AGENT SECURITY

OpenAI Dots turns ChatGPT into a long-running work agent. The useful developer question is not whether it is cute, but where approvals, permissions, and sandboxes sit.

Cloudflare AI Gateway now attaches a verified user identity to every request and learns a behavioral baseline per account, flagging 2x-p95 session spikes against an org-wide p99 ceiling. Here is how the anomaly math works and why per-account baselines beat global thresholds.

Microsoft Execution Containers (MXC) give your AI agents policy-driven sandboxing across Windows, Linux, and macOS. TypeScript SDK, JSON config, multiple isolation backends. Here is how to use it.