Anthropic measured a multi-agent coordination failure, while four open-source projects put controls at the sandbox, the tool call, the MCP config and the prompt.
In four simulated environments with models from Anthropic, OpenAI and Alibaba, group outcomes were worse when each user delegated to their own agent than when one agent served everyone.
A zero-trust sandbox runtime that claims 10x the density of standard containers, resume in under 500ms and more than 500 activations per second, with isolated compute, identity, networking and storage per agent.
Checks every agent tool call against plain-English rules before it runs, and screens each tool result for prompt injection before the agent reads it.
hackernews_ai
Inventories an organization's agents and MCP servers, works out what each can read, write, execute and send, and tests that access against 12 controls mapped to NIST 800-53 and SOC 2.
swapback is a fail-closed local proxy that swaps names, emails, phone numbers and keys for placeholders before a prompt leaves the machine, then restores them in replies, streams and tool calls.