Daily Edition · Page 3

THE DAILY INDEX

Technology, AI, software, security, crypto and business

NEWS & TRENDS

TLDR IT

NVIDIA OPEN AGENT SAFETY PLATFORM: A REFERENCE FOR CONTINUOUS IN-SILICON AGENT MONITORING

NVIDIA's Open Agent Safety Platform pairs OpenShell, an Apache 2.0 sandboxed runtime that turns operator instructions into verifiable file, network, tool, and credential policies, with Sentry, a monitor that runs on BlueField-4 DPUs. In Vera Rubin PODs, the DPU sits on the node's only path to the model, so it can enforce policy at line speed outside the agent's reach. NVIDIA's argument is that agents can't be trusted to govern themselves, so safety controls have to sit below them in hardware.

TEST-DRIVING JEV ON A SECURITY TASK: IDENTITY RESOLUTION

Vincenzo Iozzo tested Jev, a specialized classification model, on matching accounts across systems to the same person in five real organizations. Jev scored 0.948 F1 on large orgs at $0.62 per 1,000 accounts, beating Claude Haiku 4.5 (0.894 F1, 19x the cost) and Sonnet 5 (0.911 F1, 47x the cost) at roughly a tenth of their latency. His conclusion is that small calibrated models beat prompted frontier LLMs on bounded, high-volume security classification.

INTRODUCING THREAT SIGNALS: AGENTIC SKILLS FOR OPEN-SOURCE THREAT INTELLIGENCE, FREE FOR EVERY CLOUDFLARE ACCOUNT

Cloudflare's Threat Signals uses agentic skills to read open-source threat reports from RSS feeds, summarize them, extract indicators of compromise, and tag threats. It then links those findings to WAF rules while keeping the context of the original source. Cloudflare also made its Threat Events Platform free for every account, with paid tiers for more feeds, proprietary data, and custom skills.

BUILDING A POST-QUANTUM CERTIFICATE AUTHORITY WITH MERKLE TREE CERTIFICATES

Cloudflare is becoming a certificate authority that issues Merkle Tree Certificates for free, and it is targeting Chrome's quantum-resistant root store in early 2027. Post-quantum signatures are about 40x larger than classical ones, so MTCs batch many certificates under a single CA signature and build transparency logging into issuance. In a Chrome experiment covering 50% of Beta users, the lightweight MTC format already made handshakes 9% faster.

TLDR IndexPage 3