OffNet Newsroom

Daily topic roundup

Agentic AI

Friday, August 07, 2026 · 8 stories, curated & summarized — click any story for the source.

AWS What's New awsdatabase

AWS Bedrock AgentCore runtime instances GA on EC2

AWS has generally available runtime instances for Amazon Bedrock AgentCore, enabling agents to run directly on EC2 infrastructure. This option complements existing microVM deployments by supporting GPU, memory, and compute-optimized families for specialized workloads. AgentCore manages provisioning, patching, scaling, and lifecycle, allowing teams to define capacity providers via console or API.

  • Run AgentCore on your own EC2 instances without managing underlying infrastructure
  • Access dedicated GPU, memory, and compute-optimized instance types for heavy workloads
  • Define capacity providers via console, CLI, SDKs, or APIs to specify instance needs
  • AgentCore handles provisioning, patching, scaling, and lifecycle management automatically
  • Complements existing microVM-based runtime for diverse agent deployment requirements
CHECKLISTAgentCore on EC2 Key BenefitsRun agents on your own EC2 instancesAccess dedicated GPU and compute-optimized typesDefine capacity via console or APIsAgentCore handles provisioning and lifecycle managementComplements existing microVM runtime options

AWS has released Model Context Protocol (MCP) tools for Amazon Aurora DSQL, allowing AI coding assistants to interact directly with the database from within an IDE. These tools enable developers to execute queries, manage schema evolution, and verify compatibility without switching contexts. The release includes guidance on installation, integration patterns, and the associated security model.

  • MCP tools allow AI assistants to run queries and evolve schemas directly in the IDE.
  • Developers can check Aurora DSQL compatibility without leaving their coding environment.
  • Integration patterns and security models are documented for secure implementation.
  • Reduces context switching by keeping database operations within the AI workflow.

Andrei Mironov outlines a method for securing PostgreSQL data accessed by AI agents using row-level security. The approach emphasizes using non-owner roles, FORCE RLS to bypass access checks on tables, and explicit policies for controlled writes. It also includes strategies for verifying security through denial tests to ensure robustness.

  • Use non-owner roles for AI agents to enforce least privilege access patterns.
  • Apply FORCE RLS to tables to ensure policies are always evaluated, even for superusers.
  • Define explicit write policies to control data modification by AI workloads.
  • Implement denial tests to verify that unauthorized access attempts are correctly blocked.
Planet PostgreSQL database

Postgres for Agentic AI: Treat Database as Compute Layer

PostgreSQL has become the default storage for agentic AI, yet many teams treat it merely as a passive parking lot for signals and state. As workloads grow more agentic, databases must actively handle intermediate results, shared state updates, and concurrent multi-step workflows. AI engineers often overlook PostgreSQL's capabilities as a first-class compute citizen, leading to suboptimal handling of complex production patterns.

  • Shift mindset from storage-only to active compute layer for AI agents.
  • Expect concurrent multi-step workflows and shared state updates.
  • AI engineers must explore Postgres compute features beyond CRUD.
  • Agentic workloads create unique patterns distinct from traditional ops.
  • Optimize for signal, memory, and checkpoint throughput, not just queries.
CHECKLISTOptimize Postgres for Agentic AIShift mindset from storage to active compute layerExpect concurrent multi-step workflows and shared state updatesExplore Postgres compute features beyond basic CRUD operationsOptimize for signal, memory, and checkpoint throughputDesign for agentic workloads distinct from traditional ops
Hacker News (100+ points) general

Study: Humans missed 1 in 3 AI agent threats across 40k game runs

An analysis of 40,000 game runs reveals that human reviewers failed to detect one-third of security threats identified in AI agent commands. The high miss rate highlights a significant gap in current oversight mechanisms for autonomous systems. This data suggests that relying solely on human judgment for AI permission approval is insufficient for robust security.

  • Human oversight misses 33% of AI agent security threats in large-scale tests.
  • 40,000 game runs provide strong statistical evidence of oversight failures.
  • Current approval workflows are inadequate for autonomous AI command validation.
  • Automated threat detection must supplement human review to reduce risk.
  • High-volume AI operations require stricter permission controls and auditing.

A recent study indicates that human-in-the-loop oversight fails to catch approximately one-third of hazardous requests directed at AI coding agents. The research highlights significant gaps in manual review processes when handling sensitive operations like credential exposure or Kubernetes configuration leaks. This suggests that relying solely on human judgment for security filtering is insufficient for modern AI-assisted development workflows.

  • Human reviewers miss 33% of dangerous AI coding agent requests
  • Manual oversight is ineffective against credential and config exposure
  • Automated security gates are essential alongside human review
  • AI coding agents require stricter pre-execution validation layers

Amazon Bedrock AgentCore introduces temporal policies to enforce stateful authorization rules based on an agent's session history, ensuring that tool calls are evaluated in context rather than isolation. Additionally, the service now supports rate limiting for AI traffic, allowing administrators to control request volumes per user or group. These controls apply to tools, models, and agents connected via the gateway, scoped by OAuth or AWS IAM permissions.

  • Enforce workflow sequencing by requiring tool arguments to match prior outputs.
  • Prevent misuse by evaluating tool safety based on the full session context.
  • Require human approval before executing privileged actions within an agent.
  • Apply per-user or per-group rate limits to tools, models, and agents.
  • Scope controls using OAuth or AWS IAM for granular access management.
CHECKLISTWhat matters hereEnforce workflow sequencing by requiring tool arguments to match…Prevent misuse by evaluating tool safety based on the full session…Require human approval before executing privileged actions within an…Apply per-user or per-group rate limits to tools, models, and agents.Scope controls using OAuth or AWS IAM for granular access management.

This paper introduces Agentic Nesting, a methodology designed to overcome the rigidity and high maintenance costs of traditional enterprise integration tools like ESBs and RPA. By leveraging AI agents, the approach aims to seamlessly orchestrate heterogeneous business systems and break down data silos without requiring heavy architectural coupling. The proposed framework seeks to enhance operational intelligence while reducing the complexity of managing diverse information applications.

  • Moves beyond rigid middleware architectures to solve enterprise integration challenges.
  • Reduces coupling and maintenance costs associated with legacy systems.
  • Enables intelligent orchestration of heterogeneous business applications.
  • Addresses data silos through dynamic agent-based workflows.
TRADE-OFFAgentic Nesting vs Legacy ToolsLegacy MiddlewareRigid architectureHigh maintenance costsHeavy couplingAgentic NestingDynamic orchestrationReduced complexitySeamless integrationvs