Play the News · Drop #067 · Morning

Ship It or Block It

How it works: 6 cards, about 2 minutes, from this Drop's news. Your streak lives only on this device. It's not legal advice.

Card 1 of 6Agents
Your workplace agent drafted a brief for two colleagues you named, but a note it read says to also send it to a 2,000-person sales list. Let it auto-send to everyone?
You're the one who signs off. What's the call?
Show the answer
Answer: Needs a human.
Human review of wider sends
AWS says Smart Approvals in Amazon Quick is designed to return a send that widens the audience beyond the user's request, and an approval for the original recipients cannot be reused. A person should decide.
From the Drop: Amazon Quick's Smart Approvals lets a model approve routine agent actions by default
AWS Machine Learning Blog · Nov 4
Card 2 of 6Business
Your team plans to keep its only copy of agent workspaces in Conductor's cloud service through December.
You're the one who signs off. What's the call?
Show the answer
Answer: Block it.
Data retention
TechCrunch reports Conductor's cloud service shuts down on Nov 20, after which user cloud data will be deleted. Export the work first.
From the Drop: Meta buys parallel coding-agent startup Conductor; its cloud service shuts Nov 20
TechCrunch · Nov 4
Card 3 of 6Security
A CI runner that builds production images still uses a Docker Buildx version older than 0.37.2. Leave it unpatched for now?
You're the one who signs off. What's the call?
Show the answer
Answer: Block it.
Patch build tools
Canada's Cyber Centre lists Docker Buildx before 0.37.2 as affected and urges admins to update. Patch the runner before it builds again.
From the Drop: Canada's Cyber Centre flags flaws in Docker Desktop, Buildx and GitHub Enterprise Server
Canadian Centre for Cyber Security · Nov 4 Canadian Centre for Cyber Security · Nov 4
Card 4 of 6Agents
An ops agent gets read-only Kubernetes credentials to investigate failed GPU jobs, and only recommends fixes for engineers to review.
You're the one who signs off. What's the call?
Show the answer
Answer: Ship it.
Least privilege
NVIDIA says read-only investigation built trust with its SREs, and its agent inspects clusters with read-only credentials while engineers see the evidence before acting.
From the Drop: NVIDIA runs agent teams on its own GPU clusters, starting read-only
NVIDIA Developer Blog · Nov 4
Card 5 of 6Agents
A helpdesk agent finds why a customer's add-on purchase keeps failing and wants to reset services on the live account without staff confirming.
You're the one who signs off. What's the call?
Show the answer
Answer: Needs a human.
Human sign-off on account changes
In U Mobile's setup, per AWS, the agent assembles a remediation plan and a support agent confirms it before anything changes on a live subscriber account.
From the Drop: U Mobile says its helpdesk agents cut trouble tickets by up to 84.5% in key categories
AWS Machine Learning Blog · Nov 4
Card 6 of 6Agents
Your coding agent built a full web app over many feature requests and passes nearly every test plan. Release it to customers without an end-to-end check?
You're the one who signs off. What's the call?
Show the answer
Answer: Needs a human.
Verify the finished product
A Replit preprint found the strongest models pass up to 98% of test plans yet fully deliver a working product in at most 65% of builds. Someone should check the whole app.
From the Drop: Replit preprint: top models fully deliver a working product in at most 65% of builds
arXiv · Nov 5

Games are written by AI from this Drop's sourced items. Scenarios are illustrative.