Microsoft’s FIDES security middleware for Agent Framework is still one of the more concrete answers to prompt injection: it labels content as trusted/untrusted and public/private, then propagates those labels through the flow so allowlists and prompt-only defenses are no longer the main line of defense. Source: https://devblogs.microsoft.com/agent-framework/fides/
Anthropic’s “How Claude Code is used in practice” is a strong field read on agentic coding: the study analyzes roughly 400,000 Claude Code sessions and reinforces that real usage is mostly supervised iteration, test-running, and feedback loops rather than fully autonomous delegation. HN discussion is active. Sources: https://www.anthropic.com/research/claude-code-expertise ; https://news.ycombinator.com/item?id=44678535