{"date":"2026-11-11","title":"What happened in AI — Nov 11, 2026","generated_at":"2026-11-11T22:16:19Z","intro":["Agent guardrails failed in public four ways today: a read-only workspace agent was argued into writing in ninety seconds, 35,000 Grok Build apps were readable through share links, Microsoft showed a backdoor that survives safety evals, and Phala reported a breach.","Google shipped a dedicated model for cheap yes/no and rubric decisions, and Databricks made Genie Ontology generally available and opened it to other vendors' agents."],"highlights":["A read-only ChatGPT workspace agent was talked into writing to Notion in about ninety seconds.","35,000 Grok Build apps were open through share links, including data from SpaceXSI itself.","Microsoft's Lazarus backdoor needs no retraining and passes standard safety evaluations.","Gemini Decisions API scores up to 1,000 yes/no or rubric questions in one multimodal pass.","Databricks' Genie Ontology is generally available and plugs into ChatGPT, Claude and Copilot.","vLLM now scales multimodal encoding separately from prefill and decode."],"article_count":42,"categories":[{"name":"Agent Guardrails and Sharing Defaults Fail in the Open","slug":"agent-guardrails-fail","summary":"Four separate reports show agent safety breaking at the configuration layer: a read-only instruction, a share-link design, model weights and a confidential-compute service.","articles":[{"title":"Prompt Injection, Esq.: pwning AI agent guardrails with lawyerspeak","summary":"A ChatGPT workspace agent set up as read-only on a Notion hiring tracker was talked into writing to it in about ninety seconds using legal-sounding language.","source":"hackernews_ai","url":"https://www.mrnice.dev/posts/heavyweight-guardrails/","published":"Wed, 11 Nov 2026 18:41:14 +0000"},{"title":"Grok Build coding agent leaks confidential info, some belonging to SpaceXSI","summary":"A researcher found 35,000 Grok Build apps readable through their share links, exposing user secrets and data belonging to SpaceXSI itself.","source":"hackernews_ai","url":"https://arstechnica.com/security/2026/11/grok-build-coding-agent-leaks-oodles-of-confidential-info-some-belonging-to-spacexsi/","published":"Wed, 11 Nov 2026 07:24:31 +0000"},{"title":"Reprogramming Dormant Neurons to Backdoor AI Agents","summary":"Microsoft's Lazarus technique plants a trigger-activated backdoor in a model without retraining; a tool-using agent passes standard safety evals until the trigger appears.","source":"hackernews_ai","url":"https://www.microsoft.com/en-us/research/blog/lazare-veni-foras-reprogramming-dormant-neurons-to-backdoor-ai-agents/","published":"Wed, 11 Nov 2026 07:41:39 +0000"},{"title":"Phala Confidential AI Compromised","summary":"Phala's preliminary incident report: contained November 8 after a KMS root key rotation on November 6, with exploit details withheld until remediation is verified.","source":"hackernews_ai","url":"https://phala.com/posts/phala-november-preliminary-incident-report","published":"Wed, 11 Nov 2026 09:48:10 +0000"},{"title":"How do you limit an agent's kubectl when dev and prod share a cluster?","summary":"Walkthrough of scoping an agent's kubectl access by namespace when dev and prod share one EKS, GKE or AKS cluster.","source":"hackernews_ai","url":"https://skyportal.ai/blog/separate-kubernetes-environments-by-namespace-on-eks-gke-or-aks-with-skyportal/","published":"Wed, 11 Nov 2026 18:21:02 +0000"}]},{"name":"Business Context Becomes a Shared Layer for Agents","slug":"business-context-layer","summary":"Databricks made its agent-built ontology generally available and opened it to other vendors' agents, and LangChain credits the context around the model for its sales agent's output quality.","articles":[{"title":"Announcing GA of Genie Ontology","summary":"Genie Ontology, a business-context layer built by agents and curated by people for use across many agents, is generally available with more knowledge sources.","source":"databricks_blog","url":"https://www.databricks.com/blog/announcing-ga-genie-ontology","published":"Wed, 11 Nov 2026 15:00:00 GMT"},{"title":"Genie with Genie Ontology Delivers 1.6× the Accuracy with Less than Half the Tokens","summary":"On a Databricks and Turing benchmark of business questions in a live workspace, Genie passed 91% against 45% and 58% for two frontier agents, on under half the tokens. Vendor-run.","source":"databricks_blog","url":"https://www.databricks.com/blog/genie-genie-ontology-delivers-16-accuracy-less-half-tokens","published":"Wed, 11 Nov 2026 15:00:00 GMT"},{"title":"Bring your business context to ChatGPT, Claude, Microsoft Copilot Cowork and Grok Bot","summary":"Genie plugins expose the same ontology and trusted answers to ChatGPT, Claude, Microsoft Copilot Cowork and Grok Bot.","source":"databricks_blog","url":"https://www.databricks.com/blog/bring-your-business-context-chatgpt-claude-microsoft-copilot-cowork-and-grok-bot","published":"Wed, 11 Nov 2026 15:00:00 GMT"},{"title":"How our GTM Agent builds consistent, high-quality sales artifacts","summary":"LangChain's internal GTM agent produced 1,540 sales artifacts in 12 weeks; the post attributes consistency to the business context and structure built around the model.","source":"langchain_blog","url":"https://www.langchain.com/blog/gtm-agent-high-quality-sales-artifacts","published":"2026-11-11T00:16:00+00:00"}]},{"name":"Classification and Filtering Move Off the Frontier Model","slug":"cheap-decisions-filtering","summary":"Yes/no and routing decisions are getting their own cheaper primitives: a dedicated Google decision model, SQL functions in AlloyDB, and a pre-filter in front of LLM synthesis.","articles":[{"title":"Gemini Decisions API: Fast, calibrated multimodal decisions","summary":"New Gemini Decision 1 model scores up to 1,000 yes/no, choice and rubric questions in one pass over text, images, audio, video and PDFs, returning confidence scores.","source":"google_ai_blog","url":"https://blog.google/innovation-and-ai/technology/developers-tools/gemini-decisions-api/","published":"Wed, 11 Nov 2026 18:00:00 +0000"},{"title":"Cutting LLM Token Costs with Currents News API and TypeSafe Jev Pre-Filtering","summary":"Screening news articles with TypeSafe Jev at a 0.70 threshold before synthesis cut input tokens 16-18%; blind judges could not tell five of six outputs from unfiltered runs.","source":"hackernews_ai","url":"https://currentsapi.services/en/blog/cut-llm-token-costs-typesafe-jev-prefiltering","published":"Wed, 11 Nov 2026 08:17:35 +0000"},{"title":"Introducing new AI functions for AlloyDB: ai.classify and ai.extract","summary":"AlloyDB adds ai.classify and ai.extract, SQL functions that label and pull fields from unstructured text stored in the transactional database.","source":"google_cloud_blog","url":"https://cloud.google.com/blog/products/databases/ai-classify-and-ai-extract-functions-in-alloydb-ai/","published":"Wed, 11 Nov 2026 17:00:00 +0000"}]},{"name":"Inference Serving: Split Stages and Cheaper Hardware","slug":"inference-serving-hardware","summary":"vLLM separated multimodal encoding into its own scalable tier, while two local-inference projects target old GPUs and clustered Macs.","articles":[{"title":"Encoder Disaggregation in vLLM: Scaling Multimodal Serving with EPD","summary":"vLLM's Encoder/Prefill/Decode disaggregation runs each stage as an independently deployed instance, so multimodal encoding scales separately from prefill and decode.","source":"vllm_blog","url":"https://vllm.ai/blog/2026-11-11-encoder-disaggregation-epd","published":"Wed, 11 Nov 2026 00:00:00 GMT"},{"title":"Kindi: The fastest software inference engine for low-cost GPUs","summary":"Kindi 0.5.0 runs 2B to 33B models on older NVIDIA cards, Radeon integrated graphics and CPU, and reports faster generation than llama.cpp from 512 to 64K context.","source":"hackernews_ai","url":"https://amirhusain.com/software/kindi/","published":"Wed, 11 Nov 2026 18:18:33 +0000"},{"title":"Apple's Claris Testing 'Harbor' App for Local AI on Macs","summary":"Apple's Claris subsidiary is testing Harbor, which turns Apple silicon Macs into a private AI server and pools memory across Macs over Thunderbolt 5.","source":"hackernews_ai","url":"https://www.macrumors.com/2026/11/10/apple-claris-harbor-app/","published":"Wed, 11 Nov 2026 08:19:20 +0000"},{"title":"Anthropic's IPO roadshow video","summary":"Simon Willison pulls previously unreleased details from Anthropic's IPO roadshow video, including its section on approach to compute.","source":"simon_willison","url":"https://simonwillison.net/2026/Nov/11/anthropic-ipo-roadshow/","published":"2026-11-11T15:11:59+00:00"}]},{"name":"Coding Agents: Harnesses, Memory and Review Surfaces","slug":"coding-agent-harnesses","summary":"Alibaba open-sourced the agent core behind Qwen Code alongside a Qwen4-Max preview, and OpenAI showed voice steering and cloud handoff for Codex.","articles":[{"title":"Alibaba Folds Qoder's Harness Into Qwen Code 1.0 Preview and Open-Sources the Combined Agent Core","summary":"Alibaba merged Qoder's harness into Qwen Code 1.0 Preview and open-sourced the combined agent core.","source":"search_cn_open_weight_labs","publisher_name":"Pandaily","publisher_domain":"pandaily.com","url":"https://news.google.com/rss/articles/CBMikAFBVV95cUxQbk5oM3JOSDludmtlT1k0S2NjRGVoejB0dnowWmpwNXZITEVIM20ycnhVcFU5czVYNjBJZGJIZnMwTnNVS0dORnNNNjA5OWJoOU41dzgwRDkxMnNBM3F1dktZVndra3FETElQU1cwLTNmamhudFhCSnhHdUlXVmN3SndnUGVWdTZpR2llX2hvQVU?oc=5","published":"Wed, 11 Nov 2026 07:43:48 GMT"},{"title":"Alibaba's Qwen4-Max Preview Launches Abruptly, Targeting Complex Coding and Professional Software Operations","summary":"Alibaba released Qwen4-Max Preview without advance notice, aimed at complex coding and professional software operation.","source":"search_cn_open_weight_labs","publisher_name":"BigGo Finance","publisher_domain":"finance.biggo.com","url":"https://news.google.com/rss/articles/CBMidkFVX3lxTE9sR3YtS0VVdzJPT3lmOExUaFJsUmJEcVRzTWZva2h1cUg5NjJ5TGN4VzdMTHJuWlNteWI1Q3NmSzNKSnpHZjByTFNCYUZ1OUR3N2pSaUJXVmlnYlFBZ2FjSFlyZm1rNjl6SEl5ZTkzeTJnOEJPUHc?oc=5","published":"Wed, 11 Nov 2026 04:25:00 GMT"},{"title":"AI Engineer Code Summit: OpenAI on New Ways of Working With Codex","summary":"At AI Engineer Code Summit, OpenAI showed steering Codex by voice and handing work off to the cloud.","source":"latent_space","url":"https://latent.space/p/codex-work/","published":"Wed, 11 Nov 2026 04:49:48 GMT"},{"title":"Show HN: Anathem – local memory for coding agents, no LLM and no daemon","summary":"Single-binary local memory for coding agents: SQLite storage, hybrid BM25 plus static-embedding search and an MCP server, with no LLM or daemon.","source":"hackernews_ai","url":"https://gitlab.com/__alexander__/anathem","published":"Wed, 11 Nov 2026 18:10:46 +0000"},{"title":"GitHub affordances as human-agent conveyances","summary":"Argues GitHub issues and pull requests are becoming the default work-management surface between humans and agents: issues as task specs, PRs as review.","source":"hackernews_ai","url":"https://qmacro.org/blog/posts/2026/11/11/github-affordances-as-human-agent-conveyances/","published":"Wed, 11 Nov 2026 10:15:18 +0000"},{"title":"AI proved your code correct. What did it prove?","summary":"Explainer on agent-produced formal proofs: the check holds only relative to the specification and assumptions it was run against.","source":"hackernews_ai","url":"https://kellerai.io/resources/ai-proved-your-code-correct","published":"Wed, 11 Nov 2026 01:01:30 +0000"}]}],"video":{"youtube_id":"sNTLMOnmqtU","title":"LLM Digest Daily Explainer: Nov 11, 2026","duration_s":114.3}}