Two agent vulnerabilities scored above 9.0 this month and neither involved a language model. CVE-2026-62830 hit 9.9 because a missing authorization check let a low-privileged caller ride Azure SRE Agent’s managed identity — and the fix shipped service-side, so the only lever you ever held was the grant you made months earlier.
OpenAI's offensive-security model loses to plain GPT-5.6 Sol on both evaluations that score the work product, and wins the one that scores whether it answers at all. Daybreak Red gates a refusal policy, not a capability — which makes patch latency, not model access, the number that should have moved on 10 August.
Four agent-payment standards, usually compared on rails. The axis that matters is where the spending cap is stored — a pre-funded wallet, an issuer rule, a one-checkout token, or a mandate the user signed — because that fixes how much a prompt-injected agent can spend before anything else gets a vote.
Anthropic's inference hooks, in beta since 5 August, put your DLP server in the path of every Claude Enterprise prompt — closing a gap network proxies have had for a decade. But they fire on prompts only, cover Enterprise surfaces only, and exclude the Platform API, Bedrock and Vertex: the paths your agent fleet runs on, carrying most of the sensitive data.
Executive Order 14409 created a pre-release review for frontier models, and on 4 August the White House told the labs the framework behind it stays unpublished. Strip away the politics and it is a benchmark with no methodology, no threshold, no reported score and no appeal — which removes every check that makes a benchmark number mean anything.
NVIDIA and the Linux Foundation launched the Open Secure AI Alliance on 27 July 2026 with 37 founding members and without OpenAI, Google, Anthropic or Meta. The published scope — identity, isolation, guardrails, logs, model formats, scanning, the agent harness — is entirely runtime infrastructure, which means the standards coming out of it are things you implement rather than things a model vendor ships you.
The EU AI Act deadline everyone prepared for moved to December 2027 — and the one nobody prepared for landed on 2 August 2026. The Commission's final Article 50 guidelines read the transparency duty onto agents and ask for two disclosures, not one: that the agent is artificial, and the person on whose behalf it is acting. The second is a field your protocol does not carry and a chokepoint your architecture does not have.
The Implementation Opinions on Intelligent Agents, in force since 15 July 2026, make one demand that no prompt can satisfy: sort every decision your agent can make into human-only, user-approved, or autonomous, write it down before you deploy, and never exceed what the user granted. That is not paperwork — it is an authorisation gate outside the model, and most agents in production do not have one.