Scaling Managed Agents: Decoupling the brain from the hands
… The read command is agnostic as to whether it’s accessing a disk pack from the 1970s or a modern SSD. …
… The read command is agnostic as to whether it’s accessing a disk pack from the 1970s or a modern SSD. …
… 1 The second approach to capping the blast radius—and the focus of much of this post—is containment. Rather than supervising what the agent does, we supervise what it’s able to do by enforcing access boundaries through, for example, sandboxes, virtual machines, and egress controls. …
… Let me try a simpler test to confirm RCE: curl -H "Content-Type: %{ ='multipart/form-data' . dm=@ognl.OgnlContext@DEFAULT MEMBER ACCESS . memberAccess? memberAccess= dm : container= context 'com.opensymphony.xwork2.ActionContext.container' . ognlUtil= container.getInstance @com.opensymphony.xwork2.… …
… There were sixteen additional problems where Opus tried to access benchmark materials but failed. …
… Claude is given relatively unrestricted access to downloading tools and accessing databases, allowing Claude to choose diverse sets of strategies for solving a problem. …
… It is a messy network of roads, each with its own identifiers, conventions, formats, filtering logic, and degree of programmatic access. Some data are straightforward to access programmatically. …
… The Institute has a unique vantage point: it has access to information that only the builders of frontier AI systems possess. …
… WasmGC struct field access is just a memory load at a fixed offset from the struct pointer. …
… But there is still a lot that defenders without access to this model can do today. …
… These are the operational phases discovery → credential access → lateral movement that were more rare in our dataset. …