{
  "id": 18494765,
  "title": "Ten Projects, One Stack: Why the AAIF Consolidation Reframes the Security Question",
  "url": "https://urgent.news/2026/11/06/ten-projects-one-stack-why-the-aaif-consolidation-reframes-the",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-06T12:01:11.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/saaro_net/ten-projects-one-stack-why-the-aaif-consolidation-reframes-the-security-question-60l"
  },
  "original_language": "en",
  "account": "On October 22, 2026, the Agentic AI Foundation (AAIF) added four more projects, bringing the total to ten. The AAIF, founded in December 2025, now hosts projects covering every layer of an agent operation. The focus is on governance, with no emphasis on security. The Cloud Security Alliance (CSA) report from October 29, 2026, highlights that the AAIF addresses the governance issue but not the security problem. There are no maturity or security labels for the ten projects, and there is no foundation-wide baseline for security. The deletion of sessions at the protocol level in MCP revision may cause visibility loss for tooling. The instruction-carrying formats lack built-in verification of who wrote the instructions and have shown to have critical and security problems in public marketplaces. The gateway project, agentgateway, is a single point of failure as it routes and handles multiple protocols simultaneously. Teams should conduct an inventory of the ten projects in their environment, review AGENTS.md and skills, enforce policies on MCP and A2A traffic, and minimize privileges for agent code within isolation boundaries.",
  "summary": "On October 22, 2026, the Agentic AI Foundation (AAIF) added four more projects: Agent Skills (Anthropic), Open Responses (OpenAI), OpenEnv (Hugging Face), and OpenSandbox (Alibaba). The foundation, launched in December 2025 with three projects, now hosts ten after eleven months. Good for adopting teams – and a reason for a question that often gets overlooked: What does it mean when a large part…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}