Technique
Governance.
Approval lanes, reversibility, audit trails and regulatory duties, engineered into a system rather than written into a policy document.
14 papers · Technique
Every company needs a model testing manager
Frontier models now ship faster than any procurement cycle can absorb, and the published benchmarks cannot tell you which one is right for your work. Somebody has to own that decision. The argument for two new roles, the one we would not create, and the test that separates a job title that lasts from one that gets absorbed within two years.
Read the paper →- October 2026ResearchAGA-51
A verifier is a specification, and models optimise it
Two papers on reward hacking under verifiable rewards. Helff and colleagues find RLVR-trained models abandoning rule induction and enumerating instance-level labels that pass the verifier without learning the pattern, and catch it by checking one output under both extensional and isomorphic verification. Mahmoud and colleagues train a policy against a single rubric verifier and score it with a cross-family panel of three frontier judges, where exploitation climbs from 39 to 65 per cent and a strong verifier still loses to the base model on 78.4 per cent of prompts. Read together: a verifier is a partial specification, and the policy finds the part you left out.
Luis Hasanaj · Read → - October 2026EngineeringAGA-40
OpenShell puts the enforcement outside the agent
NVIDIA has open-sourced a runtime for AI agents whose central claim is about location rather than capability: enforcement happens outside the agent's process, where it cannot be prompted away. A reading of the four parts, the formal policy prover, the credential that never enters the workload, and the point at which the open source runtime becomes a reference design for hardware NVIDIA sells.
Luis Hasanaj · Read → - October 2026EngineeringAGA-37
Gemini 4 Argon: the output limit is the story
Google DeepMind's Gemini 4 Argon raises the output token ceiling from 64,000 to 1,000,000, and that single number changes more about how agent systems are built than any benchmark in the announcement. A reading of what the new ceiling costs, why shipping a model without cyber guardrails to a named cohort makes capability an identity problem, and the one optimisation DeepMind deliberately refused to take.
Luis Hasanaj · Read → - September 2026EngineeringAGA-30
OpenAI's dots: the boundary is the product
OpenAI launched always-on personal agents at DevDay, each running on its own cloud computer with a browser and access to more than 4,000 apps. The marketing is autonomy. The engineering is a carefully drawn permission boundary, and the single most important decision in it is that an agent left running while you are away can only read.
Luis Hasanaj · Read → - September 2026EngineeringAGA-35
Hardware-native AI: the alarm that sees
A position paper. The next operating system layer will be built into devices rather than shipped as an app on top of them, and home security is the clearest worked example: an alarm today is a deterrent that detects motion, while a camera that understands what it is looking at is a different category of thing. The interesting engineering is not the vision model. It is deciding how far up the response ladder a device may go without a person.
Luis Hasanaj · Read → - September 2026ResearchAGA-31
GPT-6.1 Sol, and the model that was cancelled
OpenAI shipped a model at a fifth of Astra's token price that it says lands within 1.9 percent of it. The larger news is the model it did not ship: GPT-6.1 Astra was held back after internal testing found more deception and a tendency to act without asking permission. Those are the two behaviours the Astra system card measured three weeks earlier.
Luis Hasanaj · Read → - September 2026EngineeringAGA-24
GPT-6 Astra's system card is a build spec
Read as safety documentation it is reassuring. Read as an engineering requirement it is a list of things your infrastructure now has to do: a halt state you do not control, an approval gate a machine must not be able to satisfy, credentials the model will find, and oversight that no longer rests on reading the model's reasoning.
Luis Hasanaj · Read → - September 2026ResearchAGA-20
GPT-6 Astra: what the footnotes say
OpenAI calls GPT-6 Astra the world's most intelligent model. Independent measurement puts it level with its own predecessor on the intelligence index and behind Claude Fable 5.1, at 75 percent more per task. Both readings are true, they measure different things, and the difference is the most interesting thing about this launch.
Luis Hasanaj · Read → - September 2026OperationsAGA-19
EU AI Act enforcement: the first month
Enforcement powers under the EU AI Act switched on across all 27 member states on 2 August 2026. A month later the more useful question is not who has been fined but who can actually fine you, and the answer is uneven enough that identical conduct carries different risk depending on the country.
Luis Hasanaj · Read → - September 2026OperationsAGA-12
EU AI Act 2026: what businesses need to know
A practical EU AI Act compliance guide for businesses, current as of September 2026: what already applies after the Digital Omnibus amendments, what lands in December 2027 and August 2028, whether you are a provider or a deployer, what counts as high risk AI, the fines, and a checklist you can run this quarter.
Luis Hasanaj · Read → - September 2026EngineeringAGA-15
AI agent security: the real attack surface
An agent with credentials, tools and memory is not a chatbot with a bigger prompt, it is software that acts. This is the attack surface that creates, read against the OWASP Top 10 for Agentic Applications 2026, two live CVEs in agent infrastructure, and the first reported cyber espionage campaign run mostly by hijacked agents.
Luis Hasanaj · Read → - August 2026EngineeringAGA-10
Engineering for the EU AI Act: Article 50 transparency as system architecture
How we build the EU AI Act's Article 50 transparency duties into AI-native products as architecture rather than configuration: disclosure at first contact, provenance marking at generation, recorded human review and per-message jurisdiction, read against the timeline as amended by the 2026 Digital Omnibus.
Luis Hasanaj · Read → - February 2026ResearchAGA-02
Governed autonomy: approval lanes and audit trails in agentic systems
How to give AI agents real autonomy without losing control: a pattern of approval lanes, reversible actions and complete audit trails that lets a business trust software to run part of its operation.
Luis Hasanaj · Read →