OpenCode says attackers reached stored provider keys, and Anthropic reports its own hiring shift
OpenCode says attackers got into its hosted Console and reached stored provider keys, which raises the question of who verifies an agent's work and who holds its credentials. Today also covers verification loops, agent authorization, Anthropic's report on its own workforce, and the pricing of AI infrastructure debt.
OpenCode breach coverage on Techmeme and the Reddit report of a drained key, with Nathan Lambert's objection to the "distillation" label
Sphinx, a Git hook that quizzes you on a diff before a push, plus the WorkOS talk on agent verification and Addy Osmani's one-line principle
A…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.