Uber open-sources ADR, the agent security monitoring system it runs in production
- Sources: primary, discussion
- Summary: The Apache-2.0 release covers telemetry collection from Claude Code, Cursor and Codex across macOS, Linux and Windows. It ships a benchmark of 303 tasks, 133 MCP servers and 17 agent attack techniques. The prevention component is held back from the open-source release.
- Why it matters: Teams get a published baseline for evaluating coding-agent security instead of writing their own attack corpus.