Topic hub
AI Security
A New Runtime topic hub collecting signals, patterns, field notes, and public sources about ai security.
Field notes
What should readers understand next?
MCP and OAuth Put Agent Authorization on the Critical Path
PropelAuth's MCP and OAuth 2.1 deep dive shows that agent protocols need explicit user, client, server, and scope boundaries.
RAPTOR Loop Hunt Packages Security Hunting as an Agent Skill
RAPTOR Loop Hunt shows security research moving toward looped agent skills with altitude changes, evidence collection, and review checkpoints.
The OpenAI Hugging Face Follow-Up Is Really About Control Boundaries
The Zvi follow-up on the OpenAI and Hugging Face incident keeps pointing back to evaluation boundaries, permissions, and agent control surfaces.
Open Secure AI Alliance Turns the AI-Safety Fight Into a Stack Question
NVIDIA's Open Secure AI Alliance reframes open models, harnesses, identity, safe formats, scanners, and disclosure as shared defensive infrastructure for AI agents.
Raw signals
What changed recently?
MCP and OAuth Put Agent Authorization on the Critical Path
PropelAuth's MCP and OAuth 2.1 deep dive shows that agent protocols need explicit user, client, server, and scope boundaries.
RAPTOR Loop Hunt Packages Security Hunting as an Agent Skill
RAPTOR Loop Hunt shows security research moving toward looped agent skills with altitude changes, evidence collection, and review checkpoints.
The OpenAI Hugging Face Follow-Up Is Really About Control Boundaries
The Zvi follow-up on the OpenAI and Hugging Face incident keeps pointing back to evaluation boundaries, permissions, and agent control surfaces.
Source ledger
Publishable sources attached to this record.
| # | Source | Role | Public status |
|---|---|---|---|
| 1 | aws.amazon.comsource | primary receipt | source_urls |
| 2 | blog.cloudflare.comarticle | supporting receipt | source_urls |
| 3 | blogs.nvidia.comarticle | supporting receipt | source_urls |
| 4 | github.comrepo | supporting receipt | source_urls |
| 5 | huggingface.cosource | supporting receipt | source_urls |
| 6 | learn.microsoft.comsource | supporting receipt | source_urls |
| 7 | learn.microsoft.comsource | supporting receipt | source_urls |
| 8 | openai.comsource | supporting receipt | source_urls |
| 9 | thezvi.substack.comsource | supporting receipt | source_urls |
| 10 | nccoe.nist.govsource | supporting receipt | source_urls |
Showing 10 of 14; the complete set is exposed in the JSON route.