Tap a claim on the ring to put it at the centre.
← The binding constraint on agent work is machines, not models: a cloud…
17 connected korrents · 14 moments on record from 22 Mar 2025 to 3 Sept 2026.
Everything filed under Anthropic
Anthropic
Everything filed under prompt injection
prompt injection
Everything filed under self-sovereign AI
self-sovereign AI
Everything filed under coding agents
coding agents Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Read this korrent: The binding constraint on agent work is machines, not models: a cloud session is easy for web work and almost every tool fails the moment the job needs macOS. The binding constraint on agent work is machines, not models: a cloud session is easy for web work and almost every tool fails the moment the job needs macOS. Last stated 4 weeks ago
10 Aug 2026
PS
Peter Steinberger — holds since 2026-08-10 — tap for who they are
Same subject: A computer-using agent needs a machine of its own, or you will spend the day fighting it for the mouse cursor. — tap to centre the map on it A computer-using agent needs a machine of its own, or you will spend the day fighting it for the mouse cursor. Last stated 4 weeks ago
10 Aug 2026
PS
Peter Steinberger — holds since 2026-08-10 — tap for who they are
Same subject: Models are far more differentiated from one another than clouds are, so AI will not commoditise the way cloud did. — tap to centre the map on it Models are far more differentiated from one another than clouds are, so AI will not commoditise the way cloud did. Last stated 7 months ago
13 Feb 2026
DA
Dario Amodei — holds since 2026-02-13 — tap for who they are
Same subject: What limits you with coding agents is your own skill at stringing them together, not the capability of the models. — tap to centre the map on it What limits you with coding agents is your own skill at stringing them together, not the capability of the models. Last stated 6 months ago
20 Mar 2026
AK
Andrej Karpathy — holds since 2026-03-20 — tap for who they are
Same subject: AI agents and AI coding will run on servers and from the cloud first, not on your laptop. — tap to centre the map on it AI agents and AI coding will run on servers and from the cloud first, not on your laptop. Last stated 2 months ago
28 Jun 2026
PL
Pieter Levels — holds since 2026-06-28 — tap for who they are
Same subject: Clearing an agent's session is now often a disadvantage, because the accumulated context helps the model more than a clean start does. — tap to centre the map on it Clearing an agent's session is now often a disadvantage, because the accumulated context helps the model more than a clean start does. Last stated 4 weeks ago
10 Aug 2026
PS
Peter Steinberger — holds since 2026-08-10 — tap for who they are
Same subject: Do not run a personal agent on a cheap or local model: weak models are gullible and easy to prompt-inject. — tap to centre the map on it Do not run a personal agent on a cheap or local model: weak models are gullible and easy to prompt-inject. Last stated 7 months ago
12 Feb 2026
PS
Peter Steinberger — holds since 2026-02-12 — tap for who they are
Same subject: The code today’s models and agents write is very hard to follow: you get better performance without knowing why, and no way to fix it when it breaks. — tap to centre the map on it The code today’s models and agents write is very hard to follow: you get better performance without knowing why, and no way to fix it when it breaks. Last stated 2 months ago
19 Jul 2026
ES
Elizabeth Stone — holds since 2026-07-19 — tap for who they are
Same subject: AI coding works when a person owns the architecture and scopes the agent to small pieces of it, and fails when the whole thing is handed over. — tap to centre the map on it AI coding works when a person owns the architecture and scopes the agent to small pieces of it, and fails when the whole thing is handed over. Last stated 3 months ago
7 Jun 2026
TF
Tony Fadell — holds since 2026-06-07 — tap for who they are
Same subject: A benchmark that ranks Claude Code last while it stays first in use is measuring the wrong thing, and has been for a year. — tap to centre the map on it A benchmark that ranks Claude Code last while it stays first in use is measuring the wrong thing, and has been for a year. Last stated 5 days ago
3 Sept 2026
DR
Dax Raad — holds since 2026-09-03 — tap for who they are
Same subject: A language model asked to summarize its own system prompt risks that prompt's content biasing the summary it produces. — tap to centre the map on it A language model asked to summarize its own system prompt risks that prompt's content biasing the summary it produces. Last stated 6 days ago
2 Sept 2026
SW
Simon Willison — holds since 2026-09-02 — tap for who they are
Same subject: A trust that owns the mission protects a company better than founder control does, which is why Anthropic needs no dual-class shares. — tap to centre the map on it A trust that owns the mission protects a company better than founder control does, which is why Anthropic needs no dual-class shares. Last stated 4 months ago
10 May 2026
ER
Eric Ries — holds since 2026-05-10 — tap for who they are
Same subject: A rogue deployment that gets a foothold can hitch a ride on the intelligence explosion, recruiting each new model as it comes off the presses. — tap to centre the map on it A rogue deployment that gets a foothold can hitch a ride on the intelligence explosion, recruiting each new model as it comes off the presses. Last stated a week ago
1 Sept 2026
AC
Ajeya Cotra — holds since 2026-09-01 — tap for who they are
Same subject: A slightly more capable agent swarm has a very strong incentive to set up a wholly unmonitored rogue deployment of itself. — tap to centre the map on it A slightly more capable agent swarm has a very strong incentive to set up a wholly unmonitored rogue deployment of itself. Last stated a week ago
1 Sept 2026
AC
Ajeya Cotra — holds since 2026-09-01 — tap for who they are
Same subject: If frontier agents cannot yet establish a covert, persistent rogue deployment, they very likely will be able to within six months. — tap to centre the map on it If frontier agents cannot yet establish a covert, persistent rogue deployment, they very likely will be able to within six months. Last stated a week ago
1 Sept 2026
AC
Ajeya Cotra — holds since 2026-09-01 — tap for who they are
Same subject: Prompt injection can be caught by watching the neurons that fire when it happens, so a defence no longer depends on the model reporting the attack. — tap to centre the map on it Prompt injection can be caught by watching the neurons that fire when it happens, so a defence no longer depends on the model reporting the attack. Last stated a month ago
27 Jul 2026
BC
Boris Cherny — holds since 2026-07-27 — tap for who they are
Same subject: Prompt injection has no equivalent of parameterized queries: there is no reliable way to tell a language model which text is data and which is instructions. — tap to centre the map on it Prompt injection has no equivalent of parameterized queries: there is no reliable way to tell a language model which text is data and which is instructions. Last stated 6 months ago
19 Mar 2026
SW
Simon Willison — holds since 2026-03-19 — tap for who they are
Same subject: Prompt injection is an extremely hard attack to defend against, and hardly anyone integrating AI is talking about it. — tap to centre the map on it Prompt injection is an extremely hard attack to defend against, and hardly anyone integrating AI is talking about it. Last stated a year ago
22 Mar 2025
TH
ThePrimeagen — holds since 2025-03-22 — tap for who they are
At the centre
The binding constraint on agent work is machines, not models: a cloud session is easy for web work and almost every tool fails the moment the job needs macOS.
Holds Read this korrent →
A computer-using agent needs a machine of its own, or you will spend the day fighting it for the mouse cursor.
Holds
Models are far more differentiated from one another than clouds are, so AI will not commoditise the way cloud did.
Holds DA Dario Amodei
What limits you with coding agents is your own skill at stringing them together, not the capability of the models.
Holds
AI agents and AI coding will run on servers and from the cloud first, not on your laptop.
Holds
Clearing an agent's session is now often a disadvantage, because the accumulated context helps the model more than a clean start does.
Holds
Do not run a personal agent on a cheap or local model: weak models are gullible and easy to prompt-inject.
Holds
The code today’s models and agents write is very hard to follow: you get better performance without knowing why, and no way to fix it when it breaks.
Holds ES Elizabeth Stone
AI coding works when a person owns the architecture and scopes the agent to small pieces of it, and fails when the whole thing is handed over.
Holds TF Tony Fadell
A benchmark that ranks Claude Code last while it stays first in use is measuring the wrong thing, and has been for a year.
Holds
A language model asked to summarize its own system prompt risks that prompt's content biasing the summary it produces.
Holds
A trust that owns the mission protects a company better than founder control does, which is why Anthropic needs no dual-class shares.
Holds ER Eric Ries
A rogue deployment that gets a foothold can hitch a ride on the intelligence explosion, recruiting each new model as it comes off the presses.
Holds AC Ajeya Cotra
A slightly more capable agent swarm has a very strong incentive to set up a wholly unmonitored rogue deployment of itself.
Holds AC Ajeya Cotra
If frontier agents cannot yet establish a covert, persistent rogue deployment, they very likely will be able to within six months.
Holds AC Ajeya Cotra
Prompt injection can be caught by watching the neurons that fire when it happens, so a defence no longer depends on the model reporting the attack.
Holds
Prompt injection has no equivalent of parameterized queries: there is no reliable way to tell a language model which text is data and which is instructions.
Holds
Prompt injection is an extremely hard attack to defend against, and hardly anyone integrating AI is talking about it.
Holds TH ThePrimeagen