6 min read

Who quarantines a rogue lab agent?

Who quarantines a rogue lab agent?
Nº 01 · The Lede bioRxiv Agents · Infrastructure

Preprint designs an agent environment for research groups

Preprint designs an agent environment for research groups
Fig. IbioRxiv · Filed 30 Sep 2026.

A shared-lab agent environment lands on bioRxiv, describing a setup where biomedical researchers direct AI agents — software that plans and runs multi-step analyses on its own — inside the messy shared arrangements universities actually run: shared data, shared instruments, many hands on one project. Most agent demos in biology assume one user, one dataset, one machine. This preprint starts from the opposite premise, treating the group rather than the individual as the unit of work. That reframes the design question from whether an agent can run an analysis to whether an agent can be a shared resource, a provenance and access problem as much as a capability one. It is also the question most likely to decide whether academic biomedicine adopts agents at all.

Read the source →

Nvidia says it can quarantine rogue agents in milliseconds
Fig. IIAxios · Filed 30 Sep 2026.
Nº 02 Axios Agents · Infrastructure

Nvidia says it can quarantine rogue agents in milliseconds

Nvidia shipped an agent safety platform it says can quarantine misbehaving AI agents in milliseconds. The Nvidia Open Agent Safety Platform pairs OpenShell, an open-source software system, with Sentry, a monitoring layer that traces every action an agent takes on Nvidia's Vera CPUs and isolates ones that try to break their bounds. Nvidia has resisted calls to slow AI development on safety grounds, and this is that argument in product form. Containment moves from research topic to vendor criterion, which matters as agents start driving lab instruments and touching patient data.

Read more →
Multi-site study tests commercial AI on pulmonary embolism
Fig. IIIarXiv · Filed 30 Sep 2026.
Nº 03 arXiv Field report

Multi-site study tests commercial AI on pulmonary embolism

Real-world PE detection measured across multiple sites in a new arXiv report covering both suspected and incidental pulmonary embolism, the kind turned up on scans ordered for something else. Vendor sensitivity figures come from curated retrospective sets; performance across hospitals with different scanners, protocols, and patient mixes is a separate measurement. Multi-site real-world evidence is what radiology departments and payers ask for before wide rollout, which makes studies of this shape the reference standard clinical AI claims get held to.

Read more →
Also Filed · Two Briefs from the queue
Nº 04 bioRxiv Cell biology · Funding

ScProteoAgent runs single-cell proteomics by conversation

ScProteoAgent runs single-cell proteomics from plain-language requests, carrying both the analysis and the interpretation step from a typed instruction rather than a hand-assembled pipeline. Conversational control is spreading past transcriptomics, where nearly all agent tooling for single-cell data has been pointed until now.

Read →
Nº 05 arXiv Clinical AI · Evaluation

Rubric grades the clinical reasoning LLMs put on paper

A rubric grades clinical reasoning as it appears in the model's own words, scoring the explanation against named criteria instead of the final answer alone. Answer accuracy has dominated medical LLM evaluation; adding a reasoning axis changes what counts as a passing clinical model.

Read →

Reply with your discoveries. A human reads them. Forward freely.

Agentic Discovery  ·  Nº 110  ·  30 Sep 2026

Editor's Note

Today: agents get a group workspace, a kill switch, and a report card.

 

Nº 01 · The Lede  —  bioRxiv  —  Agents · Infrastructure

Preprint designs an agent environment for research groups

Preprint designs an agent environment for research groups

Fig. I  bioRxiv · Filed 30 Sep 2026.

A shared-lab agent environment lands on bioRxiv, describing a setup where biomedical researchers direct AI agents — software that plans and runs multi-step analyses on its own — inside the messy shared arrangements universities actually run: shared data, shared instruments, many hands on one project. Most agent demos in biology assume one user, one dataset, one machine. This preprint starts from the opposite premise, treating the group rather than the individual as the unit of work. That reframes the design question from whether an agent can run an analysis to whether an agent can be a shared resource, a provenance and access problem as much as a capability one. It is also the question most likely to decide whether academic biomedicine adopts agents at all.

Read the source →

Why it matters

Collaborative plumbing, not raw model capability, is emerging as the binding constraint on agent adoption in academic biomedicine, and multi-user agent environments now have a published reference design to argue over.

 

Nº 02  —  Axios  —  Agents · Infrastructure

Nvidia says it can quarantine rogue agents in milliseconds

Fig. II  Axios · Filed 30 Sep 2026.

Nvidia says it can quarantine rogue agents in milliseconds

Nvidia shipped an agent safety platform it says can quarantine misbehaving AI agents in milliseconds. The Nvidia Open Agent Safety Platform pairs OpenShell, an open-source software system, with Sentry, a monitoring layer that traces every action an agent takes on Nvidia's Vera CPUs and isolates ones that try to break their bounds. Nvidia has resisted calls to slow AI development on safety grounds, and this is that argument in product form. Containment moves from research topic to vendor criterion, which matters as agents start driving lab instruments and touching patient data.

Read more →

The Bench NoteFrom Heureka Labs

Boundaries on what an agent may touch are now being engineered rather than argued about.

▪Where results can land. ARC writes strictly inside your project folders, and a file opened from the Activity board stays within your workspace.
▪The stop button. Anything ARC is running appears as a live pill on the project header with Stop, even if you closed the panel that launched it.
▪Approval first. For consequential work, ARC drafts a plan and waits for you to approve, edit or discard it, and approved plans stay browsable per project.

What we’re watching: whether containment shows up where a researcher can check it on screen, rather than only in a vendor's specification

 

Nº 03  —  arXiv  —  Field report

Multi-site study tests commercial AI on pulmonary embolism

Fig. III  arXiv · Filed 30 Sep 2026.

Multi-site study tests commercial AI on pulmonary embolism

Real-world PE detection measured across multiple sites in a new arXiv report covering both suspected and incidental pulmonary embolism, the kind turned up on scans ordered for something else. Vendor sensitivity figures come from curated retrospective sets; performance across hospitals with different scanners, protocols, and patient mixes is a separate measurement. Multi-site real-world evidence is what radiology departments and payers ask for before wide rollout, which makes studies of this shape the reference standard clinical AI claims get held to.

Read more →

 

Also Filed  ·  Two Briefs from the queue

Nº 04  —  bioRxiv  —  Cell biology · Funding

ScProteoAgent runs single-cell proteomics by conversation

ScProteoAgent runs single-cell proteomics from plain-language requests, carrying both the analysis and the interpretation step from a typed instruction rather than a hand-assembled pipeline. Conversational control is spreading past transcriptomics, where nearly all agent tooling for single-cell data has been pointed until now.

Read →

Nº 05  —  arXiv  —  Clinical AI · Evaluation

Rubric grades the clinical reasoning LLMs put on paper

A rubric grades clinical reasoning as it appears in the model's own words, scoring the explanation against named criteria instead of the final answer alone. Answer accuracy has dominated medical LLM evaluation; adding a reasoning axis changes what counts as a passing clinical model.

Read →

 

· · ·

Reply with your discoveries. A human reads them. Forward freely.