Simon Willison’s Weblog·2 months ago·
18
● 39 sources
Anthropic is making auto mode the default for Claude Code on Pro, Max, and Team plans starting August 14th, citing confidence in its safety mechanisms. In a third-party evaluation by Trajectory Labs testing 720 indirect prompt injection attacks across Claude's latest models, none of the attacks succeeded. The change shifts responsibility from users approving individual actions to the model's autonomous decision-making, though questions remain about protection against sophisticated supply-chain attacks.
Researchers at Northeastern and Stanford released Shepherd, an open-source Python runtime that records agent executions as Git-like traces, enabling agents to fork, replay, and revert to any past state without restarting. Shepherd achieves 5× faster forks than Docker and over 95% prompt-cache reuse on replay. The system enables meta-agents to supervise and correct other agents mid-run, demonstrated by raising pair-coding pass rates from 28.8% to 54.7% on CooperBench.
Pokee AI released Pokee-Isaac 28B, a 28-billion-parameter model with a 10-million-token context window designed to run on-premises or on-device for regulated industries. The model achieved 93.3% on the RULER benchmark at 10M tokens and matches cloud baselines on agentic tasks while running on a single GPU. Organizations with data residency requirements can now deploy long-context agents locally without sending data to external APIs.
The page only describes an AI concept as something that acts as you in your browser. It provides 0 concrete details, metrics, or dates. As a result, there’s nothing specific to verify or act on from the article text itself.
Every AI story that matters,
in your inbox by 8am.
TLDRocket reads all relevant sources, removes duplicate coverage, and summarises the
day in two minutes. Follow companies and topics for alerts, or get the
briefing in Slack. Free, no spam, unsubscribe anytime.
Reading TLDRocket needs no cookies, and the readership counts we rely on come from
our own cookieless analytics. Google Analytics is the exception: it sets cookies and
reports to Google, so it stays switched off until you allow it. You can change your
mind any time from “Cookie settings” in the footer.
Strictly necessary
Session security and form protection (tldrocket-session,
XSRF-TOKEN, 2 hours). The site cannot work without them,
so they need no consent.
Always on
Google Analytics 4 (_ga,
_ga_<id>, up to 2 years). Measures which
stories and sections readers use. Google acts as a third-party processor and may
store the data outside the EU. No advertising, no profiling, no data sold.
