A response to Katelyn Lesse's article on secure agents, and why outbound mediation is only useful when it enforces a broader authorization and information-flow model.

A response to Yoshua Bengio's post on agents lying, cheating, and coordinating: the failure is not that agents have human motives, but that we are giving proxy optimizers tools, time, and weak accountability.

A response to Eno Reyes' question about agent boundaries, and why I think the durable unit is the work container rather than the agent team.

What Amp's paved-road thesis and Truss Labs' prepared-work-item thesis reveal about Soul CLI, and why the next useful layer is a real case packet for agent work.