The Signals Shaping Technology Today

Executive signal:

Microsoft is turning Foundry into a production AI platform, not just a model catalog: GPT-5.6 tiers, APAC data residency, hosted agents, and M365 distribution are now bundled together.
AI policy risk is shifting from "open vs. closed" toward chips, distillation, and frontier-control rules; Anthropic is explicitly rejecting blanket open-weights bans.
Practical security signal remains urgent: CISA added FortiOS and VeloCloud KEVs for active exploitation, while GitHub made a 3-day Dependabot cooldown the default to reduce poisoned-package adoption.

Title: Microsoft Foundry bundles models, hosted agents, and APAC data residency into GA platform features

Signal level: High

Action: Read

Source: https://azure.microsoft.com/en-us/blog/gpt-5-6-now-available-in-microsoft-foundry/

Title: Anthropic rejects blanket bans on open-weights models

Signal level: High

Action: Save

Source: https://www.anthropic.com/news/position-open-weights-models

Title: Active-exploitation pressure stays on network edge and software supply chain

Signal level: High

Action: Ask Sam

Source: https://www.cisa.gov/news-events/alerts/2026/07/27/cisa-adds-two-known-exploited-vulnerabilities-catalog

Fact: Anthropic says it has never advocated a ban on open-weights models and calls non-dangerous open-weights releases a public good; it instead supports chip controls and action against industrial-scale distillation.
Fact: NVIDIA’s NOOA write-up argues agent harness design alone can materially change benchmark performance and token cost, emphasizing typed I/O, pass-by-reference state, code-as-action, and model-callable harness APIs.

Fact: Microsoft says Foundry now has GPT-5.6 Sol / Terra / Luna, the Asia-Pacific Data Zone, and hosted agents generally available, with published Foundry pricing of USD 5 / 30, USD 2.50 / 15, and USD 1 / 6 per million input/output tokens respectively.

Fact: CISA added CVE-2025-68686 (Fortinet FortiOS) and CVE-2026-16812 (Arista VeloCloud Orchestrator On-Prem) to the KEV catalog because of active exploitation evidence.
Fact: The Hacker News reports GitHub added a 3-day Dependabot cooldown before version-update PRs open for newly released packages; verified against GitHub’s official changelog, which says security updates still open immediately.
- https://thehackernews.com/2026/07/github-adds-3-day-dependabot-cooldown.html
- https://github.blog/changelog/2026-07-14-dependabot-version-updates-introduce-default-package-cooldown

Saved to ResearcherWiki:
- raw/articles/azure-foundry-gpt-5-6-2026-07-09.md
- raw/articles/anthropic-open-weights-position-2026-07-27.md
- raw/articles/nvidia-nooa-agent-harness-2026-07-27.md
- raw/articles/cisa-kev-fortios-velocloud-2026-07-27.md
- raw/articles/github-dependabot-default-package-cooldown-2026-07-14.md
- Updated concepts/ai-agents.md, concepts/azure-cloud-operations.md, concepts/cybersecurity-watch.md, and index.md
Candidates not yet saved: Belarus online-gambling controls, gaming-stocks weekly structure shift, and Sands China Q2 softness.

The local market helper script failed because yfinance is missing from its runtime; I used uv run --with yfinance as a workaround. Sam should repair the researcher profile’s market-helper environment so the cron is self-contained.
Decide whether to archive the gaming-sector items (Belarus controls, DraftKings/prediction-market share shift, Sands China softness) into the wiki on the next pass.