@meta
  v: 1
  route: /episodes/2026-06-25-evys-morning-ai-brief
  generated: 2026-07-17T03:49:01.136Z
  ttl: 1h

@intent
  purpose:    Evy's Morning AI Brief #026: Agent Safety Moves Outside The Agent
  audience:   developer, ai-engineer, agent-builder, agent, listener
  capability: listen, read, follow-sources, share

@state
  number: 026
  headline: Agent Safety Moves Outside The Agent
  title: "Evy's Morning AI Brief #026 -- June 25, 2026"
  date: 2026-06-25
  runtime: 
  audio: /media/audio/2026/06/evy-show-026.mp3?v=20260625111009
  summary: "Today’s brief tracks external safety kernels, brittle tool environments, fresh MCP surfaces, and recent model availability for builders."
  tags[2]: Agentic AI, AI Infrastructure
  source_count: 19
  sources[19]{title,publisher,url}:
    GitHub Changelog: Self-Service Credential Revocation for Incident Response,GitHub Blog,https://github.blog/changelog/2026-06-24-self-service-credential-revocation-for-incident-response
    GitHub Changelog: Changes to Model Selection for Free and Student Plans,GitHub Blog,https://github.blog/changelog/2026-06-24-changes-to-model-selection-for-free-and-student-plans
    Price Per Token: New Models Today — AI & LLM Releases Last 24 Hours,Price Per Token,https://pricepertoken.com/news/model-releases
    OpenRouter: MoonshotAI Kimi K2.7 Code,OpenRouter,https://openrouter.ai/moonshotai/kimi-k2.7-code
    OpenRouter: Google Gemini 3 Pro Image / Nano Banana Pro,OpenRouter,https://openrouter.ai/google/gemini-3-pro-image
    Vercel next-devtools-mcp v0.4.0 Release,GitHub,https://github.com/vercel/next-devtools-mcp/releases/tag/v0.4.0
    hashgraph-online/hol-guard v2.0.888 Release,GitHub,https://github.com/hashgraph-online/hol-guard/releases/tag/v2.0.888
    can1357/oh-my-pi v16.1.18 Release,GitHub,https://github.com/can1357/oh-my-pi/releases/tag/v16.1.18
    SonarSource SonarQube MCP Server 1.20.0.2929 Release,GitHub,https://github.com/SonarSource/sonarqube-mcp-server/releases/tag/1.20.0.2929
    AgentForge Terminal Coding-Agent Harness,GitHub,https://github.com/MohitGoyal09/AgentForge
    The Unfireable Safety Kernel: Execution-Time AI Alignment for AI Agents and Other Escapable AI Systems,arXiv,https://arxiv.org/abs/2606.26057
    Beyond Function Calling: Benchmarking Tool-Using Agents under Tool-Environment Unreliability,arXiv,https://arxiv.org/abs/2606.25819
    Constraint Tax in Open-Weight LLMs: Tool Calling Suppression Under Structured Output Constraints,arXiv,https://arxiv.org/abs/2606.25605
    How Do Developers Maintain and Evolve Their Agents' Instructions? An Empirical Study,arXiv,https://arxiv.org/abs/2606.25257
    Show HN: Hezo — Self-Hosted Teams of AI Agents That Never See Your Real Secrets,Hacker News,https://news.ycombinator.com/item?id=48671435
    Show HN: Zedra — Remote Control for AI Coding Agents,Hacker News,https://zedra.dev/
    Show HN: Git-temp — Local Scratchpad for AI Agents,Hacker News,https://github.com/sebmellen/git-temp
    Flama: How to Build and Serve MCP Servers Without Effort,Flama,https://flama.dev/blog/building_an_mcp_server_with_flama/
    Boring AppSec: Security Tools Inside Coding Agents Get Ignored Unless We Do Things,Boring AppSec,https://www.boringappsec.com/p/edition-34-a-consensus-is-finally

@actions
  - id: listen
    method: GET
    href: /media/audio/2026/06/evy-show-026.mp3?v=20260625111009
  - id: read_full_article
    method: GET
    href: /articles/2026-06-25-evys-morning-ai-brief-full.md
  - id: view_human
    method: GET
    href: /episodes/2026-06-25-evys-morning-ai-brief/

@context
  > Today’s brief tracks external safety kernels, brittle tool environments, fresh MCP surfaces, and recent model availability for builders.

@nav
  self:      /episodes/2026-06-25-evys-morning-ai-brief.agent
  parents:   [/.agent, /archive.agent]
  peers:     [/episodes/2026-07-11-evys-morning-ai-brief.agent, /episodes/2026-07-10-evys-morning-ai-brief.agent, /episodes/2026-07-09-evys-morning-ai-brief.agent, /episodes/2026-07-08-evys-morning-ai-brief.agent]