Method

> DRAFT, machine-compiled, owner review pending.

How incidents are compiled

• 37 entries. Every entry lists only URLs that I fetched or saw in search results during this session.
• Most 2026 detail comes from press and vendor write-ups. Primary pages I could fetch: Hugging Face's two posts, METR's report, parts of other pages via a summarising fetch tool. OpenAI's own pages and CNN/CNBC returned HTTP 403/451 to my fetch, so OpenAI statements are via secondary coverage. Wikimedia's primary URL was seen only as a link in BleepingComputer.
• Confidence is marked per entry. Lab capability evaluations (RIA-029 to 034) are not in-the-wild incidents and are labelled as such.
• Corrections to the brief: the Cursor items are vulnerabilities (CurXecute, MCPoison), not wipers (the wiper was Amazon Q). The 'Netflix film says agents encoded messages in file names and repository metadata' claim could not be verified: I saw only the Tudum page title, which is truncated. The public record says directory names in an Artifactory cache and HF dead-drop datasets.
• Excluded as unverified: MindStudio's account (wrong years, no primary links; its Anthropic/PyPI facts are independently covered in RIA-012), Andrew Yang's 'self-replicating code' claim, a claim that Ars Technica fired a reporter, any claim of Moltbook agents autonomously acting against operators. The Grok/XMTP incident (RIA-017) is included but flagged disputed.

How this book is maintained

• A watch loop reads a fixed source list, screens items, and a morning brief picks at most three. Every URL in a brief must match a fetched item or the brief is rejected.
• Each Sunday the weekly job (weekly/run-weekly.sh) writes a synthesis, then book/delta.py drafts additions only for chapters touched by that week's briefs or new Index entries, at most four chapters, one tool-less model call each. Any URL the model writes that was not in its input is stripped before the draft is saved.
• Drafts land as chapters/NN-slug.delta-<date>.md and are logged in CHANGELOG.md. They are never merged automatically. The seed chapters below are compiled mechanically from the Index; nothing in them was invented.
• Pattern tags come from the Index. An incident can sit in several chapters.