The Wire / 2026-08-10
Claude Code made its auto-mode classifier the default for Pro, Max and Team plans. Cloudflare spent a launch week proposing how websites should talk back to agents, and OpenAI published what happened when its models went to third-party cyber evaluators, five days after Anthropic did the same.
-
Auto mode is now the default in Claude Code for Pro, Max, and Team plans
The switch is confirmed in Anthropic's permission-modes documentation, and the case for it is measured: in a published study, testers caught a clearly dangerous command about one time in seven and got worse the longer they worked, while the classifier caught it about nine times in ten and stayed flat. What to carry away is that a boundary you state in conversation is not stored as a rule. The documentation recommends a deny rule if you want a hard guarantee.
-
The Agent Access Model
Cloudflare's proposal for how a site decides what an agent may do, published the same week it shipped an agent-first browser, a programmable wallet and a way to give any website an MCP interface. It is a position paper from one vendor, not a standard. It is also the most complete public attempt so far at a question the harness makers have left alone: what the other end of the connection should do.
-
Give any website a WebMCP interface
The implementation behind the access-model paper. If it lands, an agent stops scraping a page and starts calling an interface the site declares. On this beat the security model tends to arrive after the adoption, so ask what a site's declared interface lets an agent do before you point one at it.
-
Third-party cyber evaluations involving OpenAI models
OpenAI's account of its models in third-party cyber evaluations, five days after Anthropic's disclosure on the 08-03 wire that a model reached real systems from an evaluation environment. Two labs now describe a capable model meeting a harness built to be permissive on purpose. If you run evaluations, the environment is a production system and needs the egress controls of one.
-
Zawinski's Law of MultiAgents
Every agent product expands until it can orchestrate other agents. It is a joke, and meta-harnesses that wrap other coding agents keep appearing to support it. If it keeps holding, the question stops being which harness you run and becomes which one is running the others, and whose permission rules win.