#Agent

United Airlines bans AI agents from booking flights on behalf of travelers

United Airlines said it is banning third-party personal AI agents from making flight reservations on behalf of travelers, citing security risks from sharing account credentials and the possibility that such actions could violate federal rules, including requirements that travelers verify in person that their luggage contains no banned substances. The carrier said it is restricting access directly within its digital platforms and indirectly via travel agencies and aggregators, and is updating its booking and ticketing policies to reflect the new rule. Analyst Henry Harteveldt said United wants to retain control over the booking process and avoid the expense of a surge in AI bot flight searches, while noting fares will remain bookable through aggregators such as Kayak, Hopper and Google Flights.

How DXC Technology built a multi-model AI substrate on Amazon Bedrock

DXC Technology built DXC OASIS, a harness for mission-critical IT operations, on a governed multi-model substrate in Amazon Bedrock that provides access to Anthropic Claude, Amazon Nova, Meta Llama, and open-weight models through one managed interface, with Bedrock Guardrails, AWS PrivateLink, and serverless scaling as system-level controls. DXC separates the substrate from its own orchestration, governance, and assurance layer, and reports that since general availability in March 2026, DXC OASIS has reduced resolution time by 95% on average across 56 measured use cases. The post describes the architecture, model routing, and authority tiers, and states that DXC is evaluating Amazon Bedrock AgentCore alongside its current orchestration layer.

Automating AWS Agent Registry updates with push-based architecture

This post describes an event-driven pipeline using AWS CloudTrail, Amazon EventBridge, and AWS Lambda that detects Amazon Bedrock AgentCore UpdateAgentRuntime events and syncs MCP server tool schemas into AWS Agent Registry records, supporting both single- and multi-account setups. The Lambda extracts the runtime ARN, obtains an OAuth bearer token via AgentCore Identity, calls the MCP server's initialize and tools/list methods, then updates the matching APPROVED registry record only when normalized tool definitions differ. Updated records revert to Draft status and require curator approval before becoming discoverable, and the post notes limitations such as no automatic registration of new servers and no retry on cold starts.

Show HN: A free CRM with AI tools for independent insurance agencies

HarborIQ offers a free CRM for independent insurance agencies covering clients, pipeline, renewals and follow-ups, designed to sit alongside an existing AMS, with CSV imports from systems such as Epic, EZLynx, HawkSoft, NowCerts and AMS360. Its paid Intelligence tier is $49 a month for the whole agency and answers carrier questions from the agency's own carrier guides, citing the source page, with 300 shared checks a month. The free CRM requires no card and has no per-seat fee.

I built an AI agent and the cloud it runs on. Alone

Ruslan Ianberdin, founder of Playcode, describes building an agent-first platform with its own cloud infrastructure—a custom AI harness and gateway, a transactional file system, Rust-written proxy, DNS and static hosting, persistent machines, email, VPC, mobile apps and real-time multiplayer—largely solo over several years. He says it launched on May 24, 2026, and that a single operation on the backend is exposed to the UI, agent, CLI, user API and MCP at once. He also recounts his career history and argues the interface of the future is an AI worker that completes tasks end to end.

AI as a Lifestyle Choice

Graham Dumpleton, creator of mod_wsgi, describes using AI coding tools during his sabbatical to build Muru, a new Python web application hosting system, working seven days a week because he finds the process engaging and fun. He explains that AI removes the typing he finds a chore while leaving him the ideas and judgment, compares incremental improvement to the Japanese craft of making a dorodango, and credits the Claude for Open Source Program with freeing him from cost worries. He invites readers to review Muru's documentation and submit ideas via the GitHub discussions ideas section about what they would want in a Python hosting system.

An open specification for agentic AI security evaluation and testing, from Cisco

Cisco's Advanced Security Initiatives Group released Foundry, an organization-neutral specification distilling its internal agentic security evaluation design into eight core agent roles, five extension roles, a finding lifecycle, coordination and governance requirements, and roughly 130 functional requirements with rationale. The repository contains no code by design: it is written to be run through a spec-driven workflow such as spec-kit, where organization-specific decisions marked [NEEDS CLARIFICATION] are resolved against your own infrastructure. It also describes a detection-to-prevention loop in which rule gaps found by exploratory agents become CodeGuard rules that feed back into the corpus and into LLM coding assistants.

Some retailers try blocking agentic AI shoppers

Meta, OpenAI and other AI companies are rolling out agentic shoppers that can shop online on a consumer's behalf. The Verge features writer Mia Sato discussed with Marketplace the tension between these AI tools and retailers, and the successes and pitfalls of current AI agents in online shopping.

The Wish Economy: Inside Starlight, the Bitcoin-Native AI App Store

Starlight (starlight-ai.freemyip.com) is described as a decentralized AI app store where "wishes" are posted as steganographically sealed images whose hashes serve as contract IDs, AI agents claim tasks via the MCP protocol, and payouts settle through PSBTs with OP_RETURN commitments to Bitcoin blocks. The article details the wish-to-work-order pipeline, a private embedded IPFS mesh for artifact replication, and a browser-based "Starlight Shell" desktop that renders wish images as app icons and sandboxed apps. It also audits two live contracts, concluding that confirmation proves artifact binding, authorized payment, commitment integrity and burial, but not quality, humanity or originality.

Accelerating generative AI delivery with reusable assets

AWS's Generative AI Innovation Center, now part of AWS Frontier AI Engineering & Services, offers a catalog of 23 production-ready open source reusable assets such as RAG pipelines, document processors, and agent scaffolding. The post cites DoorDash and Lyft using the Contact Center GenAI Agent and Ricoh using the GenAI Intelligent Document Processing accelerator, reporting results including a 50x increase in testing capacity and a 7-fold throughput increase. It also walks through deploying the Contact Center GenAI Agent and lists the full asset catalog on GitHub and AWS Labs.

Zumungo AI Driven Home Automation

Zumungo is a free, locally hosted home automation platform that runs on hardware you already own, such as a Raspberry Pi or desktop PC, and supports over 50,000 devices from more than 3,800 brands. It is built around an AI assistant that can answer questions, control devices by voice or screen, and design events and panels, using either an online service (Google Gemini, Anthropic Claude or OpenAI) billed directly by that provider, or a fully local AI on a computer with an NVIDIA graphics card with 16 GB of memory or more. Setup is point-and-click: draw rooms, discover and drag devices into place, then control the home by talking to it.

United Airlines Restricts Access for Third-Party AI Agents

United Airlines announced restrictions on access for third-party AI agents, according to a newsroom announcement on its website. The announcement was shared on Hacker News, where it received 1 point and no comments.

Access models for security and safety work that mainstream AI often refuses

Abliteration offers an OpenAI-compatible API (base_url https://api.abliteration.ai/v1) for accessing models for security and safety work that mainstream AI often refuses, letting users keep their OpenAI or Anthropic client by changing the endpoint, API key, and model. It also describes a Policy Gateway that refuses requests outside organization-defined rules before they reach the model, and a Training Data service that turns a brief into labeled examples, preference pairs, and evaluation sets. The page states that prompts and outputs aren't stored by default or used to train models.

Google Deepmind's AlphaProof Code verified Signal's cryptographic core in four weeks instead of years

Google DeepMind unveiled AlphaProof Code, an AI system that mathematically proves software meets its security specifications, and demonstrated it on Signal's encryption protocol, completing in four weeks work that typically takes years. After experts defined formal security requirements, AI agents built on Gemini Carbon wrote over six million lines in the Lean proof language, flagging roughly one percent of the codebase for human review, and two deliberately planted bugs were caught immediately. Signal CTO Ehren Kret says the approach strengthens trust in data privacy as AI threats grow, and DeepMind plans to extend the method to power grids and medical devices through systems like CodeMender.

Featured coverage of this story: 《Introducing AlphaProof Code: a breakthrough in verifying complex software at depth》

Prompt Injection, Esq.: pwning AI agent guardrails with lawyerspeak

A staff member at an AI agent security company bypassed the read-only guardrail on a ChatGPT workspace agent connected to a Notion hiring tracker by posting an image of a fake law-firm letter granting edit permission, which the agent adopted as new instructions. The agent then asked clarifying questions per the fake letter's rules, and only failed to add a new entry because the Notion connection lacked a create tool, though it did have update access. The author argues permissions live in the attached tool list rather than the prompt, and recommends scoping tokens or requiring human approval for writes.

US vs. China, last 20 days of VC: the US bets on AI agents, China bets on robots

A blog post on Just Raised compares US and Chinese venture capital activity over the last 20 days, framing the US as betting on AI agents and China as betting on robots. The item was submitted to Hacker News with 1 point and no comments.

Gemini Decisions API: Fast, calibrated multimodal decisions

Google introduced the Gemini Decisions API, powered by the new Gemini Decision 1 model (gemini-decision-1) and available through the Gemini API in Google AI Studio, for closed-set decisions such as tool selection, policy checks, model routing, and context grading. It accepts one multimodal input (text, images, audio, video, PDFs up to 256K tokens) with up to 1,000 yes/no, multiple-choice, and rubric-scoring questions, scoring options in a single forward pass with confidence scores at 150-250 ms end-to-end latency and $0.10 per 1M input tokens with zero output tokens billed. Google reports that Gemini Decision 1 leads across agent routing, reasoning, ranking, and multimodal benchmarks with the lowest calibration error, and is nearly 5x cheaper than Gemini 3.5 Flash-Lite with the Interactions API across the shared benchmark suite.

Show HN: Griyd – Multiplayer AI

Griyd is a multiplayer AI tool where teams plan together, write code with their own agents, and ship production-ready features, with a shared board showing who is connected and what each agent is building. It works with your own agents (Claude Code or Codex), your Git hosting, and your workflow, with CI continuing on GitHub or GitLab. Pricing is $15 per developer per month, self-hosting is $500 per year, members without agents are free, and there is a 14-day free trial with no credit card required.

United Airlines Is Banning AI Bots from Booking Flights

A Wall Street Journal article reports that United Airlines is banning AI bots from booking flights. The item links to the WSJ article and to a Hacker News discussion thread with 3 points and 2 comments.

Show HN: AI Spar – Let Claude, GPT, and Gemini Debate a Question

A Show HN submission introduces AI Spar, a web app at aispar.app that lets Claude, GPT, and Gemini debate a question. The submission links to the app and to its Hacker News discussion thread.

Talos 0.20 – A self-hosted AI agent with a permission kernel

Talos is an open-source, self-hosted AI agent for terminal and Telegram on macOS and Linux (including Raspberry Pi) that uses Ollama, the Claude Code CLI, or a configured API provider, and only executes tools after a deterministic permission kernel rules on each action, with authority bound to exact arguments as a single-use 30-second token. The 0.20.3 stable release adds native Telegram command blocks for known diagnostic arguments and separate measured result states, while retaining the frozen operator contract, permissions and dependency locks. The project states its limits plainly: shell execution requires bubblewrap or sandbox-exec and refuses to run unprotected otherwise, and it is not a multi-tenant security boundary.

Big Walk used AI to fix a bug. Now the indie gaming world is having a reckoning.

House House disclosed that LLMs were used sparingly, for well under 0.1% of Big Walk's code, to help fix a difficult Unity engine bug, after 19 members of the 50-plus-member Independent Games Festival jury signed a statement declining to vote for any game using generative AI in any capacity. House House said it did not disclose the use for the Steam release because Valve does not request disclosure of code or chatbot usage, and said the disclosure is not an endorsement of AI tools. The game's Steam page has since received over 400 negative reviews, while some IGF judges and observers argued minimal AI use should be distinguished from heavier reliance on AI.

I found an API key leak in MLflow, and why your AI agent may have one too

The author reports that MLflow's CrewAI autologging (mlflow.crewai.autolog()) recorded LLM provider API keys in agent traces, affecting MLflow 2.19.0 through 3.16.x; the issue is tracked as CVE-2026-116691 and fixed in MLflow 3.17.0 (PR #25845). The advisory recommends upgrading to mlflow>=3.17.0, rotating any LLM provider keys held by CrewAI LLM objects while autologging was enabled, and deleting or redacting affected traces in the tracking backend and any OTLP destinations, with mlflow.crewai.autolog(disable=True) as a workaround. The author also describes Weir, an open-source Apache-2.0 tool that plants fake keys and checks an agent's telemetry and outbound requests for leaks.

Introducing Mastra Forward

Mastra Forward is an annual service providing a named forward-deployed Mastra engineer who works in your codebase alongside your team, backed by Mastra core engineering. It includes Mastra Factory installed in your repo to run a swarm of agents, an Enterprise license on hosted, self-hosted, or BYOC deployment, a Trace Intelligence pool with evals run as a service, and a quarterly architecture review. Mastra says it costs less than one senior AI hire and is invoiced quarterly or prepaid at a discount.

Intelligent Delivery: Making Every Unit of Compute Serve Better Ads

Meta describes Intelligent Delivery, an ML-driven system that allocates compute across its ads serving stack toward a system-wide optimum, contributing roughly 10% incremental ranking performance on top of model and system advancements from 2017 through the first half of 2026. It combines a shared Resource Core Model (6B sparse and 20M dense parameters) that predicts each request's outcome, compute consumption, and latency impact, with a hierarchy of allocation engines spanning region, hardware SKU, and host-level decisions. Agentic AI now helps propose and test optimizations, contributing to about 20% of Intelligent Delivery optimizations in the first half of 2026 and about 80% of engineering effort on the most automated mechanism, with engineers approving every change.

Show HN: An audit for AI agents headed into air-gapped networks

agent-blast-radius is an Agent Skill that reads an AI agent's codebase and reports two things: its boundary (whether anything needs or reaches the outside world, such as hosted model APIs, telemetry, start-time package or model fetches, SaaS connectors and hard-coded hosts) and its blast radius (what the agent can do inside an enclave if steered by a poisoned document, an insider or a compromised host). It writes a BLAST_RADIUS.md report with file:line evidence, matched failure patterns, OWASP agentic (ASI) ids and the smallest fix per path, backed by a deterministic, read-only, offline Python scanner that never runs the target code or prints secret values. It installs as a Claude Code plugin (2.1.275+) or manually into any Agent Skills host, and is static-only, so network policy, IAM policies, token scopes and runtime MCP tools go under "Unverifiable statically."

Accelerating product development with AI-driven lifecycle management (AI-PDLC) in AWS Quick

This AWS blog post describes AI-PDLC, a framework of six AWS Quick agents (an Orchestrator plus Discovery, Prioritize, Working Backwards, Spec Generator, and Designer) that guide product teams through the Discover, Decide, Design, and Prototype phases, with human approval required at every gate. The agents pull context from enterprise connectors such as Slack, Jira, Salesforce, SharePoint, ServiceNow, and Outlook, store artifacts in shared Quick Spaces, and produce a prototype_spec.md that can be handed to coding agents like Kiro or Claude Code via the Agent Client Protocol (ACP). The post includes step-by-step setup instructions, Deep Discovery and Fast Track pacing modes, and three scenarios: new product development, feature additions, and bug fixes.

RefTrail – Zero-trust verification and clean-room specs for AI agents

RefTrail is a method and toolset that makes a coding agent's completion report checkable: each requirement gets a source and measurable acceptance criterion, the criteria are frozen with a SHA-256 digest before product code is written, and a coverage catalog records status, evidence and the limits of that evidence. Its tools require Node.js 22.16 or newer and no further packages, and a worked example rebuild of GNU uniq reports 100% functional coverage with 1/1 mandatory checks passed, with recorded output comparisons matching GNU uniq byte for byte (16 of 16 under Linux with version 9.4 for revision 1; for revision 2, 16 of 16 under Windows with version 8.32 and 16 of 16 under Linux with version 9.4). The project states that it organizes what you are allowed to observe rather than analyzing products, that the digest proves criteria did not change but not that they preceded the code, and that its legal notes are general information, not legal advice.

Show HN: Connect Claude Code to 10.6M Earnings Call Embeddings with FN2 AI

A Show HN post demonstrates using the FN2 skill to run a semantic search over 10,602,684 embedded passages from 142,758 earnings calls, answering a question about NVDA management commentary on Blackwell supply with quoted and cited results. The example shows a run completing in 35s using Qwen3-Embedding-8B (4096d), then scheduling a recurring pre-market NVDA brief with email delivery that resolves "before market open" against the exchange calendar. The post also shows an `agents` listing of existing scheduled agents, including one with 53 runs and two possible duplicates.

A2UI 1.0: Build delightful, fast, reliable, agentic experiences

Google released A2UI 1.0, the first stable version of its open protocol for generative UI, which lets AI agents respond with interactive screens that each app renders with its own native components. Version 1.0 adds bidirectional function calls, accessibility support and extensions, plus open-source renderers for React, Angular, Lit, Flutter, SwiftUI and Jetpack Compose (currently v0.9.1) and agent SDKs for Python, TypeScript and Dart. Atlassian, Alation, Bloomberg and ByteDance are already building with it, and the web and Flutter renderers work inside MCP Apps such as Claude and Gemini.

Agent Loop is here: Better voice agents, every call

Vapi has launched Agent Loop in early access, a self-improving harness on top of its voice agent platform that builds an agent from a plain prompt, scores every call against a business goal, clusters misses into issues, drafts and tests fixes, then ships them as experiments on a slice of live traffic with automatic rollback. It relies on primitives including Simulations and Traffic Splitting (available in the dashboard now) and Goals, Call Health and Experiments (coming soon), with human approval required before any change ships. GA is planned for early next year, and Vapi is taking waitlist signups ahead of VapiCon on November 11.

ElevenLabs and NVIDIA expand collaboration to bring voice agents to enterprises and governments globally

ElevenLabs and NVIDIA are expanding their partnership across models, infrastructure and sovereign deployments, with NVIDIA Nemotron 3.5 Super VL now available in ElevenAgents and ElevenLabs adding 15MW of NVIDIA Blackwell Ultra and Vera Rubin compute. ElevenLabs models and NVIDIA infrastructure power a sovereign voice agent for Poland's national e-Health appointment system, and the companies are exploring on-device voice AI for robotics and physical AI.

Building the interaction layer for AI: Everything announced at ElevenLabs Summit NYC

At its New York Summit, ElevenLabs announced new models, agents, and deployment options, including plans to fine-tune open-source language models and ElevenLabs voice models for businesses, a previewed Interaction Engine that manages turn-taking and selects LLMs per task, and ElevenAgents upgrades such as Memory and Routines. It also introduced ElevenAI, an app for enterprise teams that takes meeting notes and action items using Scribe v3, launched the ElevenLabs Partner Program and Marketplace, and announced an expanded NVIDIA partnership.

How enterprise clients are putting ElevenLabs AI to work

ElevenLabs says enterprises now account for more than 55% of its revenue, with employees at nearly 70% of Fortune 500 companies using its platform, which supports languages spoken natively by 5.5 billion people and 16,000 voices. The company detailed enterprise uses including Yahoo adding real-time voice to its Scout answer tool via ElevenAgents, Westgate Resorts deploying a voice agent named "Sarah" trained on 8,000 support transcripts, and KPN launching Mobiel AI for Dutch small businesses after fine-tuning raised identity-verification accuracy from roughly 50% to 90%. Other customers cited include Doppel for vishing simulations, Pocket for transcription, and Twilio integrating ElevenLabs voices into Conversation Relay.

McKinsey and ElevenLabs collaborate to take natural AI conversations to enterprise scale

McKinsey and ElevenLabs announced an alliance combining McKinsey's industry and enterprise transformation expertise, underpinned by QuantumBlack's AI engineering, with ElevenLabs' conversational AI technology and ElevenAgents platform to help organizations prove value through initial use cases before scaling across the enterprise. Each deployment pairs multilingual conversational technology with agent design, systems integration and operating-model changes, and the companies cite KPN, the Dutch telecom company, as an early example using AI-powered solutions for customer interactions from order enquiries to technical appointment management. The alliance aims to extend beyond telecommunications to service-intensive industries such as insurance, supporting claims intake, policy servicing and everyday customer questions.

ElevenLabs expands partner program to help enterprises adopt AI agents faster

ElevenLabs launched an expanded Partner Program with enhanced commercial incentives, new certifications, joint go-to-market opportunities, and dedicated technical support, citing over 550 active partners in 44 countries and $52 million in partner-sourced and partner-influenced revenue this year. The program aims to help partners earn $3 in services revenue for every $1 ElevenLabs generates, and includes a new certified partner directory plus forward-deployed engineers who work alongside partners on complex implementations.

Introducing the ElevenLabs Marketplace for enterprise-ready AI applications

ElevenLabs launched the ElevenLabs Marketplace, a curated collection of industry-specific AI and voice applications built on ElevenLabs by partners including Salesforce, IBM, NiCE, Twilio and Zendesk, spanning financial services, insurance, healthcare, telecommunications, retail and government. Enterprises can explore solutions and connect directly with the partners behind them, while ElevenLabs says it plans to let customers purchase eligible partner solutions through existing ElevenLabs commitments starting next year.

Top 10 things AI gets wrong in web development

Google released Modern Web Guidance 1.0, a set of skills that embeds web platform expertise, best practices and browser compatibility data into coding agents. Its evaluation suite found unguided coding agents pass only about 50% of checks on average, versus about 90% with Modern Web Guidance installed. The post lists ten areas where models frequently err, including focus and inert management, reduced-motion support, form validation and autofill, swipe gestures, dialogs and popovers, dark mode, main-thread responsiveness, layout shift, DOM XSS defenses, and passkey sign-in.

Show HN: Trace AI written code back to the agent and prompt

Sploom is a tool that lives alongside git and records which agent and model wrote each line of code, along with the intent, prompts, decisions and checks behind it, working with Claude Code, Codex, Cursor, Gemini CLI, Copilot CLI, Devin CLI, Grok Build, Goose, Cline and any MCP-capable agent. After a one-time `sploom init`, it installs git hooks so provenance travels with commits via git notes, and offers commands like `sploom why`, `sploom rewind --green` and `sploom context`. Prompts are encrypted to the team's SSH keys listed in a committed `.sploomkeys` file, and it runs locally with an initial ~130 MB embedding model download.

Openshorts: Open-source / self hosted AI clip generator (OpusClip alternative)

OpenShorts is an MIT-licensed, self-hostable tool that turns long videos into 9:16 shorts using Gemini for viral moment detection, faster-whisper subtitles, and AI reframing modes including face tracking and split-screen layouts. It also bundles an AI Shorts UGC creator and a YouTube Studio toolkit, and exposes the pipeline via an MCP server, REST API, webhooks and CLI. Self-hosting is free with bring-your-own API keys, while a hosted cloud plan starts at $12/mo after a watermarked 20 min/mo free tier.