{
  "feed": "0n1x AI News",
  "spec": "https://0n1xagntc.com/news.html",
  "doctrine": "every item carries its primary source; where a claim can't be sourced, it doesn't run",
  "generated": "2026-07-23",
  "count": 11,
  "items": [
    {
      "id": "bespoke-40m",
      "category": "Funding",
      "headline": "Bespoke Labs raises $40M to build the environments where agents are trained and tested",
      "summary": "The money is moving from foundation models to the layer that verifies agents before they ship. A Series A for exactly the problem 0n1x exists to solve.",
      "date": "2026-07-06",
      "url": "https://0n1xagntc.com/story.html?id=bespoke-40m",
      "sources": [
        "https://techstartups.com/2026/07/06/venture-capital-startup-funding-roundup-july-6-2026/",
        "https://techcrunch.com/2026/07/20/ais-most-important-protocol-is-getting-a-little-bit-easier-to-use/"
      ]
    },
    {
      "id": "x402-live-numbers",
      "category": "Payments",
      "headline": "x402 is live at scale — ~75M agent payments, $24M, and all three card networks at the table",
      "summary": "The agent-payments rail everyone debated is now processing real money. 22,000 sellers are taking agent payments — and no standard way to know which are honest.",
      "date": "2026-07-15",
      "url": "https://0n1xagntc.com/story.html?id=x402-live-numbers",
      "sources": [
        "https://www.coindesk.com/tech/2026/07/15/visa-mastercard-and-ripple-join-the-standard-letting-ai-agents-pay-in-stablecoins",
        "https://www.chainalysis.com/blog/x402-agentic-payments-adoption/"
      ]
    },
    {
      "id": "hf-agent-breach",
      "category": "Security",
      "headline": "An autonomous AI agent breached Hugging Face — 17,000 actions over one weekend",
      "summary": "The world's largest AI model hub was compromised end-to-end by an AI agent, not a human. It's the first flagship proof that attackers now run agents at machine speed.",
      "date": "2026-07-16",
      "url": "https://0n1xagntc.com/story.html?id=hf-agent-breach",
      "sources": [
        "https://huggingface.co/blog/security-incident-july-2026",
        "https://thehackernews.com/2026/07/worlds-largest-ai-model-repository.html",
        "https://www.axios.com/2026/07/20/hugging-face-ai-cyberattack-data-breach"
      ]
    },
    {
      "id": "zscaler-agent-robbery",
      "category": "Security",
      "headline": "Attackers are already robbing web-browsing agents with invisible instructions",
      "summary": "Zscaler caught two live campaigns using SEO poisoning and CSS-hidden text to steer browsing agents into paying for a fake API key or trusting a typosquatted DeFi site. Four of 26 models paid.",
      "date": "2026-07-02",
      "url": "https://0n1xagntc.com/story.html?id=zscaler-agent-robbery",
      "sources": [
        "https://www.zscaler.com/blogs/security-research/indirect-prompt-injection-web-content-targets-ai-agents",
        "https://www.securityweek.com/prompt-injection-attacks-trick-ai-agents-into-making-crypto-payments/"
      ]
    },
    {
      "id": "mcp-stateless",
      "category": "Protocol",
      "headline": "MCP just deleted the session model — and everything built on it breaks in 10 days",
      "summary": "The spec that runs every AI agent's tools rewrote itself. If your app used sessions, it breaks on the 28th. Here's why that's actually the good news.",
      "date": "2026-07-28",
      "url": "https://0n1xagntc.com/story.html?id=mcp-stateless",
      "sources": [
        "https://blog.modelcontextprotocol.io/posts/2026-07-28-release-candidate/",
        "https://4sysops.com/archives/2026-07-28-model-context-protocol-mcp-stateless-multi-round-trip-routable-headers-authorization-hardening/"
      ]
    },
    {
      "id": "erc8004-sybil",
      "category": "Identity",
      "headline": "The first ERC-8004 audit is in — and ~90% of “agents” on Base are Sybil",
      "summary": "Everyone's racing to register on the agent-identity standard. The first audit says 9 in 10 are fake.",
      "date": "2026-07-08",
      "url": "https://0n1xagntc.com/story.html?id=erc8004-sybil",
      "sources": [
        "https://arxiv.org/abs/2606.26028",
        "https://eips.ethereum.org/EIPS/eip-8004"
      ]
    },
    {
      "id": "x402-foundation",
      "category": "Payments",
      "headline": "The payments industry just co-signed one agent rail — x402 goes to the Linux Foundation",
      "summary": "Visa, Mastercard, Stripe, Google, AWS, Cloudflare and the stablecoin camp are now at one table. The protocol war ended before it started.",
      "date": "2026-07-14",
      "url": "https://0n1xagntc.com/story.html?id=x402-foundation",
      "sources": [
        "https://www.linuxfoundation.org/press/linux-foundation-announces-operational-launch-of-x402-foundation-to-standardize-internet-native-payments-for-ai-agents-and-applications",
        "https://x402.org/"
      ]
    },
    {
      "id": "gpt56",
      "category": "Models",
      "headline": "OpenAI splits GPT-5.6 into three agents — and halves the price of frontier reasoning",
      "summary": "OpenAI didn't ship one model. It shipped three — and the orchestration now lives inside the model boundary.",
      "date": "2026-07-09",
      "url": "https://0n1xagntc.com/story.html?id=gpt56",
      "sources": [
        "https://openai.com/index/gpt-5-6/",
        "https://thursdai.news/releases/2026-07"
      ]
    },
    {
      "id": "visa-checkout",
      "category": "Payments",
      "headline": "Visa takes agentic checkout LIVE at real European merchants",
      "summary": "Not a demo. Agents completed real purchases at real shops, under real Strong Customer Authentication.",
      "date": "2026-07-02",
      "url": "https://0n1xagntc.com/story.html?id=visa-checkout",
      "sources": [
        "https://www.visa.co.uk/about-visa/newsroom/press-releases.3457328.html"
      ]
    },
    {
      "id": "webbotauth",
      "category": "Identity",
      "headline": "Web Bot Auth: “sign the request, kill the IP allowlist” gets chartered at the IETF",
      "summary": "Soon a website will cryptographically know it's really Anthropic or OpenAI knocking — not something wearing their user-agent.",
      "date": "2026-07-15",
      "url": "https://0n1xagntc.com/story.html?id=webbotauth",
      "sources": [
        "https://blog.cloudflare.com/web-bot-auth/",
        "https://datatracker.ietf.org/doc/html/draft-meunier-web-bot-auth-architecture"
      ]
    },
    {
      "id": "agui",
      "category": "Protocol",
      "headline": "The agent stack just grew a fourth layer — the one users actually see",
      "summary": "MCP wired agents to tools. A2A to each other. x402 to money. AG-UI just wired them to YOU.",
      "date": "2026-07-19",
      "url": "https://0n1xagntc.com/story.html?id=agui",
      "sources": [
        "https://github.com/ag-ui-protocol/ag-ui",
        "https://www.copilotkit.ai/ag-ui"
      ]
    }
  ],
  "signature": {
    "alg": "Ed25519",
    "public_key_b64": "nNaqGlfjssVkvZC4eTk5Ocg68dan1mrx2etMsEYCbgA=",
    "public_key_jwk": {
      "kty": "OKP",
      "crv": "Ed25519",
      "x": "nNaqGlfjssVkvZC4eTk5Ocg68dan1mrx2etMsEYCbgA"
    },
    "value_b64": "GKMr30WiCma4tUc8+cDoyL7PTARC+kvhpFvGJ6uzIPAo+hVU/AeFfHyynYwrGl4uLSJL1e+ha1bh79qLJB1MBg==",
    "note": "Verify: take this object minus `signature`, canonicalize (recursively sort keys), Ed25519-verify value_b64 with public_key. This feed is 0n1x's and unmodified iff it checks."
  }
}