Anthropic's last two developer releases moved a set of security controls from "ask your account team" to generally available or public beta, and security teams evaluating agentic coding should re-run their assessments against this list. I've been running Claude Code agents across my own projects all year; here is what changed and what I'd look at first. Autonomy is now gated by a classifier, not a human click Auto mode became the default for Claude Code's Pro, Max, and Team plans on August 14, with Enterprise and the cloud platforms to follow. Every tool call passes a classifier tuned for irreversible, destructive, or external actions; blocked actions route to a safer path or a human. Anthropic's published evaluation reports that human reviewers caught 13.6% of dangerous commands while auto mode blocked 89%, and that users approved 97% of the permission prompts they saw. That last number is the one I'd put in front of a risk committee: manual app...
Deep Dive · AVANT · August 2026 Some Parts of the Channel Were Never Going to Be Self-Service I've watched a lot of distribution models get built, rebuilt, and declared obsolete over thirty-plus years in this business — UNIX systems at AT&T Bell Labs, the PC clone wars, LANs going Token Ring to Ethernet to WiFi everywhere, on-prem software becoming SaaS. Every one of those transitions produced a wave of people convinced the old way of selling technology was about to disappear entirely, replaced by something faster and more self-service. And every one of those transitions also proved something else out at the same time: for a meaningful slice of buyers, technology decisions are relationship decisions, not catalog decisions. Someone has to sit across the table, understand what the business actually needs, and stay accountable after the contract is signed. That role never went away. It just kept finding a new form. AVANT is ...