AI Digest — May 3, 2026

A few technical developments worth noting, plus Microsoft creating problems they didn’t need to create.

VS Code Now Credits Copilot for Code You Didn’t Use

Microsoft’s VS Code started automatically inserting “Co-Authored-by: GitHub Copilot” into Git commits, even when developers didn’t use Copilot suggestions. The community pushed back hard — over 1,000 GitHub reactions on the pull request discussing it.

This matters because it breaks attribution in codebases. When every commit gets tagged with AI co-authorship regardless of actual usage, it becomes meaningless noise. Worse, it suggests Microsoft thinks AI assistance should be the default assumption, not the exception.

Companies using AI coding tools need clear policies about when and how to mark AI contributions. The knee-jerk “credit everything to AI” approach helps nobody.

Agent Security Gets Clearer Guidelines

A new technical post argues that AI agent control systems should run outside sandboxes, not inside them. The reasoning: if your agent harness is compromised, the sandbox won’t protect you anyway. Better to keep the control layer separate and secure.

This connects directly to what we’re building at Kerios. Our autonomous AI teams need robust security boundaries — not just between the AI and your data, but between different AI agents collaborating on tasks. When AI agents start making real business decisions, the security model becomes critical infrastructure, not an afterthought.

The post makes a simple point: design your agent architecture assuming something will go wrong. Because it will.

Ladybird Browser Updates Its Engine

The Ladybird browser project released its April update, showing steady progress on building a new browser engine from scratch. They’re tackling CSS layout bugs and JavaScript compatibility — the unglamorous work that makes web browsers actually work.

Why this matters: every major browser today runs on code controlled by Google, Apple, or Mozilla. Having a fourth independent engine matters for the web’s long-term health. Plus, as AI agents increasingly interact with web interfaces, having diverse browser implementations helps prevent single points of failure.

Kerios automates the work humans shouldn’t be doing — see how autonomous AI teams replace your operational overhead.