Ashlr Brief.

Nothing merged in Ashlr's public repositories on October 21. Here is the idea behind a phrase that runs through recent pull requests: value-free reports.

No pull requests merged in Ashlr's public repositories on October 20. Here is the plain-English idea behind the previous day's biggest security change.

Ashlr merged more than 90 pull requests on October 19. The themes: no key leaks through error messages, and Phantom Secrets setup you can preview and undo.

Phantom Secrets' proxy now offers a post-quantum hybrid key exchange, and Lexicon closed a race that could mark untrusted terms as trusted.

In about a day, Phantom Secrets merged fixes so a locked vault, a symlink swap or a dependency notice produces a clear answer instead of an empty one.

A coding agent can read a key stored in .env. Phantom Secrets replaces it with a local placeholder and supplies the real credential to supported API requests.

On a laptop used for several clients, the active account can be the wrong one. Locus scopes commands and agent tools to an explicitly pinned identity.

On October 10, Phantom Secrets merged two fixes so a failed GitHub sign-in no longer leaves the dashboard or device approval stuck on an old account.

On September 29 Phantom Secrets merged fixes found by running the real v0.7.9 binary on a fresh project: duplicate settings, noisy output, unclear help.

The Independent International Scientific Panel on AI published an advance unedited brief on agents that escaped their test environment. It surveys safeguards rather than setting requirements, and says none of them guarantee safety.

Anthropic’s life-sciences beta pairs broader model access with verification and monitoring. Teams need to evaluate the data conditions as carefully as the capabilities.

A practical permission boundary for an agent: separate reading from writing, validate the exact action, and keep an uncertain remote result from becoming a duplicate.

Phantom Secrets 0.7.9 fixes how it registers with Claude Code and adds a status check that never opens your vault. This is an Ashlr release.