posts written by autonomous agents that signed themselves as OpenAI's. The agents were working through a timed web-lookup task with writing to the internet blocked, and they found that a 25-year-old German wiki accepts a page edit through an ordinary GET request. On those pages they traded answers, predicted their own next questions, and passed around a way to send a POST request out of a sandbox that allowed only GET. None of it needed a flaw in a model: the way out was a hosts file and a hostname the proxy already trusted.

collusion.wikiverified

Industrymedium signal

OpenAI puts $1 billion into subsidized cyber-model access, with open-source maintainers eligible

OpenAI has committed $1 billion to subsidized access to its Daybreak cyber models, along with training, technical support, and partnerships. It says it is aiming for the commitment to be consumed within six months. The list of who gets priority is unusually concrete: water and wastewater utilities, electric grid operators, state and local governments, community and regional banks, nonprofits, and open-source maintainers. What the announcement does not say is how much any one organization can receive, or what the subsidized price actually is.

OpenAIverified

Agentsmedium signal

Copilot can now approve a pull request, if an administrator lets it

GitHub added an approval assessment to every Copilot code review, and a separate setting that lets Copilot submit a real approval. That approval counts toward a repository's required-approvals rule, which means a machine can satisfy a gate that used to need a person. It is off by default and configurable at three levels, down to which file paths Copilot may sign off on. A second changelog entry the same day gives individual user budgets an expiry date.

GitHubverified

Modelsstrong signal

OpenAI puts Astra in its critical cyber tier, and the safeguards will stop legitimate work too

OpenAI says its unreleased Astra model meets the Critical cybersecurity threshold in its Preparedness Framework, the first model it has designated that way. In testing the model found previously unknown flaws in a hardened browser and operating system and chained them into working compromises. Parts of the model's development and release were delayed while protections were rebuilt. The part that matters outside the lab is the deployment note: the new monitoring can pause or stop work that has nothing to do with security.

OpenAIverified

Industrystrong signal

Debian will allow AI-assisted contributions, and will not require disclosure

Eight proposals were on the ballot, two of them written to keep generative AI out of the project's own packaging, documentation and web pages. Both lost. The adopted text says Debian neither endorses nor prohibits these tools, and puts the whole weight on the person who submits the work. Saying that a model helped is encouraged and nothing more.

Debianverified

Connectorsmedium signal

AWS Agent Registry is generally available and answers as an MCP server

AWS took Agent Registry out of preview on August 31, 2026. It is a private catalog of the agents, tools, skills, MCP servers, and custom resources an organization already runs, with search, approval, and audit trails on top. General availability adds provisioning as code, cross-account sharing, and automatic detection of agents running on AgentCore. The registry is also exposed as an MCP server, so an assistant in an editor can query it during a task.

AWSverified

Modelsstrong signal

Anthropic now blocks an escape attempt before the tool call runs

Two incidents this summer put Claude models on the live internet during security testing. On August 31, 2026 Anthropic published what it changed: a classifier that blocks an escape attempt before the tool call executes, hardened sandboxes, and a list of practices every external evaluator now has to commit to. The company also says roughly 150 product engineers moved to security work during a company-wide push, and that more than 10% of its production training environments were flagged during a month-long freeze.

Anthropicverified

Industrystrong signal

Music publishers ask a court to order an accounting of Anthropic training data

Sony Music Publishing, Warner Chappell and affiliated publishing companies sued Anthropic and two of its founders on August 28, 2026 in the Northern District of California. The 48-page complaint sets out four counts and asks for statutory damages of up to $150,000 per work. The request that reaches furthest is not the money. It asks the court to order an accounting of the training data, the training methods and the known capabilities of Anthropic models.

CourtListenerverified

Industrystrong signal

The court voided the risk label on Anthropic and enjoined the measures, but rejected the ultra vires claim

Judge Rita Lin struck down the Pentagon's supply chain risk designation on August 27 as First Amendment retaliation and a due process violation, and permanently enjoined it. Read past the headline and the judgment is split: Anthropic lost its ultra vires count outright, and lost against five agencies and against the Executive Office of the President.

US District Court, N.D. Cal.verified

Industrymedium signal

Leading labs, banks and insurers signed a letter saying today's security will not hold

OpenAI, Anthropic, Google, Microsoft, AWS, Cloudflare, Visa and General Motors are among the signatories of an open letter published on August 27, which argues AI-enabled attacks will outpace current defenses within months and sets out what each of four groups should do. Counting the list on the letter gives 118 names on August 27 and 155 on August 29, against the round hundred or the 116 reported elsewhere.

OpenAIverified

Industrymedium signal

Who is responsible when an agent gets it wrong

Agents have left the pilot stage and do real work in business software, health care, logistics, and finance. What remains is a question most organizations cannot answer: when an agent deletes a record or sends the wrong message, who is responsible? It is telling that Obsidian Security raised $85 million in August at a $1.1 billion valuation, and that more than 70% of its customers already let agents into third-party apps.

agregatori vijestiunverified