THE DAILY BRIEF

AgentCore's new Instances compute type runs agents on EC2 in your own account for up to 14 days. AWS's documentation states that agents sharing an instance get no security boundary, that the platform does not verify a session ID belongs to the caller, and that the billable instances are hidden from your EC2 console by default.

Seven agent monitoring tools priced against the same workload: 50,000 runs a month at 12 steps each. Self-hosted Langfuse wins on cost and audit depth — but only one of these tools sits in the request path where it can actually stop a runaway agent, and that is the part you have to build yourself.

Meta's Muse Glimmer scores 75.5 on MCP Atlas inside a 24GB memory envelope under Apache 2.0, so agentic tool-calling now runs on hardware engineers already own. Every AI control you have — prompt logging, token accounting, DLP, model pinning, the kill switch — is implemented at a gateway that no longer sees the traffic.

DOE's Genesis Open Models portal wants proprietary scientific data and the first window closes August 14. Applying transfers nothing — but there is no published contributor agreement, so the handling terms are yours to draft.

Six enterprise RAG platforms rated on the only thing that matters in a bank or a hospital: whether the source system's permissions are enforced at query time, and whether you can prove it to an auditor.

Self-host LiteLLM: per-team budgets and virtual keys are in the free open-source tier, while everyone else gates enforcement behind a sales call. Priced through one 50M-request workload, the platform layer ranges from $7 to $10,300 a month.