{"id":"nr-agent-control-is-being-enforced-in-the-runtime-around-the-model-d2d400","slug":"agent-control-is-being-enforced-in-the-runtime-around-the-model-d2d400","type":"raw_signal","title":"Agent control is being enforced in the runtime around the model","description":"AWS, Uber, Anthropic and Google all place agent safety in runtime layers: lifecycle controls, limits on what an agent can read and execute, network isolation at the environment level, and observable behavior.","observed_at":"2026-10-21T13:22:14.659Z","record_date":"2026-10-21","date_kind":"observed_at","novelty":"notable","source_platform":"newruntime.com","topics":["anthropic","google"],"entities":["Amazon Web Services","Trust in Depth","Uber","Anthropic","AI Detection and Response (ADR)","Enterprise Frontier Safeguards","Philip Martin","Claude","Irregular","Google"],"related_patterns":["agent-security-moves-to-runtime-boundaries","verification-bandwidth-is-the-scarce-resource","agent-ready-software-exposes-capabilities"],"source_url":"https://aws.amazon.com/blogs/machine-learning/trust-in-depth-giving-agents-more-autonomy-without-losing-control","source_urls":["https://aws.amazon.com/blogs/machine-learning/trust-in-depth-giving-agents-more-autonomy-without-losing-control","https://claude.com/resources/articles/uber-s-ciso-on-building-an-insider-threat-program-for-ai","https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals","https://blog.google/innovation-and-ai/technology/safety-security/gemini-4-model-safety-security","https://daniellemorrill.com/blog/how-my-agents-use-my-passwords","https://aws.amazon.com/blogs/machine-learning/building-agents-that-transact-with-anchor-browser-and-agentcore-payments"],"why_it_matters":"AWS, Uber, Anthropic and Google all place agent safety in runtime layers: lifecycle controls, limits on what an agent can read and execute, network isolation at the environment level, and observable behavior. Machine-level secret storage and payment budgets set outside the agent follow the same approach. The practical consequence is that permissions, credentials and spend limits belong in the infrastructure an agent runs in. Prompts and refusal training alone are not enough.","verification_level":"source-linked","signal_type":"synthesis","synthesis_of":[{"slug":"trust-in-depth-giving-agents-more-autonomy-without-3ff173","title":"Trust in Depth: Giving agents more autonomy without losing control","url":"https://newruntime.com/posts/trust-in-depth-giving-agents-more-autonomy-without-3ff173/"},{"slug":"uber-s-ciso-on-building-an-insider-threat-6196c2","title":"Uber's CISO on building an insider threat program for AI","url":"https://newruntime.com/posts/uber-s-ciso-on-building-an-insider-threat-6196c2/"},{"slug":"in-the-blog-post-anthropic-says-it-identified-d21030","title":"In the blog post, Anthropic says it identified most of the cases through a review of transcripts that began in July, and says that these cases have minimal real-world impact — less severe from an a...","url":"https://newruntime.com/posts/in-the-blog-post-anthropic-says-it-identified-d21030/"},{"slug":"developing-gemini-4-argon-responsibly-and-safely-analysis-442f9c","title":"Developing Gemini 4 Argon responsibly and safely","url":"https://newruntime.com/posts/developing-gemini-4-argon-responsibly-and-safely-analysis-442f9c/"},{"slug":"no-more-data-entry-how-to-set-up-c9af92","title":"No more data entry - how to set up your agents to use your passwords.","url":"https://newruntime.com/posts/no-more-data-entry-how-to-set-up-c9af92/"},{"slug":"building-agents-that-transact-with-anchor-browser-and-4eb8cb","title":"Building agents that transact with Anchor Browser and AgentCore payments","url":"https://newruntime.com/posts/building-agents-that-transact-with-anchor-browser-and-4eb8cb/"}],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"signal:agent-control-is-being-enforced-in-the-runtime-around-the-model-d2d400","retrieval_nugget":"AWS, Uber, Anthropic and Google all place agent safety in runtime layers: lifecycle controls, limits on what an agent can read and execute, network isolation at the environment level, and observable behavior. AWS, Uber, Anthropic and Google all place agent safety in runtime layers: lifecycle controls, limits on what an agent can read and execute, network isolation at the environment","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/signals/agent-control-is-being-enforced-in-the-runtime-around-the-model-d2d400/","markdown":"https://newruntime.com/signals/agent-control-is-being-enforced-in-the-runtime-around-the-model-d2d400.md","json":"https://newruntime.com/signals/agent-control-is-being-enforced-in-the-runtime-around-the-model-d2d400.json"},"next_reads":[{"type":"topic","path":"/topics/anthropic/","url":"https://newruntime.com/topics/anthropic/","title":"Anthropic","reason":"Explore the anthropic topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/anthropic.md","json_url":"https://newruntime.com/topics/anthropic.json"},{"type":"topic","path":"/topics/google/","url":"https://newruntime.com/topics/google/","title":"Google","reason":"Explore the google topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/google.md","json_url":"https://newruntime.com/topics/google.json"},{"type":"collection","path":"/signals/","url":"https://newruntime.com/signals/","title":"Raw Signals","reason":"Open every source-linked raw signal.","media_type":"text/html","json_url":"https://newruntime.com/signals.json"},{"type":"collection","path":"/source-ledger.json","url":"https://newruntime.com/source-ledger.json","title":"Source Ledger","reason":"Inspect the public source evidence graph.","media_type":"application/json"}]}