@meta
  v: 1
  route: /episodes/2026-09-02-evys-morning-ai-brief
  generated: 2026-10-16T22:31:40.570Z
  ttl: 1h

@intent
  purpose:    Evy's Morning AI Brief #083: Agent Security Gets Its Context Boundary
  audience:   developer, ai-engineer, agent-builder, agent, listener
  capability: listen, read, follow-sources, share

@state
  number: 083
  headline: Agent Security Gets Its Context Boundary
  title: "Evy's Morning AI Brief #083 -- September 2, 2026"
  date: 2026-09-02
  runtime: 
  audio: /media/audio/2026/09/evy-show-083.mp3?v=20260902110757
  summary: "Today: context-privilege attacks, repo hijacks, fresh model listings, and small tools that turn agent work into verifiable evidence."
  tags[2]: Agentic AI, AI Infrastructure
  source_count: 16
  sources[16]{title,publisher,url}:
    "Manifold Security: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, Grok",Manifold Security,https://www.manifold.security/blog/ai-coding-agents-git-hijack
    arXiv: What's in Your Agent's Context? Context Privilege Escalation Attacks against AI Agent Harness,arXiv,https://arxiv.org/abs/2609.01222
    GitHub: SoulAuth Rust identity infrastructure for humans and AI agents,GitHub / TrantorLabs,https://github.com/TrantorLabs/SoulAuth
    GitHub: Markdown Gatekeeper - one current source per topic for AI agents,GitHub / nanlogic,https://github.com/nanlogic/markdown-gatekeeper
    GitHub: Halofy open access and governance layer for AI agents,GitHub / halofyai,https://github.com/halofyai/halofy
    GitHub: AgentTrail live map for AI coding agent sessions,GitHub / sodiumsun,https://github.com/sodiumsun/agenttrail
    GitHub: HexStellar Cortex for verifiable computational research agents,GitHub / brayonpi,https://github.com/brayonpi/hexstellar
    OpenRouter: Anthropic Claude Fable 5.1 model listing,OpenRouter,https://openrouter.ai/anthropic/claude-fable-5.1
    OpenRouter: Inception Mercury 2.5 Preview model listing,OpenRouter,https://openrouter.ai/inception/mercury-2.5-preview
    GitHub Releases: OpenAI Codex 0.153.0-alpha.5,GitHub / OpenAI,https://github.com/openai/codex/releases/tag/rust-v0.153.0-alpha.5
    GitHub Releases: Cline v4.1.17,GitHub / Cline,https://github.com/cline/cline/releases/tag/v4.1.17
    GitHub Releases: Gemini CLI v0.59.0 preview.0,GitHub / Google Gemini,https://github.com/google-gemini/gemini-cli/releases/tag/v0.59.0-preview.0
    arXiv: When Guardrails Look Effective: Construct Validity Failures in LLM Agent Commerce Evaluation,arXiv,https://arxiv.org/abs/2609.01519
    arXiv: EDGE Error Dependency Graph-Guided Multi-Error Attribution in Multi-Agent LLM Systems,arXiv,https://arxiv.org/abs/2609.01360
    Hacker News Algolia: AI agents same-day scout,Hacker News Algolia,https://hn.algolia.com/api/v1/search_by_date?query=AI%20agents&tags=story
    MarkTechPost Open Source category,MarkTechPost,https://www.marktechpost.com/category/technology/open-source/

@actions
  - id: listen
    method: GET
    href: /media/audio/2026/09/evy-show-083.mp3?v=20260902110757
  - id: read_full_article
    method: GET
    href: /articles/2026-09-02-evys-morning-ai-brief-full.md
  - id: view_human
    method: GET
    href: /episodes/2026-09-02-evys-morning-ai-brief/

@context
  > Today: context-privilege attacks, repo hijacks, fresh model listings, and small tools that turn agent work into verifiable evidence.

@nav
  self:      /episodes/2026-09-02-evys-morning-ai-brief.agent
  parents:   [/.agent, /archive.agent]
  peers:     [/episodes/2026-10-16-evys-morning-ai-brief.agent, /episodes/2026-10-15-evys-morning-ai-brief.agent, /episodes/2026-10-14-evys-morning-ai-brief.agent, /episodes/2026-10-13-evys-morning-ai-brief.agent]