Archive ◆BRAID DAILY
OpenCode Console breach exposes stored provider keys
Subscribe

◆ Braid Daily · 2026-10-18

OpenCode Console breach exposes stored provider keys

Rotate keys saved in OpenCode Console. Plus workshops on agent verification and authorization, and new AI infrastructure figures.

A signal-yellow key floats outside an open compartment in a dark graphite interior.

The lead

1

OpenCode says a breach affected about 1.4% of Console users and exposed stored provider API keys. If you saved a provider key there, rotate it and check its usage and billing; details of the incident are still developing.

Read source

How agents prove their work

3

Agent permissions and the people around them

2

Authorize each tool call against the agent's mission

AI Engineer · 43m25s

A panel examines runtime authorization built around a persistent objective, deterministic policy limits, and a supervising agent. It addresses how enterprises can grant contextual permissions without requiring approval for every action.

Read source

New figures on AI infrastructure financing

3

Collateral changes the debt comparison

Jeff Davies · X

Jeff Davies distinguishes CoreWeave's unsecured borrowing from debt secured by GPUs, which he says prices lower. That distinction limits comparisons based on a single bond yield.

Read source

Bernstein puts credible US data-center plans at about 35%

Financial Times via Techmeme

The Financial Times cites RegLayer's count of at least 47 large US data-center projects delayed, withdrawn, or blocked this year. It also reports Bernstein's estimate that about 35% of the planned pipeline is credible; the original is paywalled.

Read source

Search tools and models closer to the user

3

Companion episode

OpenCode says attackers reached stored provider keys, and Anthropic reports its own hiring shift

· 00:18:39