MCP Gets a Major Overhaul and AWS Puts It in Production

The MCP specification just got its biggest revision since launch — stateless by default, hardened authorization, a governed extensions system — and AWS is already shipping it into production infrastructure. Meanwhile, Simon Willison is sounding alarms about a real AI agent security incident from this week, and Dario Amodei made a notable public call on open-weight model policy that has direct implications for how product teams think about model sourcing risk.