OpenCode says attackers reached stored provider keys, and Anthropic reports its own hiring shift

OpenCode says attackers got into its hosted Console and reached stored provider keys, which raises the question of who verifies an agent's work and who holds its credentials. Today also covers verification loops, agent authorization, Anthropic's report on its own workforce, and the pricing of AI infrastructure debt. OpenCode breach coverage on Techmeme and the Reddit report of a drained key, with Nathan Lambert's objection to the "distillation" label Sphinx, a Git hook that quizzes you on a diff before a push, plus the WorkOS talk on agent verification and Addy Osmani's one-line principle A talk on agent authorization beyond OAuth scopes Anthropic's report on employment at Anthropic and TechCrunch's coverage AI infrastructure debt pricing and the World Bank speech on small AI DeepSeek V4.1-Flash on Ollama Cloud and Nvidia's RTX Spark laptops