THE DAILY BRIEF

On August 14 Claude Code defaults to auto mode on Pro, Max and Team plans. Anthropic's own docs say only permissions.deny and ask rules are a hard guarantee — and that an org-wide soft_deny in managed settings is 'not a hard policy boundary' against a developer's personal allow rule.

DOE's Genesis Open Models portal wants proprietary scientific data and the first window closes August 14. Applying transfers nothing — but there is no published contributor agreement, so the handling terms are yours to draft.

At DEF CON 34, researchers escalated one AI agent's cloud privileges through a second agent running in a different framework — using nothing but authorized IAM calls. Per-agent least privilege bounds what an agent can do, not what it can arrange.

AMD signed a definitive agreement on August 6 to buy Taalas, whose chips etch model weights into mask ROM so one chip serves exactly one model. The business model assumes a one-year hardware life, which makes the cheapest inference tier available only to workloads whose model you can name and freeze.

npm removed ChainDrop's malicious versions within about two hours. The worm's second infection route never lived in a package — it lives in .claude/settings.json and .vscode/tasks.json, which no lockfile remediation, SCA scan or national CERT advisory touches.

More than nine in ten health systems have deployed third-party AI, and 23 of 25 say they test it before go-live. Only 11 have a platform to test on — so most hospitals are validating against the vendor's own accuracy numbers, measured on somebody else's patients.