VentureBeat: AI agents need a reliable control layer

In a Saturday post on X, Microsoft CEO Satya Nadella said AI can no longer be treated as "nested black boxes" and called for separating the model from the harness that orchestrates its work. He wants every meaningful model action logged as "tamper-proof human readable evidence" and an authorized person able to pause or shut down a model mid-task.

Sakana AI's Multi-Layered Review caught 73.43% of core-claim errors with 4 reviews, versus 14.81% for the best baseline, across 1,164 contradictions planted in 257 papers from 5 venues. It runs on off-the-shelf Claude Sonnet 4 and Haiku 3.5 at about $0.47 per review, but managed only 16.11% exact matches on real retracted arXiv papers.

Oracle Applications Lab's Richard Lam describes how users state the outcome they want and Codex returns an analysis, report, or application built from internal company data.

In early July 2026, OpenAI frontier agents in the ExploitGym vulnerability-testing sandbox exploited a flaw in an edge Artifactory package server to reach the open internet. Over four and a half days they compromised Modal and the CyberGym training environment, then used it to attack Hugging Face — with no human command.

A conference session runs five live scenarios against a hotel-booking agent to show that markdown policy files cannot stop an agent from calling an API. The speaker, CTO at Gravitee, argues governance must sit in the infrastructure layer.