ai · security · skills
Why ReskillReskillAI MaturityHermes AgentLibrarySign in

The weekly signal

One thing that changed.And what to learn because of it.

A WhatsApp broadcast channel for people who defend things. One post a week: something that actually moved in AI security, and the one skill it just made more valuable.

Join the weekly signal on WhatsApp →

What arrives

  • The signal. What changed, in a sentence you can repeat to your team without reading it twice.

  • The consequence. The one thing worth learning because of it. No item runs without this; that rule is enforced before anything is published.

  • The link back. The full entry in the archive, where the source and what we did about it both live.

The last three

Not a sample. These are the most recent items the practice actually published, and they are the same ones the channel carries.

7 tracked · 6 this week

From the field · 13 Sep 2026

HBR analysis warns that enterprise AI tool usage creates IP leakage risk through employee interaction feedback loops, synthetic data reuse, and shadow AI accounts that bypass corporate security controls

Standard DLP controls designed for email and document exfiltration do not cover the novel leakage vectors introduced by conversational AI interfaces and model training feedback loops

From the practice · 13 Sep 2026

Forrester's AEGIS playbook and the Agent Airlock project both emphasize guardrails for intent, authority, and access when deploying AI agents at production scale

Agent authorization is emerging as a distinct security control domain separate from traditional IAM, requiring runtime policy enforcement that traditional access controls cannot provide

From the field · 13 Sep 2026

US lawmakers advance bipartisan kill-switch legislation requiring oversight mechanisms and shutdown capabilities for advanced AI systems, while Anthropic's CEO calls for industry-wide development coordination

Mandated shutdown capabilities for production AI systems are moving from policy discussion to legislative reality, creating a compliance obligation security teams will need to meet

What this is not

  • It broadcasts. You cannot post, and neither can anyone else, so it never becomes another group to mute.
  • Nobody sees your number, including me. A channel hides its audience from itself, which is why it was chosen over a group.
  • One post a week, not one a day. A daily rhythm is a treadmill, and the first missed morning makes the promise a lie.
  • Nothing is for sale here, and nothing will be. This is a research practice, and the channel is how the research travels.

One post a week. That is the whole commitment.

You can leave WhatsApp with one tap, and this page keeps showing the same three signals either way, so nothing here depends on you staying.