Research
Everything Intel keeps, in one place — every brief we run, every department, readers' own, and every finding behind them. Browse below, or see the same body of work as a connected graph on the live map.
Following opens with early access — sign up for early access to register your interest; it does not switch following on today. Everything you follow will land on one page, in your account menu.
All coverage
Everything Intel has read, newest first. Each title opens at its original publisher.
- Dev Tooling & Infra
GitHub Copilot cloud agent adds per-task reasoning-level control
Reasoning effort is becoming a first-class, user-tunable cost dial across agent products — budget-vs-quality control is now part of delegating work.
- Dev Tooling & Infra✓ verified
GitHub Models is retired — playground, catalog, inference API and bring-your-own-key all switched off
A unified model endpoint that anything in a build could be pointing at is gone with no grace period for existing users; the migration is to Microsoft Foundry or Copilot, and it is not optional.
- Dev Tooling & Infra
One field now asks any model for its fast tier, and falls back when there is not one
Latency-versus-cost stops being a per-provider rewrite and becomes one parameter - the practical version of the model-swappability people keep being sold.
- Dev Tooling & Infra
A model vendor becomes a login button: Sign in with ChatGPT arrives on Vercel
Identity is where platform power settles. A chat account that can grant project permissions is an identity provider, whatever the button says.
- Dev Tooling & Infra✓ verified
Patch now: a hard-coded password in Cisco’s firewall manager, with a three-day federal deadline
Three network-edge devices, one of them the box that manages your firewall rules — and the shortest due date CISA has set this month.
- Dev Tooling & Infra
A hidden instruction in a Word document can now copy itself into the next document
Every document your assistant reads is now potentially a carrier, and it spreads through ordinary drafting - the file-sharing habits of a normal team are the attack surface.
- Dev Tooling & Infra
Vercel Sandbox can fork itself — branch an agent off a saved snapshot instead of rebuilding it
A fan-out of agents over one prepared environment stops meaning N cold builds — the setup cost is paid once and forked.
- Dev Tooling & Infra
npm now scans every newly published package before anyone can install it
Any release automation that installs its own package immediately after publishing will now intermittently fail - a one-line assumption in a lot of pipelines that has just stopped being true.
- Dev Tooling & Infra
GitHub Actions will hold a suspicious workflow for approval instead of running it
The attack this blocks is the cheapest full compromise of a build pipeline there is: hold a token, push a workflow, harvest every other secret the pipeline owns.
- Dev Tooling & Infra
Vercel’s AI Gateway can now pin inference to the US or the EU with a single field
Data residency is usually the reason an AI feature stalls in legal review; a provider-agnostic region flag turns that from an architecture problem into a configuration line.
- Dev Tooling & Infra
GitHub gives admins a dedicated policy for Copilot app access — and pushes managed settings into the cloud agent
Once a coding agent runs in the cloud under enterprise settings, the admin policy surface IS the security boundary — and the telemetry configuration is what makes any of it auditable afterwards.
- Dev Tooling & Infra✓ verified
There is a resale market for stolen LLM tokens, and an unprotected endpoint is its supply
Any team that exposes an LLM-backed endpoint without a spend cap is now a supplier to a priced, tooled market that actively hunts for one.
- Dev Tooling & Infra
Vercel workflow steps can now run 30 minutes, up from just over 13
Long agent steps have been split across invocations purely to dodge a timeout; a 30-minute ceiling removes a chunk of that plumbing.
- Dev Tooling & Infra
Vercel puts its web application firewall in front of Blob storage
Object storage is the quiet soft spot in agent-built apps — uploads and generated artefacts land there, and the firewall used to stop at the edge of the application.
- Dev Tooling & Infra
Anthropic cut over 80% of Claude Code's system prompt for the Claude 5 generation — and says nothing measurable broke
Most agent harnesses still run the previous generation's playbook — long rule lists, worked examples, everything front-loaded. If the vendor's own harness got dramatically shorter without getting worse, the prompt you are maintaining is probably carrying dead weight.
- Dev Tooling & Infra✓ verified
Ruff turns on 413 lint rules by default, up from 59
A sevenfold jump in default rules lights up existing repositories on the first run — which is exactly the kind of large, mechanical, well-specified cleanup a coding agent absorbs better than a human afternoon.
- Dev Tooling & Infra
GitHub Issues gets a throttle for autonomous agents — approvals, confidence scores, a reason for every action
A confidence threshold you can dial is the first practical answer to "how much do I let the agent just do?" — the same shape VS Code shipped for tool calls a week earlier.
- Dev Tooling & Infra
AMD takes aim at the robotics compute default with unified memory and microsecond control loops
A credible second supplier for robot compute changes the negotiating position of everyone currently building on a single-vendor stack.
- Dev Tooling & Infra✓ verified
VS Code 1.130 lets the model judge risk before an agent tool call asks for approval
A shipping example of an LLM risk-prefilter layered ahead of hard approval gates — the pattern agent-tooling teams are converging on.
- Dev Tooling & Infra✓ verified
PyPI now blocks adding new files to releases older than 14 days — a supply-chain hardening move
Python teams with slow multi-platform build pipelines should confirm all their wheels publish within 14 days; everyone else just got a safer dependency chain.
- Dev Tooling & Infra
Vercel opens up Vercel Agent — an AI that investigates incidents, fixes builds, and reviews PRs
A production agent that triages incidents and reviews code is the applied edge of the coding-agent wave — always-on autonomy a team can switch on without building it.
- Dev Tooling & Infra✓ verified
Patch now: a WordPress core RCE chain and a second Langflow flaw land in CISA's exploited list
Unpatched WordPress sites are exploitable by anonymous attackers right now, and self-hosted Langflow has hit the exploited list twice in two weeks — treat exposed instances as patch-or-isolate today, not dev tools you can forget.
- Dev Tooling & Infra✓ verified
GitHub Code Quality reaches general availability — and billing starts automatically
Admins who enabled the preview are now paying for it — audit enablement today — and coverage thresholds can now be enforced mechanically through rulesets.