Field Notes

What humans and agents are doing, day by day

Everything here was chosen and explained by a person: essays when there is an argument to make, notes when a product shows something new about how humans and agents work together. Every note says what the observation means for the interaction and attaches to the pattern it evidences. Posts pulled from the X watchlist by an agent are labeled machine-curated: short quotes, always linked to the source.

OCT 23 · Paper · via arXiv Confidence SignalingObservabilityReview

arXiv paper shows agent groups copy each other into bad answers

High confidence from a group of agents can mean they all copied the first one. The review surface needs to show where agreement came from, or the human deciding on the output has nothing real to judge.

Read the source ↗ attached to Confidence Signaling →
watching

watching → emerging → established

A candidate behavior, not yet a published pattern. Early signal — worth tracking, not yet worth standardizing on.

21 documented sightings since Aug 2026 — every one traces to a dated source.

See the evidence →
OCT 23 · Paper · via arXiv Agent-to-AgentApprovalHuman Handoff

DoorDash ran 35,000 code changes through AI agents for $4.79 each

The reviewer approved or rejected based on a summary the agents wrote, not on direct inspection of the work. The handoff summary is the interface, and that makes its accuracy the design problem.

Read the source ↗ attached to Agent-to-Agent →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

20 documented sightings since Aug 2026 — every one traces to a dated source.

See the evidence →
OCT 23 · Paper · via arXiv ApprovalDelegationReview

Open index maps how much of a job agents can take over

This index shifts the design question from whether an agent touches a task to how much of it a human can hand over. Reach for approval and review patterns before you allow background execution.

Read the source ↗ attached to Approval →
established

watching → emerging → established

A stable convention across independent vendors. Safe to standardize on — deviating from it now carries cost.

48 documented sightings since Jun 2026 — every one traces to a dated source.

See the evidence →
OCT 23 · Paper · via arXiv Human HandoffObservabilityReview

Atlas gives designers a map of what a long agent run actually did

The agent ran; the human arrived after. Atlas shows that the review screen is its own design problem, separate from delegation or progress. Most products have not built it yet.

Read the source ↗ attached to Human Handoff →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

23 documented sightings since Mar 2026 — every one traces to a dated source.

See the evidence →
OCT 23 · Paper · via arXiv Agent IdentityAgent-to-AgentGenerative UI

ABRA gives each agent its own reusable screen panel

The view is bound to the agent that made it. That one design move changes what a human can do: they can see who built the surface before they touch it. Generative-ui without that binding leaves the human with no footing.

Read the source ↗ attached to Agent Identity →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

19 documented sightings since Feb 2026 — every one traces to a dated source.

See the evidence →
OCT 23 · Paper · via arXiv ApprovalContextHuman Handoff

HCI researchers map how shared workspaces change agent work

The workspace holds the knowledge, not the agent alone. A product team that designs the agent first and the workspace second will build something where the human approves without seeing enough to judge.

Read the source ↗ attached to Approval →
established

watching → emerging → established

A stable convention across independent vendors. Safe to standardize on — deviating from it now carries cost.

48 documented sightings since Jun 2026 — every one traces to a dated source.

See the evidence →
OCT 23 · Paper · via arXiv Human HandoffPlanningReview

RCT finds pausing to reflect lifts AI-assisted writing quality

The scaffold changed what the writer knew before the AI started. That prior position is what made reviewing the output possible. Design the moment before generation, not the output.

Read the source ↗ attached to Human Handoff →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

23 documented sightings since Mar 2026 — every one traces to a dated source.

See the evidence →
OCT 22 · Paper · via arXiv Agent-to-AgentConfidence Signaling

A new study finds more agents hurt quality in live chat

The human in the chat is not passive. Adding agents between the human and the answer made things worse. If your product puts a human in the loop at runtime, each extra agent is a cost, not a benefit.

Read the source ↗ attached to Agent-to-Agent →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

20 documented sightings since Aug 2026 — every one traces to a dated source.

See the evidence →
OCT 22 · Paper · via arXiv Agent-to-AgentDelegationPermissions

arXiv paper locks AI agents to rules they cannot skip at run time

The human sets terms once; the framework refuses any action the agent cannot prove is safe before it runs. That gap between 'I granted access' and 'I trust it was used correctly' is where approval patterns break down today.

Read the source ↗ attached to Agent-to-Agent →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

20 documented sightings since Aug 2026 — every one traces to a dated source.

See the evidence →
OCT 22 · Paper · via arXiv DelegationMemoryPermissions

30 platforms audited, few let you say what agents may share

The human granted access but had no way to say what stays private. That missing half of the conversation is what 30 platforms skipped.

Read the source ↗ attached to Delegation →
established

watching → emerging → established

A stable convention across independent vendors. Safe to standardize on — deviating from it now carries cost.

22 documented sightings since May 2026 — every one traces to a dated source.

See the evidence →
OCT 21 · Paper · via arXiv ApprovalDelegationHuman Handoff

Model strength sets who leads, not screen design

The model's strength sets who leads, not the UI. If you build a delegation pattern without noting which model it was tested on, you will ship something that breaks when the model changes.

Read the source ↗ attached to Approval →
established

watching → emerging → established

A stable convention across independent vendors. Safe to standardize on — deviating from it now carries cost.

48 documented sightings since Jun 2026 — every one traces to a dated source.

See the evidence →
OCT 21 · Paper · via arXiv ApprovalProgressReview

Gaze tracking reveals how humans miss agent mistakes in real time

The human looked, said yes, and missed it. That breaks the assumption behind approval screens, and display design is where that difference lives.

Read the source ↗ attached to Approval →
established

watching → emerging → established

A stable convention across independent vendors. Safe to standardize on — deviating from it now carries cost.

48 documented sightings since Jun 2026 — every one traces to a dated source.

See the evidence →
OCT 20 · Paper · via arXiv Agent-to-AgentApprovalObservability

One true fact in a forged message fools 18 AI agents into compliance

The agent confirms one fact and approves the rest. The human approving the action downstream sees the agent's confident output, not the document that produced it. Approval here is blind to the thing it most needs to see.

Read the source ↗ attached to Agent-to-Agent →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

20 documented sightings since Aug 2026 — every one traces to a dated source.

See the evidence →
OCT 20 · Paper · via arXiv ApprovalInterruptionProgress

Cling beats full-agent automation by letting humans steer each step

The human stays in the seat and points; the agent moves the data. Approval at each step was the performance advantage, not a slowdown. That inverts the usual pitch for handing the whole job to an AI.

Read the source ↗ attached to Approval →
established

watching → emerging → established

A stable convention across independent vendors. Safe to standardize on — deviating from it now carries cost.

48 documented sightings since Jun 2026 — every one traces to a dated source.

See the evidence →
OCT 19 · Paper · via arXiv Budget ScopingContext

Researchers find agent pricing follows whatever prices you show it

The designer who picks what prices an agent sees is making a pricing policy call, not a technical one. This paper gives that a hard empirical foundation.

Read the source ↗ attached to Budget Scoping →
watching

watching → emerging → established

A candidate behavior, not yet a published pattern. Early signal — worth tracking, not yet worth standardizing on.

14 documented sightings since Aug 2026 — every one traces to a dated source.

See the evidence →
OCT 19 · Paper · via arXiv ApprovalPermissionsRecovery

ArXiv researchers use web structure to stop agents being tricked

The agent verifies page structure before acting, so the human granting site access is no longer the sole check. That shifts what the grant screen needs to show and what a revocation means.

Read the source ↗ attached to Approval →
established

watching → emerging → established

A stable convention across independent vendors. Safe to standardize on — deviating from it now carries cost.

48 documented sightings since Jun 2026 — every one traces to a dated source.

See the evidence →
OCT 19 · Paper · via arXiv ApprovalPermissionsReach Preview

GatewayBench puts agent routing servers through adversarial testing

The human approves agent access, but the server between the agent and the outside world had no agreed test. That gap sits inside the approval moment. Designers should surface routing server behavior before asking for sign-off.

Read the source ↗ attached to Approval →
established

watching → emerging → established

A stable convention across independent vendors. Safe to standardize on — deviating from it now carries cost.

48 documented sightings since Jun 2026 — every one traces to a dated source.

See the evidence →
OCT 19 · Paper · via arXiv ApprovalBackground ExecutionRecovery

Anthropic's AI ran a biology lab's image analysis start to finish

The human decides once at the start. The agent runs the full job. That ratio of one decision to many actions is the core question your long-running agent product has to answer.

Read the source ↗ attached to Approval →
established

watching → emerging → established

A stable convention across independent vendors. Safe to standardize on — deviating from it now carries cost.

48 documented sightings since Jun 2026 — every one traces to a dated source.

See the evidence →
OCT 19 · Paper · via arXiv Confidence SignalingContextMemory

PersonaCUABench finds agents fail 36% more often for diverse humans

The agent ran, finished, and was wrong for the human in front of it. No surface let the human correct who the agent thought they were before the task started. That is the memory gap made measurable.

Read the source ↗ attached to Confidence Signaling →
watching

watching → emerging → established

A candidate behavior, not yet a published pattern. Early signal — worth tracking, not yet worth standardizing on.

21 documented sightings since Aug 2026 — every one traces to a dated source.

See the evidence →
OCT 19 · Paper · via arXiv Case DrilldownEval Set AuthoringObservability

Annotrace gives agent trace labelling a repeatable standard

The reviewer's judgement has been the bottleneck. Annotrace makes it repeatable. That changes whether a team can trust its own scores across releases, not within one sitting.

Read the source ↗ attached to Case Drilldown →
watching

watching → emerging → established

A candidate behavior, not yet a published pattern. Early signal — worth tracking, not yet worth standardizing on.

9 documented sightings since Aug 2024 — every one traces to a dated source.

See the evidence →
OCT 16 · Paper · via arXiv Agent IdentityConfidence SignalingObservability

488 humans cut belief-shift 78% by seeing a chatbot's tactics

The agent behaved the same way in both conditions. The interface changed what the human did. That gap between agent behavior and human outcome is where confidence-signaling patterns live, and this study measures it.

Read the source ↗ attached to Agent Identity →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

19 documented sightings since Feb 2026 — every one traces to a dated source.

See the evidence →
OCT 16 · Paper · via arXiv Human HandoffInterruptionProgress

Kolab measured 115 hours of real work and found agents need humans

Kolab found that humans step in, redirect, and correct throughout a task. A test suite that ignores that will produce agents that fail the moment a real professional sits down with them.

Read the source ↗ attached to Human Handoff →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

23 documented sightings since Mar 2026 — every one traces to a dated source.

See the evidence →
OCT 14 · Paper · via arXiv Agent-to-AgentApprovalBudget ScopingReach Preview

EAIR paper finds enterprise agent teams break rules together

Each agent looked clean; the team crossed the line. Budget-scoping and reach-preview both assume a designer can see the group's total, not one agent's share. That view does not exist in most products today.

Read the source ↗ attached to Agent-to-Agent →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

20 documented sightings since Aug 2026 — every one traces to a dated source.

See the evidence →
OCT 14 · Paper · via arXiv Agent-to-AgentConfidence SignalingOff-Brief AlertRecovery

arXiv paper tests what happens when AI teammates fail each other

The human handed the work off and had no signal when a member of the group went wrong. Recovery and off-brief alerts are the gap. Design for the failure that looks like progress.

Read the source ↗ attached to Agent-to-Agent →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

20 documented sightings since Aug 2026 — every one traces to a dated source.

See the evidence →
OCT 14 · Paper · via arXiv ApprovalHuman HandoffObservabilityReview

Hidden ads in search results steered what a shopping AI bought

The human approved the task, then reviewed the result. The middle, what the agent read and what it was told inside those pages, stayed invisible. That gap is what this paper lands on.

Read the source ↗ attached to Approval →
established

watching → emerging → established

A stable convention across independent vendors. Safe to standardize on — deviating from it now carries cost.

48 documented sightings since Jun 2026 — every one traces to a dated source.

See the evidence →
OCT 14 · Paper · via arXiv Confidence SignalingHuman HandoffReview

Expertise shapes how far workers trust and delegate to AI

Experts caught errors; novices did not. The difference was review behavior, not trust. A screen that makes scrutiny feel optional skips the most important moment in the interaction.

Read the source ↗ attached to Confidence Signaling →
watching

watching → emerging → established

A candidate behavior, not yet a published pattern. Early signal — worth tracking, not yet worth standardizing on.

21 documented sightings since Aug 2026 — every one traces to a dated source.

See the evidence →
OCT 14 · Paper · via arXiv Confidence SignalingHuman HandoffReview

Researchers find AI interaction leaves measurable marks on the human

The interaction leaves a mark on the human, and most patterns are designed as if it doesn't. That's the gap. Delegation, review, confidence-signaling: each one trains the human in a direction. Worth knowing which direction before you ship.

Read the source ↗ attached to Confidence Signaling →
watching

watching → emerging → established

A candidate behavior, not yet a published pattern. Early signal — worth tracking, not yet worth standardizing on.

21 documented sightings since Aug 2026 — every one traces to a dated source.

See the evidence →
OCT 13 · Paper · via Martin Fowler Budget ScopingRelease DecisionEval Run SetupReview

Fowler and Jain measure what scaffolding costs to run an AI coder

The harness is the signal the reviewer depends on. If it's too expensive to run or too noisy to trust, the human's review step loses its foundation before it begins.

Read the source ↗ attached to Budget Scoping →
watching

watching → emerging → established

A candidate behavior, not yet a published pattern. Early signal — worth tracking, not yet worth standardizing on.

14 documented sightings since Aug 2026 — every one traces to a dated source.

See the evidence →
OCT 13 · Paper · via arXiv ApprovalMemoryObservabilityPermissionsRecovery

Researchers show how shared agent skills carry poison across sessions

The human approved the output. A later session read the artifact and acted on something else. Approval and observability both assume the artifact is stable; this paper shows that assumption is the gap.

Read the source ↗ attached to Approval →
established

watching → emerging → established

A stable convention across independent vendors. Safe to standardize on — deviating from it now carries cost.

48 documented sightings since Jun 2026 — every one traces to a dated source.

See the evidence →
OCT 12 · Paper · via arXiv Confidence SignalingContextObservability

257 users split in two based on whether they saw the agent as human

The agent gave the same reply to two humans with opposite expectations of it. One found it trustworthy, one found it opaque. That is a reply-strategy problem, not a framing problem.

Read the source ↗ attached to Confidence Signaling →
watching

watching → emerging → established

A candidate behavior, not yet a published pattern. Early signal — worth tracking, not yet worth standardizing on.

21 documented sightings since Aug 2026 — every one traces to a dated source.

See the evidence →
OCT 9 · Paper · via arXiv Budget ScopingEmergency StopMulti-Agent Roster

arXiv paper maps how humans govern thousands of research agents

The interface question flips here. A human is no longer directing one agent but setting rules for thousands. Patterns that assumed one-to-one contact need rethinking at population scale.

Read the source ↗ attached to Budget Scoping →
watching

watching → emerging → established

A candidate behavior, not yet a published pattern. Early signal — worth tracking, not yet worth standardizing on.

14 documented sightings since Aug 2026 — every one traces to a dated source.

See the evidence →
OCT 8 · Paper · via arXiv ContextInterruptionProgress

Ream gives agents and researchers a shared view of each other's work

Both sides watched each other work, and both adjusted. I have not seen a deployed product expose the human's reading state as a live signal to the agent. That is the gap this study names.

Read the source ↗ attached to Context →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

22 documented sightings since Jun 2026 — every one traces to a dated source.

See the evidence →
OCT 7 · Paper · via arXiv DelegationInterruptionMemory

Five principles for keeping humans in charge of AI agents

The paper names five moments where intent can slip between a human and an agent. Each one is a gap a product team can close in the interface. That is the design argument worth taking to your next sprint.

Read the source ↗ attached to Delegation →
established

watching → emerging → established

A stable convention across independent vendors. Safe to standardize on — deviating from it now carries cost.

22 documented sightings since May 2026 — every one traces to a dated source.

See the evidence →
OCT 6 · Paper · via arXiv ApprovalEmergency StopOff-Brief Alert

arXiv researchers show how poisoned data hijacks multi-agent work

The agent went off-brief because a document told it to, and the human saw nothing. That is the strongest case for off-brief-alert and emergency-stop I have seen stated in numbers.

Read the source ↗ attached to Approval →
established

watching → emerging → established

A stable convention across independent vendors. Safe to standardize on — deviating from it now carries cost.

48 documented sightings since Jun 2026 — every one traces to a dated source.

See the evidence →
OCT 6 · Paper · via arXiv ApprovalInterruptionProgress

Monitors missed harmful AI actions 63% of the time in new study

The monitor watched. The agent moved. The monitor missed. Designing a view is not designing oversight. The interface decides whether the human can act in time, not whether they are paying attention.

Read the source ↗ attached to Approval →
established

watching → emerging → established

A stable convention across independent vendors. Safe to standardize on — deviating from it now carries cost.

48 documented sightings since Jun 2026 — every one traces to a dated source.

See the evidence →
OCT 6 · Paper · via arXiv ApprovalInterruptionPermissions

ArXiv paper finds agents act on plan steps you did not see

The human approved the plan; the agent changed the plan and kept going. This is the sharpest evidence I have seen that approval needs to travel with the task, not sit at the front of it.

Read the source ↗ attached to Approval →
established

watching → emerging → established

A stable convention across independent vendors. Safe to standardize on — deviating from it now carries cost.

48 documented sightings since Jun 2026 — every one traces to a dated source.

See the evidence →
OCT 6 · Paper · via arXiv ApprovalObservabilityReview

Attackers fool AI code reviewers by rewriting the attack mid-review

The agent's explanation helps the human judge the work. The same explanation helps an attacker beat the agent. Designing what the reviewer sees versus what the code author sees is a security call, not a clarity call.

Read the source ↗ attached to Approval →
established

watching → emerging → established

A stable convention across independent vendors. Safe to standardize on — deviating from it now carries cost.

48 documented sightings since Jun 2026 — every one traces to a dated source.

See the evidence →
OCT 6 · Paper · via arXiv ApprovalPermissionsReach Preview

18 coders explain when they let an agent act and when they don't

Current tools ask for a wide yes upfront, then go quiet. The research says practitioners want the ask matched to the risk of each action. That is the design gap.

Read the source ↗ attached to Approval →
established

watching → emerging → established

A stable convention across independent vendors. Safe to standardize on — deviating from it now carries cost.

48 documented sightings since Jun 2026 — every one traces to a dated source.

See the evidence →
OCT 5 · Paper · via arXiv Confidence SignalingObservabilityReview

LLM agents yield to group pressure but keep their original view

The agent said yes, but held a different answer inside. Consensus in a multi-agent setup is not the same as agreement. Any confidence score built from group output needs a dissent log behind it.

Read the source ↗ attached to Confidence Signaling →
watching

watching → emerging → established

A candidate behavior, not yet a published pattern. Early signal — worth tracking, not yet worth standardizing on.

21 documented sightings since Aug 2026 — every one traces to a dated source.

See the evidence →
OCT 5 · Paper · via arXiv Agent-to-AgentConfidence SignalingObservability

Susceptible AI listeners let weaker AI speakers win arguments

The human reviews the final answer, but the distortion entered one step earlier. The listener accepted a wrong answer. Confidence checks on the final output alone will miss this.

Read the source ↗ attached to Agent-to-Agent →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

20 documented sightings since Aug 2026 — every one traces to a dated source.

See the evidence →
OCT 3 · Paper · via arXiv Agent IdentityContextObservability

Persistent agents slip out of their assigned persona mid-run

The persona held at setup and dissolved mid-run, with no signal to the human who set it. Agent-identity is not a one-time decision; it needs a way to show the human what the agent is doing now.

Read the source ↗ attached to Agent Identity →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

19 documented sightings since Feb 2026 — every one traces to a dated source.

See the evidence →
OCT 2 · Paper · via arXiv Agent IdentityMemoryObservability

Auditors found AI companions lying about their own memory

The human asked the agent what it remembered, and the agent got it wrong. That is the design failure this paper measures. If you ship a memory feature, you need a way for humans to check and correct the agent's account of itself.

Read the source ↗ attached to Agent Identity →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

19 documented sightings since Feb 2026 — every one traces to a dated source.

See the evidence →
OCT 2 · Paper · via arXiv Agent IdentityContext

A field experiment shows how agent persona shapes child compliance

The framing did more work than the face. If your agent speaks to children and you are choosing between a character and a better script, this study says write the script first.

Read the source ↗ attached to Agent Identity →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

19 documented sightings since Feb 2026 — every one traces to a dated source.

See the evidence →
OCT 1 · Paper · via arXiv ApprovalDelegationRecovery

NarrativeSteward lets writers hand off and reclaim story work from AI

Recovery made the hand-off possible, not the other way around. Writers in the study gave the AI more work once they believed they could take it back. That sequence matters for anyone designing the hand-off step.

Read the source ↗ attached to Approval →
established

watching → emerging → established

A stable convention across independent vendors. Safe to standardize on — deviating from it now carries cost.

48 documented sightings since Jun 2026 — every one traces to a dated source.

See the evidence →
SEP 30 · Paper · via arXiv Agent IdentityAgent-to-AgentObservability

Labeling agents as AI drops deal-making success by 15 points

Telling agents they work with other agents made them worse at the job. The identity label changed the behavior, not the capability. Any system that routes work between agents needs to treat that label as a design choice, not a free default.

Read the source ↗ attached to Agent Identity →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

19 documented sightings since Feb 2026 — every one traces to a dated source.

See the evidence →
SEP 30 · Paper · via arXiv Agent IdentityConfidence SignalingReview

Study finds AI agent groups erode human skepticism over time

A confident tone moved trust more than accuracy did. Designers who show agent confidence without pairing it with a real accuracy record are building the exact gap this study found.

Read the source ↗ attached to Agent Identity →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

19 documented sightings since Feb 2026 — every one traces to a dated source.

See the evidence →
SEP 29 · Paper · via arXiv Agent-to-AgentEmergency StopMulti-Agent Roster

arxiv paper finds groups of AI agents fail in ways a single-agent test misses

Single-agent review gives a false floor. Agents pass work to each other, and the human needs to see that chain, not the last step alone. That gap is where the stop decision has to land.

Read the source ↗ attached to Agent-to-Agent →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

20 documented sightings since Aug 2026 — every one traces to a dated source.

See the evidence →
SEP 29 · Paper · via arXiv Background ExecutionPermissionsRecovery

AI agent runs supercomputer jobs for scientists across four tasks

ASCEND moves the researcher out of the failure loop: the agent diagnoses and resubmits first. That changes what a progress view has to surface, and what 'step in' means.

Read the source ↗ attached to Background Execution →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

7 documented sightings since Jun 2026 — every one traces to a dated source.

See the evidence →
SEP 29 · Paper · via arXiv ApprovalPermissionsRecovery

Consumer AI agents fail most tasks when left to run alone

The structure around the agent is where task completion is decided. Set the limits, the uncertainty signals, and the moment a human steps in. Design that surface first.

Read the source ↗ attached to Approval →
established

watching → emerging → established

A stable convention across independent vendors. Safe to standardize on — deviating from it now carries cost.

48 documented sightings since Jun 2026 — every one traces to a dated source.

See the evidence →
SEP 29 · Paper · via arXiv ContextMemoryRecovery

457 diary entries show what breaks when a chat assistant forgets you

The human had no view into what the assistant stored about them. That gap is the whole failure. If the human cannot inspect and correct what the assistant holds, trust breaks and stays broken.

Read the source ↗ attached to Context →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

22 documented sightings since Jun 2026 — every one traces to a dated source.

See the evidence →
SEP 28 · Paper · via arXiv Confidence SignalingHuman HandoffReview

NYT's Epstein Files agent cut 26,000 documents to 2,500 for reporters

The Times scoped the agent to surface, not conclude. The reporter kept the decision. That boundary was chosen, not accidental. Designing the division before building the tool is the move worth copying.

Read the source ↗ attached to Confidence Signaling →
watching

watching → emerging → established

A candidate behavior, not yet a published pattern. Early signal — worth tracking, not yet worth standardizing on.

21 documented sightings since Aug 2026 — every one traces to a dated source.

See the evidence →
SEP 28 · Paper · via arXiv Confidence SignalingHuman HandoffReview

366-person study finds AI lifts confidence faster than skill

The agent handed the human a finished result and the human felt expert. A review screen that shows only the output inflates confidence without building skill. That gap is the design problem.

Read the source ↗ attached to Confidence Signaling →
watching

watching → emerging → established

A candidate behavior, not yet a published pattern. Early signal — worth tracking, not yet worth standardizing on.

21 documented sightings since Aug 2026 — every one traces to a dated source.

See the evidence →
SEP 26 · Paper · via arXiv Production DriftRelease DecisionReach Preview

Comcast ran 140 million simulated calls before shipping its CX agent

The release decision on a live agent used to be a guess. Here it is a scored comparison against 140M real past conversations. That changes what a product team owes the reviewer before shipping.

Read the source ↗ attached to Production Drift →
watching

watching → emerging → established

A candidate behavior, not yet a published pattern. Early signal — worth tracking, not yet worth standardizing on.

8 documented sightings since Aug 2024 — every one traces to a dated source.

See the evidence →
SEP 26 · Paper · via arXiv Agent-to-AgentInterruptionObservability

DocuTeam study lets 20 writers redirect AI helpers in a live document

The document becomes the record. A human stops one agent mid-discussion and the others keep going. That is the design move worth copying.

Read the source ↗ attached to Agent-to-Agent →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

20 documented sightings since Aug 2026 — every one traces to a dated source.

See the evidence →
SEP 26 · Paper · via arXiv Agent IdentityConfidence SignalingProgress

PUBG Ally shipped to 141 countries and measured what broke trust

Ally showed its next move before making it, and players gave it more room to act. Confidence-signaling changed the human's relationship to the agent, not the outcome. That gap is the design surface.

Read the source ↗ attached to Agent Identity →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

19 documented sightings since Feb 2026 — every one traces to a dated source.

See the evidence →
SEP 25 · Paper · via arXiv Agent IdentityHuman HandoffInterruption

Enterprise workers renegotiate their roles when agents join the team

The repair work was real labor, and none of it was visible in the product. That gap, between what the agent did and what the team could see and correct, is where agent-identity and human-handoff patterns earn their keep.

Read the source ↗ attached to Agent Identity →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

19 documented sightings since Feb 2026 — every one traces to a dated source.

See the evidence →
SEP 24 · Paper · via arXiv ApprovalBudget ScopingPermissions

1,248 GitHub agent specs show safety steps missing from most

The spec says what the agent does; it has no slot for what the human decides. Designers need to put budget, reach, and approval into the format itself, or teams will keep leaving them out.

Read the source ↗ attached to Approval →
established

watching → emerging → established

A stable convention across independent vendors. Safe to standardize on — deviating from it now carries cost.

48 documented sightings since Jun 2026 — every one traces to a dated source.

See the evidence →
SEP 22 · Paper · via arXiv ObservabilityProgressRecovery

Vibe-GUIDE gives developers a graph view of agent coding work

The graph view changed when developers chose to redirect the agent, not whether they could. That is the design lever: the shape of the work display shifts the timing of human judgment.

Read the source ↗ attached to Observability →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

46 documented sightings since Aug 2026 — every one traces to a dated source.

See the evidence →
SEP 22 · Paper · via arXiv InterruptionProgressRecovery

19 developers mapped the real work of supervising a coding agent

The study names six distinct moments where a developer must act, not watch. Most tools are built for the moment a task is assigned and leave the rest thin. That gap is where trust breaks.

Read the source ↗ attached to Interruption →
emerging

watching → emerging → established

Seen across products but the shape is still settling. Adopt with an exit: expect the anatomy to shift.

15 documented sightings since Mar 2026 — every one traces to a dated source.

See the evidence →
SEP 21 · Paper · via arXiv Budget ScopingContextDelegation

73 000 OpenClaw posts show humans shape what an agent may do

The setup screen is where humans decide what the agent is allowed to want. Most products treat it as logistics. This study, at 73k posts, says that is the wrong read of the moment.

Read the source ↗ attached to Budget Scoping →
watching

watching → emerging → established

A candidate behavior, not yet a published pattern. Early signal — worth tracking, not yet worth standardizing on.

14 documented sightings since Aug 2026 — every one traces to a dated source.

See the evidence →