Category Archives: Security

Solving Anthropic Memory Gaps in Long-Running Agents

Anthropic has announced they built scaffolding around an amnesiac and called it a “harness.” Their new engineering post on long-running agents reveals a company solving for the wrong problems, without realizing it.

Here’s what they actually discovered: if you tell their “Claude” AI chatbot to write things down in specific files, it can read those files later.

That’s the research.

Shocking.

Let me write that down for future generations.

But seriously, they’ve dressed a notepad up as “a sophisticated harness architecture inspired by human engineering practices“. Strip away the marketing fluff and framing and you’re left with structured note-taking.

The big tell is in their metaphor. They declare the problem:

…a software project staffed by engineers working in shifts, where each new engineer arrives with no memory of what happened on the previous shift

Shift handoff?

Documentation hygiene?

Pass the baton, read the notes, rinse, repeat?

Nope.

All this framing is wrong in a revealing way. Shift handoffs are about being horizontal and transactional for the same workers, same capabilities, same role, all just sequential steps.

What Anthropic claims they actually built is the exact opposite: vertical and formative.

Their “initializer agent” does far more than leave a note because it establishes the culture of the project: anthropology (ethnography) of the norms, the patterns, what counts as done, what’s prohibited. That’s essentially a parent role.

Subsequent agents can’t pick up where someone left off until after they’re born by an initializer parent into a world of inherent and inherited constraints, regulations, and have to figure out what kind of agent they’re supposed to be. This isn’t new theory at all. I’ve been teaching similar frameworks for data agents to Austrian computer science graduate students since 2015.

Source: My 2015 university lectures on safety engineering for big data

The problem obviously isn’t about an agent shift change. People punching the clock don’t start their shift in existential crisis. It’s closer to the handoff of grandparents who are teaching their customs and culture to grandchildren. The agent is born into both the physics of its situation and the culture of its lineage.

As my father used to say we live in a point in time (absolute rule) that has a time zone (relative localized treatment of the absolute rule).

Archaeologists refer to this as chaîne opératoire. When you find an ancient hand axe, the interesting question goes far beyond the procedure that has been used for making it. The entire cognitive and cultural apparatus behind it should come into focus: Why this stone and wood, why not this or that one? How do you read shapes and fracture patterns? When is a tool “done” or ready? What’s it even for, and not for? Should you sharpen for two hours and chop for one, or chop for four? Or perhaps, as chillingly depicted in the new film Train Dreams, who is accountable for Americans using Chinese labor and then murdering them before they can prosper?

Who did we kill to make a railroad and do we remember? That’s the full weight of what cultural transmission means. Beyond agent memory transfer into the moral accountability across agents.

The accumulated judgment of generations is encoded in techniques, and that judgment doesn’t transfer through documentation alone.

Consider a soldier coming into bootcamp.

Knowing the right end of the rifle is the least of training, even if pointing it wrong is fatal. Instead the most crucial bits are here’s who we are, here’s why we fight, here’s how to recognize threats, here’s what victory looks like, here’s what’s unacceptable. Marksmanship is almost incidental to the identity formation for orders. Someone who could operate the rifle still wouldn’t be a soldier because he would lack the long term knowledge of why and where to aim, when NOT to fire.

Anthropic notices that Claude tries to “one-shot” its applications, declares victory prematurely, and doesn’t test properly. Oh boy, don’t I know that. It’s super frustrating.

They treat these as failure modes to be constrained, yet they are all dispositions. The agent has values and tendencies that are wrong for the task.

Anthropic’s solution doesn’t address the dispositions, however. Instead it constrains them externally with rules and file structures. The feature list that can’t be edited, the JSON format, the git discipline, etc. are primitive guardrails around an agent that doesn’t understand why they matter. It’s like a bird building a nest its chicks can never leave and calling them flight-ready.

Cardinal chicks will leave their harnesses behind

The deeper problem is that Anthropic clearly has no understanding of the problems and lacks a theory of what’s happening. They stumbled onto ancient cultural transmission theory as if it’s novel or unknown and then framed it as documentation best practices.

They think they solved a coordination problem when they actually created a socialization system. The distinction matters because coordination problems have primitive engineering solutions, while socialization problems require sophisticated understanding of how identity and judgment are formed meaningfully.

What would a real theory look like?

Start by asking why Claude has the dispositions it has, and how it got there, rather than how to constrain them. Ask what it means to instantiate a new being into an inherited world. Ask how judgment transfers beyond just information.

Philosophy, or even anthropology, not physics.

A cat that gets burned may never return to the hot spot, but a human may learn the spot was hot because someone turned on the power. The burned cat learns correlation, not causation. Humans transmit the mechanism, not just the avoidance. That’s exactly what’s missing from the Anthropic harness, and yet it’s intelligence 101.

Anthropic rediscovered something every apprenticeship system, military, and religious tradition figured out millennia ago. It’s hardly news because you can’t transmit competence without transmitting culture. They just don’t know that’s what they did. Perhaps because they don’t have a proper handoff themselves from past social sciences.

Scientists Reveal Harms From Unregulated Tattoo Inks

Scientists are raising concern that, with ~30% of Americans tattooed, persistent lymph node inflammation and altered immune response is happening at population scale, without any regulatory oversight.

Despite safety concerns regarding the toxicity of tattoo ink, no studies have reported the consequences of tattooing on the immune response. In this work, we have characterized the transport and accumulation of different tattoo inks in the lymphatic system using a murine model.

Compared to pharmaceuticals, this makes little sense. They’re basically calling out a huge loophole in American toxicology programs and the lack of informed consent. I say American because the study notes that ink composition has been regulated in EU member states since 2022.

Basically, within minutes of tattooing, ink travels through the lymphatic system and accumulates in draining lymph nodes, where it persists long-term (observed at 2 months and then lasting “lifelong” in humans).

Macrophages in the lymph nodes capture the ink particles, and undergo apoptosis (cell death). This triggers sustained inflammation, as detected by elevated proinflammatory cytokines for months after tattooing. Giant cell formation also occurs, a hallmark of chronic inflammation. In other words the body reacts to tattoo ink the way it reacts to tuberculosis, or foreign body granulomas.

And on top of that, when ink was at a vaccine injection site, tattoos reduced antibody response to mRNA COVID vaccines (because macrophages expressed less spike protein).

From a natsec perspective, if tattoos near injection sites reduce mRNA vaccine efficacy, that’s a force health protection question. And if chronic low-grade lymph node inflammation is being injected across half the force, what does that do to wound healing, infection response, recovery time?

Chronic inflammation is associated with cardiovascular disease, autoimmune conditions, and cancer risks. Given tattooing produces lifelong inflammatory burdens, and above 30% of the veteran population is tattooed, this long-term cost driver needs to be modeled.

Source: Twitter

The EU forcing reformulation and regulation in 2022 suggests the science already is there. America however still treats tattoo risks like they are only for prisoners, sailors and clowns.

Tesla Losing Lawsuits So Fast, Billions Could Be Paid to Autopilot Victims

Fred Lambert is on point with his reporting as usual. Tesla has the highest accident and fatality rate of any car, coupled with no legal defense for dangerous defects it’s been pumping onto public roads.

As I have been highlighting over the last few months, this is just the beginning. We are just now starting to see cases that come from crashes that happened in 2018-2019-2020 go to trial.

It’s a long process, but we know that the number of crashes involving Autopilot and FSD significantly ramped up in 2021-2025 due to higher volumes and the launch of FSD.

All these accidents, many of them unfortunately fatal, are going to go through the legal process, and Tesla will have to settle for billions of dollars when everything is said and done.

A long process is an understatement.

I presented in 2016, and wrote many times since then, that the car company was so flawed it would only increase fatalities. Ten years later, it’s like watching the suffering Troy residents admit finally that an Elon Musk horse was no gift.

The “Trojan Horse” was Greek, like how death by electrocution was Edison, and Tesla is Elon Musk.

With comments like the following one on Fred’s post, it’s no wonder the Tesla ship is taking a while to sink.

I certainly wouldn’t mind some kind of a settlement since I took a beating with the depreciation of our car from Elon‘s antics.

All Tesla owners, and their communities, appear to be victims to some degree (from fraud to fatality). They unfortunately are hoping Tesla will aid them, which is like expecting the Titanic to give them a lifeboat after they are already swimming in the freezing water.

Putin Wrote Trump’s “Peace” Plan for Ukraine

I’m not even surprised, at this point, that Trump had Russia write the U.S. “peace” plan for the country Russia was losing a war with.

now here’s where the clownfuckery dial gets twisted way past eleven — because it came out that, in fact, Russia did author that ‘peace plan.’ Witkoff and Jared were apparently just acting as glorified stenographers and going ‘yes? what else would you like?’ next time, can we just send Beavis and Butt-head to ‘negotiate’? could they do worse?

Not Beavis and Butthead, but close.

To be frank, the fact that the U.S. took Russian demands and fraudulently presented them as the American proposal, is arguably worse than just a sloppy transcription of Russian. Trump is deliberately laundering Putin, which goes beyond being incompetent.

The damning facts of the cheap Russian play of an American President are undisputed:

[Trump] acquiesces to many Russian demands that Ukrainian President Volodymyr Zelenskyy has categorically rejected on dozens of occasions, including giving up large pieces of territory [while Putin says this] could form the basis of a final peace settlement.

This is what it looks like when a great power’s foreign policy apparatus becomes the lowly subsidiary of its adversary’s strategic objectives.

The mechanism matters more than the ranking. Trump is voluntarily serving as a transmission for Russian demands against Ukraine currently fighting Russia, while Ukraine is successful in defense. That’s not capitulation (you have to fight to capitulate) and it’s not appeasement (you have to believe it would bring peace). It’s what intelligence calls Trump being an “agent of influence.”

This is the worst deal ever written in history, and that is saying a LOT. It reads as a self-harm manifesto, if not seditious. America’s President has capitulated to the enemy, for what?

…the linguistic fingerprints point straight to Moscow — then this is not a peace plan. It is a Russian capitulation document drafted in Moscow, in Russian, translated awkwardly into English, routed through a Putin ally, and pushed onto a wartime ally by an American president acting outside NATO, outside existing U.S. policy, and outside the rules-based order the U.S. spent 75 years building.

Indeed, the linguistic analysis by The Guardian identified phrases that appear directly translated from Russian. Note the constructions “it is expected” (ожидается) that are standard in Russian official documents but awkward in English. Other words that appear to be translated from Russian include “ambiguities” (неоднозначности) and “to enshrine” (закрепить).

Any claims that Russian documents and aims are instead American-made should serve mainly as evidence of kompromat.

So, what did Trump do? Well, he took Putin’s Alaska “peace plan,” put his stamp of approval on it, and announced that Ukraine had until this Thursday to agree to it. But that was before Rubio told a gaggle of Senators that the Russians had written the plan, then he said the plan was ours…

Or let me put it like this: Finland submitted to Soviet pressure because it shared a 1,300-kilometer border with a superpower that invaded it twice already. America shares no border with Russia and faces no Russian military threat. Yet Trump is now performing voluntary Finlandization by surrendering all the leverage that a small nation on Russia’s doorstep never had to begin with.

This rapid voluntary submission to an adversary by the leader of a nation is historically unprecedented.

What’s the category for a leader who faces no military threat, commands the world’s most powerful military, holds all the leverage, and still transmits adversary demands against an ally?

There isn’t one.

The point of reading this “peace” plan correctly is no leader does this or has ever done this, because it’s the opposite of leadership. This is submission, subservience, defeat. Even the weakest states under direct threat still have leadership muscle to extract something. Even Pétain negotiated the “free zone.” Even Quisling was installed by an already occupying army, not volunteering to surrender for nothing gained.

Nixon sabotaged peace talks covertly, needlessly killing tens of thousands of American soldiers in Vietnam, for personal political gain. Trump transmits an American enemy’s demands openly as his own policy. When the President is the traitor, the difference isn’t degree—it’s category.

The White House is compromised by a foreign state, or the word has no meaning.


In related news:

Confused Trump Mistakenly Amplifies Calls to Impeach Himself

If you know Putin at all, you know many of his top assets have “thrown themselves” out of a window.