KDCube

Cisco Arms Agent Red Teams as Open Protocols Take Over the IDE

Cisco wired Anthropic's Claude Mythos into AI Defense for agent red teaming and gave Splunk a Tokenomics surface that links AI spend to output quality, pushing governance into the runtime. Meanwhile open protocols surged: Android Studio Rabbit 2 now hosts 40+ coding agents over ACP, and Google's

Highlights

  • Cisco wired Anthropic's Claude Mythos into AI Defense for frontier red teaming of agents, and gave Splunk a "Tokenomics" surface that ties AI spend to output quality — governance is becoming an always-on runtime loop (Cisco/PR Newswire)
  • Android Studio Rabbit 2 now hosts 40+ coding agents — Claude Agent, OpenAI Codex, Google Antigravity — through the open Agent Client Protocol (ACP), making agent interop an IDE default, not a bet on one vendor (Android Developers)
  • Google shipped ADK 2.14.0, graduating 42 components — execution environments, A2A, evaluation, and core runtime — out of experimental, plus a Microsoft Teams runner (google/adk-python)
  • Expo co-founder Charlie Cheever previewed and open-sourced Exact, an "agent-native" cross-platform app framework in Rust (MIT), aimed at letting agents build/run/test from one contract source (AICoder)

Key Signals

  1. Cisco turns agent security into tooling, not advice Nov 10, 2026

    AI Defense's Claude Mythos red teaming generates multi-step contextual attack paths — gated to registered targets with audit trails and named-operator attribution — while Splunk's Evaluation Tuner (GA this month) converts agentic traces into fine-tuned evaluator models for real-time control. Tokenomics cost-to-quality governance enters private preview December 2026, GA early 2027 on AWS Marketplace (Cisco/PR Newswire). For operators, the agent control plane is consolidating observability, evaluation, and budget into one plane.

  2. ACP is becoming the IDE's agent bus Rabbit 2, stable late Oct → active Nov rollout

    BYOA runs local agents as editor subprocesses over JSON-RPC/stdio, passing the full project graph, build diagnostics, and emulator controls to whichever agent you plug in (Android Developers). Paired with A2A going stable in ADK 2.14 — adk generate_agent_card now builds agent cards from the CLI (google/adk-python) — the integration substrate is standardizing on open protocols rather than proprietary SDKs. This extends the Agent Client Protocol thread from the Nov 9 issue into a concrete, multi-vendor surface.

  3. Copilot's cloud agents keep spreading across surfaces GitHub Changelog, week of Nov 2

    Cloud sessions now accept image files as context, JetBrains Air can run tasks locally or in the cloud via Air Teams, and Xcode's Copilot assistant entered public preview — cloud-backed agent work increasingly follows the developer between editors (GitHub Changelog).

Why It Matters / What To Watch

  1. Governance is moving into the runtime, not bolted on after.
    • Track Splunk Tokenomics from private preview (Dec 2026) to GA (early 2027) — cost-linked-to-quality is the metric operators have lacked for agent fleets (Cisco/PR Newswire).
    • Watch whether red teaming with named-operator attribution and audit trails becomes a procurement requirement for agentic deployments (Cisco/PR Newswire).
  2. Bet on protocols, not harnesses.
    • If ACP and A2A keep graduating to stable, portability — swapping agents without rewiring the IDE or orchestration layer — becomes realistic; test your stack against generate_agent_card and ACP registries now (Android Developers, google/adk-python).
    • Note ADK 2.14's breaking changes before upgrading, and that the release quietly closed a prompt-injection hole — pin and re-test eval suites (google/adk-python).
  3. Agent-native frameworks are a new category to watch.
    • Exact's premise — one contract source agents can build, run, and test across web/iOS/macOS/Linux — signals app frameworks designed for agent authorship, not just agent assistance; early and MIT-licensed, so worth a look but not production-ready (AICoder).

Quick Links