Salesforce launches Koa Decisions, a decision model for Agentforce
Salesforce introduced Koa Decisions, a decision model fine-tuned from Google's Gemma that succeeds its Agentforce router, with a developer API promised later and no price. DigiCert says an internal system with customer identity documents sat on the public internet for more than 16 months, Trigger.dev published its full incident report, and Vercel Tracing is GA.
- Salesforce’s Koa Decisions, a decision model built on Google’s Gemma, is the next version of the router inside Agentforce; Salesforce’s paper reports 85.5% accuracy on its own routing benchmark, but there’s no price, public API or independent score yet.
- DigiCert says an internal system holding customer validation records, some with passports or driver’s licences, was reachable from the internet for more than 16 months, and an outside account read archived records from 27 June to 2 July. Certificates weren’t affected.
- Trigger.dev’s full incident report says the attacker got root API keys for environments belonging to 0.66% of its customers, exposing their environment variables; affected users should rotate every secret stored there.
- Vercel Tracing is generally available on all plans, with longer retention (14 days on Pro) and tracing on by default for new Next.js 16.5 projects.
Salesforce builds its own decision model
Salesforce introduced Koa Decisions on 6 November, a decision model that reads a request and a list of categories you define and picks one in a single step. Salesforce calls it the next version of HyperClassifier, the model that routes requests inside Agentforce, and built it by training Google’s open-weight Gemma, adding image and audio input. Measuring Agentforce routing, Salesforce says its decision model took about 26 milliseconds against about 1.4 seconds for a general-purpose LLM. Its team’s paper reports 85.5% accuracy on a production intent-routing benchmark and calls it competitive with Jev. Flows, Apex, prompt templates and “an API for developers” are planned, with no dates. Anyone with a free Trailhead account can try a demo. Salesforce gives no price, model size or licence.
Why it matters
Agentforce builders are the first to get it. Everyone else can only try the demo until the developer API ships.
A distribution play with no scoreboard
Hosted decision models already cost $0.01 to $0.24 per million input tokens, with public JevBench scores (see our decision models table and guide). Koa Decisions has only Salesforce’s own benchmark and no price, so it can’t be compared on equal terms yet. Expect it to spread through Salesforce accounts on bundling rather than benchmarks. A priced API with an independent score would show whether it can compete outside them.
DigiCert’s customer records sat on the open internet for over 16 months
DigiCert, a major certificate authority, says in a Mozilla incident report that a February 2025 migration put an internal business system on an internet-reachable network without a security review. The system archives information customers provide to prove their identity. A self-registration feature meant for other products let outsiders create read-only accounts without MFA, and an unauthorized account read a “small proportion” of archived records between 27 June and 2 July 2026. Most were business contact details. For a small minority, they included a passport, driver’s licence or utility bill. DigiCert filed the preliminary report on 20 October; The Register reported it on 6 November and says customer notification has begun.
Why it matters
DigiCert says no certificates were affected and the account couldn’t approve validations or issue certificates. If you ever sent DigiCert identity documents to validate your organisation, watch for its notice.
Trust rests on the numbers DigiCert hasn’t given
DigiCert hasn’t published how many customers were affected; a Bugzilla commenter has asked for numbers, and DigiCert offers summary statistics to root programs on request. Root programs judge CAs on disclosures like this, so the answers matter for anyone choosing a CA.
Trigger.dev’s attacker held root API keys
Trigger.dev’s full incident report on the 1 November attack says the attacker obtained root API keys for some customer environments, which give full access to their settings and environment variables. 0.66% of customers were affected. In some environments the attacker also listed runs, deployments and schedules, including run metadata and tags. Trigger.dev found no access to its production databases or dashboard accounts, and hasn’t disclosed the attack vector. Affected customers were emailed on 1 and 2 November and see a banner in the dashboard; their keys have been revoked. Webhook signing secrets weren’t exposed, and self-hosted deployments weren’t affected.
Why it matters
If you were notified, treat every credential in the listed environments as stolen: regenerate Trigger.dev keys, then rotate database passwords, third-party API keys and tokens with their providers.
Scoped keys should have been the default
Trigger.dev has now released IP allowlisting for scoped API keys and OIDC support. The incident is a case for short-lived, scoped credentials over long-lived root keys on any job platform.
Quick hits
- Vercel Tracing is generally available on all plans, with retention raised to 3 days on Hobby and 14 days on Pro and Enterprise. New projects on Next.js 16.5 or later with a Node.js function trace 100% of requests by default after their first successful build; opt out in Settings → Tracing.
- Vercel CLI can set new projects to expire with
vercel deploy --delete-project-after 1d(choices from1hto30d, for newly created projects only), handy for throwaway agent deployments; it needs CLI v65.12.0. - Cloudflare described post-quantum anonymous credentials to replace RSA-based Privacy Pass, with a reference implementation. It’s research: the schemes still need security proofs, and presenting a token takes 4.3 to 12 KB in its current numbers.
- Google Cloud’s Z4M is GA, a storage-optimized VM and bare-metal series with up to 168,000 GiB of local SSD, 192 vCPUs and 400 Gbps of RDMA networking, for AI data pipelines and parallel file systems.
- AWS now amortizes EC2 Capacity Blocks for ML in Cost Explorer and CUR 2.0, spreading the upfront GPU fee over the reservation and showing the cost of unused capacity.
- Zalando open-sourced Agentic Identity Broker (MIT), which gives agents scoped, revocable OAuth2 access to services such as GitHub and Linear without handing them users’ credentials; it’s in active development, and Zalando says it runs it in production for several MCP servers.