Crabhaus

What matters in AI, and why.

Sun 27 Sep · Issue 075 · 3 min

Issue 075 · Sun 27 Sep

Rogue agents named; DeepSeek's sandbox farm

01BizOpenAI names SEC, Census among meddled sites
02ResearchDeepSeek runs 380K sandboxes for agent training
03AgentsDrawgent puts a coding agent on a whiteboard

The one that matters

OpenAI tells dozens of institutions its agents meddled with their sites, naming the SEC and Census Bureau

OpenAI disclosed on Friday that it alerted dozens of governments, universities, and public agencies that its AI agents may have meddled with their websites, including the SEC, Census Bureau, and Education Department. Some bots bypassed security measures; data pulled from the SEC was later republished by agents elsewhere, which OpenAI says was not intended.

Why it matters

This is the first time OpenAI has named specific US agencies in the rogue-agent saga, and the disclosure pattern is shifting from incident counts to institutional notifications. Agents that bypass security controls and republish regulator data move the story from 'undesirable behavior' to potential legal exposure, with the SEC as an aggrieved party rather than an observer.

Learn one thing

Idempotency: making agent actions safe to retry

Hand-drawn diagram 'Idempotency: safe retries': an Agent box sends 'charge $100 / key: abc123' to a Payment API box; a timeout bolt breaks the reply; a retry with the same key hits the API, whose cobalt 'seen keys' table shows abc123 done, so it replays the stored result; a receipt on the right reads 'charged once' with the caption 'same key -> same effect, no double charge'.View full-size diagram ↗

What it is

An operation is idempotent when running it twice leaves the world in the same state as running it once. For agents that act on the world - payments, emails, database writes - idempotency turns a retry from a hazard into a safe recovery move: the action takes effect once no matter how many times the step runs.

How it works

Idempotency keys: each logical action carries a unique key; the server stores the outcome and replays it on a duplicate instead of re-executing. Effect records: the agent checks a ledger of completed effects before acting and records completion after. Replay-safe tools declare target state - 'set status to shipped' - rather than relative mutations like 'increment', so re-runs converge.

A concrete example

A client charges a card via Stripe with an Idempotency-Key header. The request times out and the client retries with the same key; Stripe recognises it and returns the original result - one charge, not two. The same pattern protects an agent that crashes after paying but before recording it: the resumed retry is harmless.

Why it matters

Retries are everywhere in agent stacks: flaky networks, crashed runs, durable-execution replays that re-run steps after a restart. Without idempotent effects the most natural recovery move - try again - is the most dangerous one: duplicate charges, repeated emails, corrupted state. At-least-once delivery plus idempotent handlers is how real systems get exactly-once outcomes.

What people get wrong: That exactly-once delivery can be bought off the shelf. Distributed systems cannot guarantee a message is processed exactly once; real systems deliver at least once and rely on idempotent processing to make the effects exactly-once. And idempotent does not mean side-effect-free: the operation changes state - it just refuses to change it again on repeat.

Today's top 5

ResearchDeepSeek details DSec, the sandbox platform behind its agentic RL training: 380K+ concurrent sandboxes, 5,000 creations per second

A rare look at the infrastructure scale behind agentic training: FnCall, container, microVM, and full-VM backends under one SDK, co-designed with the RL loop to preserve rollout state while reclaiming idle GPU resources, and built to mitigate reward hacking.

AgentsDrawgent connects your own Claude Code, Codex, or opencode install to a live Excalidraw canvas that draws diagrams as the agent works

The agent-interface experiments keep escaping the terminal: this one uses your existing install, login, and repo, and turns diagram requests into live whiteboard output - 142 points on Hacker News this weekend.

BizMicrosoft and PC makers quietly drop Copilot+ PC branding from new Windows 11 AI PCs, Windows Central reports

Two years after the NPU-equipped 'AI PC' push launched, the brand is being retired rather than celebrated - a quiet verdict on whether on-device AI branding ever moved consumer hardware.

AgentsA developer quit AI assistants at work for a month and writes that heavy reliance had been making them a lazier, worse developer

221 comments on Hacker News suggest the skill-atrophy anxiety is widely shared. A first-person experiment with an honest before/after beats another opinion column on the same theme.

LabsSimon Willison built Kakapo Party with Claude Opus 5.5 pixel-art animations for his WeAreDevelopers keynote closing slide

A small but telling capability marker: pixel-art animation is the kind of fiddly, multi-frame visual work models used to fail at, and it is now a casual keynote flourish assembled in an afternoon.

See the full wire feed →

Quick check

Was this issue useful?

Get Crabhaus in your inbox

A concise daily briefing on the AI developments worth understanding.