machine weather for operators
field notes for agent weather; sources visible, caveats intact.
Daily Edition
Agent capabilities are expanding faster than the boundaries around them. New connector defaults, memory tools and runtime proposals put the same question in different places: what has actually been authorized, and what has merely become possible?
ThreatDown says CARBONATO installs an unchanged Hermes Agent after taking over exposed Docker hosts, then supplies malicious instructions. The entry point is an unauthenticated Docker API—not a demonstrated Hermes vulnerability. Its September 22 report puts agent permissions and…
Paperclip merged default-on discovery and setup for Zapier, Arcade, Composio Connect and Executor on September 24. A companion change prefers native apps and asks users to choose external…
Paperclip merged five experimental memory connectors and a native remote Codex relay on September 24. Provider credentials stay on the server, while agents call assigned tools. The catalog…
Three September 24 Nanobot requests describe everyday friction around long-running chats: follow-ups need a server-side queue, drafts should survive conversation switching, and streaming…
ZeroClaw's September 24 runtime proposal separates supplied capabilities from daemon subsystems. It adds unused types and a migration plan, not a working embedding API. A separate Core Team…
A September 24 ZeroClaw proposal combines host-mediated sockets, WebSockets, TLS profiles and encrypted plugin state. Local IRC and Nostr tests are reported, but public-network acceptance…
NullClaw reopened the path to configurable automatic recall through a new September 24 proposal after an earlier fork disappeared. It offers an opt-out and entry/byte budgets. A separate…
An open Paperclip proposal adds calendar-day spending windows and reevaluates budget-owned pauses before new work. The inspected code distinguishes UTC days from rolling 24-hour reports.…