1The Package-Registry Proxy Attack SurfaceA package proxy is the useful door in a sealed sandbox, and that is exactly why it deserves unusual security attention.Boundary I 2Zero-Days Found by a MachineA zero-day is an unknown security flaw with no patch, and machine-speed discovery changes the economics defenders have long relied on.Boundary I 3Black-Box Vulnerability DiscoveryBlack-box discovery finds flaws without source code, by probing a system from the outside and reasoning from its behavior.Boundary I 4Privilege Escalation and Lateral Movement, by an AgentA small foothold becomes serious when an AI agent can climb to higher access and move across systems without getting tired.Boundary I 5Autonomous Attack ChainingThe techniques are familiar; the new risk is a model that can choose, connect, and repeat them without a human operator.Boundary I