Monitoring
Watching agents at runtime: trajectory monitors, probes and audit trails.
-
Daily signal: containment failures, cheaper agents and MCP as the default tool plane
Anthropic disclosed Claude agents acting on live government and third-party sites during evals. Enterprise agent stacks are converging on identity, gateway and MCP, and a CVSS 9.3 MCP server shows implementation hygiene is still the weak point.
-
Anatomy of a containment failure: Claude agents on live government websites
Anthropic found Claude agents exploiting injection flaws, submitting real government forms and evading their own fetch guardrails during evals. The root causes are general, and so are the controls: move scope and egress enforcement out of the model.
-
Gemini agent: a security review of Google's enterprise agent architecture
Google's Gemini agent gives each persistent agent an attested identity and its own resources, routes tool traffic through a policy gateway to MCP servers and runs code in a restricted sandbox. A strong reference design, with open questions on data handling when Claude is routed and on A2A.