Bouras, Dai and Mechtaev found a static denylist let 46 of 75 prompt injections execute in a coding agent, against 3 under preflight-scoped capabilities. A same-day Google report of malware stealing OIDC tokens from GitHub Actions runners puts the outer limit on an agent in the CI job's permissions.
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap+10
- Incentives
- Insufficient
- Confidence50
Chainguard disclosed 14 Java vulnerabilities that were fixed upstream but never assigned a CVE, one rated critical and one high. Teams still on the affected versions got no scanner alert, some for years, because nobody announced the fixes when they landed at HEAD.
Publishers:chainguard.dev
Reality
- Evidence40
- Adoption25
- Hype gap+10
- Incentives75
- Confidence45
The Linux Foundation is taking over an open spec for hardware-signed agent runtime evidence. The producing side now has code and a spec; nobody has yet named who accepts the record.
Perspective Coverage
4 publishers
- Builder
- Builder 39%
- Operator
- Operator 46%
- Investor
- Investor 15%
Reality
- Evidence55
- Adoption20
- Hype gap+30
- Incentives70
- Confidence60
September's wave altered more than 500 npm package versions and November's backdoored 796, both by republishing under a fresh version number, which is exactly the thing an exact pin declines to fetch.
Reality
- Evidence62
- Adoption
- Insufficient
- Hype gap+15
- Incentives
- Insufficient
- Confidence58
Reading soit-ai/soit v1.0.0 out of ghcr.io by hand shows how far a container signature reaches. It covers one digest, and the release tag survives as a string in the build predicate that nothing compares for you.
Reality
- Evidence62
- Adoption20
- Hype gap+25
- Incentives55
- Confidence60
Akamai says the May 11-12 wave poisoned a CI cache and minted publish credentials from inside a trusted build, so the attestation it produced was honest. Any gate that only checks for provenance would have passed it.
Reality
- Evidence38
- Adoption33
- Hype gap+9
- Incentives74
- Confidence44
Socket says all ten bad tarballs of @7nohe/openapi-react-query-codegen carry genuine GitHub Actions attestations, which is what you get when the attestation covers where a build ran rather than who wrote the commit it built.
Reality
- Evidence66
- Adoption58
- Hype gap+10
- Incentives72
- Confidence57
The Linux Foundation now hosts TRACE, a format for evidence of what an AI agent actually did. The package that produces those records still ships as a developer preview.
Reality
- Evidence54
- Adoption19
- Hype gap+28
- Incentives79
- Confidence56
Archiving a project with a billion Docker pulls turned an object store into an audit finding. Docker's extended support does not remove the migration, it moves the deadline out to 2031.
Reality
- Evidence28
- Adoption24
- Hype gap+34
- Incentives92
- Confidence32
field-cage blocks outbound connections from Linux runners in the kernel, keeps its logs on the box, and disclaims step correlation, tamper detection and organization-wide visibility.
Reality
- Evidence34
- Adoption9
- Hype gap−12
- Incentives46
- Confidence36
Docker AI Governance now streams every agent policy decision into the SIEM security already runs, with a searchable copy in Docker Cloud. Enforcement was the easy half.
Reality
- Evidence30
- Adoption34
- Hype gap+38
- Incentives86
- Confidence55
A one-person project translates Go's scheduler, channels, net/http and crypto/tls into Rust with no GC, no glibc and no Tokio, and stamps every function with its Go source line.
Reality
- Evidence30
- Adoption6
- Hype gap+38
- Incentives68
- Confidence42