PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Crustacean Trilemma: Agency, Generality, Risk

blog.sentry.security | blog | #ai-security | #ai-agents | #governance | #risk | #alignment
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A security-lens reframing of the generality-agency-alignment trilemma: alignment matters mainly through the risk it creates, so balancing capability, autonomy, and control defines practical AI danger.
Published
Collected

Related coverage

blog · about.gitlab.com
New MCP tools help platform teams scale automation safely
GitLab 19.4 expands the GitLab MCP server tool set so agents can run pipelines, open merge requests, and triage vulnerabilities, while writes, merges, and deletes still wait for a human reviewer.
blog · blog.trailofbits.com
Your AI agent fixed the bug, but what else did it change?
We’re publishing patching-bugs and regression-hunt, two plugins that let engineers delegate patch development and regression checks to agents.
blog · xbow.com
How Attackers Are Using AI & What Defenders Must Do
Attackers are running AI driven attack chains from recon to exploitation in minutes. Here’s what actually changed, and why defenders need AI pentesting to keep pace.
blog · about.gitlab.com
What happens when vulnerabilities are discovered faster than you can fix them?
AI is changing how quickly vulnerabilities can be discovered and exploited. The next challenge is bringing that same speed to remediation and prevention
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · about.gitlab.com
Extend GitLab Duo Agent Platform into your business systems
Learn how to call a custom GitLab flow from Salesforce so every error arrives as a GitLab issue with root-cause analysis, ready to fix and deploy.
Back