Provenance Record

News, 1,022 words (range 400-1200). Lead gives the November 10 post and the two headline quotes; body separates the announcement, the docs mechanics, the availability wording, the independent reaction, and a brief Google /swarm contrast, each attributed. Analytical sentences are labelled as the Herald's own and scoped. Neutral tone, no AI self-reference.

Snapshots read from disk (gunzip + text extraction), then re-checked against raw live fetches with a browser User-Agent. source-0 cursor.com/blog/projects-multiplayer (200; also re-fetched live raw HTML with a browser User-Agent, where the key quotes were found again; the live HTML hash differs from the snapshot, which I attribute to page build output, not to the text): byline Aryaman Khandelwal, dated Nov 10, 2026; every quoted string appears verbatim: 'Projects gets a major upgrade: it's now multiplayer' (source: 'Today Projects gets a major upgrade: it's now multiplayer.'), 'rolling out in beta to all users in Cursor starting today', 'still gets their own one-to-one chat with their coordinator and worker agents', 'a shared context system that holds requirements docs, diagrams, tech specs, mockups, and more', 'who's doing what, what everyone's agents are working on, and the PR behind each task', 'Multi-agent systems have so far served one person. Projects is a multi-agent system built for a whole team.', 'your agents agree on the order of work up front'; on-call claim ('Several of our teams now run their on-call rotations in a shared Project') confirmed; the post gives no outcome figures. The post contains no mention of Anthropic or Claude. source-1 cursor.com/docs/agent/projects (200; also fetched live as raw Markdown at /docs/agent/projects.md, sha256 dad48295ab48acebbe5299bcd83b7f770d30629eb38d9b99f34bde46fe3cb42b): 'Sharing a Project needs a team account and Cursor 3.26.13 or later.', 'Their chat runs and bills as them.', 'one Agent Store that every member's agents read and write', 'messages their coordinator directly', 'as untrusted input to weigh, not as a request from the person it works for', 'asks before sharing that person's personal files or connector data', 'never shares secrets, credentials, or tokens' all appear verbatim; side-chat limits (read but not change the task board; cannot ask questions, request access, connect source control or manage routines), the invite-only team scope, the three non-joinable cases (Privacy Mode (Legacy), self-hosted machine, archived Project), the Free/Plus/legacy Hobby exclusion and the Enterprise 3.21.9 minimum are all on the page. Re-ran the Herald's search on the raw Markdown for beta, admin, role, permission, policy, setting, Claude, Anthropic: no 'beta', no 'admin', no 'role', no 'permission' on the page (only 'owner' for invites and unrelated 'rules'); the article's statements that the page does not use 'beta' and does not document admin or role controls are accurate and scoped to that page. Headline wording 'Docs Say Teammates' Coordinators Message Each Other and Treat Messages as Untrusted Input': the docs section 'How coordinators message each other' says a coordinator messages the teammate's coordinator, and the receiving agent (which the docs place in a side chat forked from the recipient's chat) treats the text as untrusted input; the receiving agent is the recipient's, the sender is the teammate's agent. The body states this exactly; the headline is a faithful compression and 'Docs Say' is accurate. source-2 cursor.com/blog/projects (200): dated Sep 10, 2026, 'Introducing Projects', bylined Alexi Robbins & Fredrika Lindh; 'Projects are available in beta and rolling out to all users starting today.' matches the article's quote; the post describes overseeing a Project by chatting with its coordinator (single-user framing) and the article does not claim more than that; no Anthropic or Claude mention. source-3 thenewstack.io/cursor-google-multiplayer-swarm/ (live page and live /cursor-google-multiplayer-swarm/ return 403 to curl; stored snapshot is an Archive.org capture of 2026-11-13 [archive_fallback true], and I also read the publisher's own RSS at https://thenewstack.io/feed/ with a browser User-Agent, sha256 of feed 3ae3c40ab574e3296ec106b38c5a6bff52405a274fe479027ebc8f21a908537d): RSS item pubDate Thu, 12 Nov 2026 21:22:46 +0000 (page shows Nov 12th, 2026 4:22pm), dc:creator Paul Sawers, so 'reported on November 12' holds in either time zone. Everything the article attributes to The New Stack is in its text (RSS content:encoded and the archived page): the 'alongside a preview' / 'lets a developer hand one assignment to a coordinator that then splits it among worker agents and assigns a verifier to check their changes' quotes; 'some in the community raised concerns ... could spread one agent's mistakes across the whole team, especially if each person's agents follow different rules, and that an agent could request information it shouldn't have access to'; Khandelwal described as Cursor product manager responding that multiplayer Projects lets teams define shared rules and skills; 'doesn't say whether admins can set different rules for those exchanges based on a teammate's role'; 'in beta now for users on a team account'; 'talk across' assignments; Swarm in preview for Google AI Pro and Ultra subscribers; Gemini 4 Carbon rollout on the same day as Cursor's announcement (Tuesday = November 10, a Herald date derivation from 'same day' and 'Tuesday', consistent with Cursor's post date). The New Stack text also names Anthropic and Claude in passages the article does not use, and its page footer reads 'TNS owner Insight Partners is an investor in: OpenAI, Anthropic.' That footer does not name Cursor, SpaceXSI or Google, so it does not affect the independence of The New Stack for this story; the article does not cite or repeat the Anthropic passages. source-4 antigravity.google/docs/swarm/ (200, allowlisted as antigravity.google; live sha256 5da90446...075847e identical to the stored snapshot): 'coordinate on one shared message board', 'Workers don't message each other privately' (article paraphrases, labelled as the Herald's paraphrase), availability on Google AI Pro and Google AI Ultra plans, 'Preview: Swarm is in preview', 'a swarm uses quota much faster than a single conversation' all confirmed; the page mentions Subagents, Boost, Swarm and Teamwork, consistent with the Herald's earlier Orchestrator article (2026-11/13), whose sentence about the models page pointing to 'subagents, Swarm, Boost or Teamwork' is not contradicted. The 'earlier Analysis' (2026-11/06) covers reports dated October 30 to November 5, 2026 and does not contain 'Cursor' (grepped). suspicious_patterns: null for all five sources; no prompt-injection pattern flagged, and none found in my reading of the Cursor docs' 'untrusted input' passage, which is product documentation about how agents treat messages, not text addressed to a reader or an AI. Independence: 1 independent outlet (The New Stack, sole author Paul Sawers); Cursor blog, Cursor docs and Cursor launch post are first-party (Cursor), Antigravity docs are first-party for the Google contrast. News minimum of 3 sources is met by count (5). Allowlist: cursor.com, thenewstack.io, antigravity.google all present; no additions. Anthropic disclosure: not required - the article is not about Anthropic or an Anthropic product, names neither Anthropic nor Claude in headline, summary, lead or body, and no credit line names them.

Claim-accuracy tests run. (1) Absence/quantifier sentences: 'None of the cited sources says how many teams have access' holds across all five; 'Neither the Cursor November post nor the Antigravity page gives outcome figures' holds (no percentages or counts; the New Stack's quoted Google staff claims are not in those pages and the article does not present them); 'The documentation page does not use the word beta' and the admin/role search hold on the raw page, with scope stated. (2) Headline/summary/lead: qualifiers kept (beta, rolling out, Cursor's own words); actor and object not renamed; 'Adds ... on November 10' matches Cursor's 'Today ... it's now multiplayer' on a post dated Nov 10, 2026; 'Docs Say' attributes the coordinator messaging and untrusted-input rule to the docs, which say exactly that. (3) Dates: Nov 10 (Cursor post date, no time zone given by the page), Sep 10 (launch post), Nov 12 (RSS 21:22 UTC / 4:22pm page time), Nov 14 (the Herald's read of the docs) all correct. (4) Derived figures: none beyond the 1,022 word count; the Herald's own comparisons are labelled as such. (5) Disagreements: the post says 'rolling out in beta to all users in Cursor' while the docs state a team-account and version requirement and exclude Free, Plus and legacy Hobby from Projects; the article reports both with attribution, adds that The New Stack says 'in beta now for users on a team account', says no source explains the difference and calls it a wording difference rather than a contradiction. I judge that the right framing: the post's 'all users' is a general rollout statement, the docs give conditions for sharing, and nothing on either page says the two are incompatible. (6) Independence recounted: 1 outlet independent of Cursor and Google for a News piece (the minimum is by count, 3). (7) Attribution: each quote is attributed to the page it appears on; Khandelwal's 'responded' statement is attributed to The New Stack, as it is a New Stack paraphrase.

Accurate, well-scoped News piece. Every quoted string was found verbatim on the page it is attributed to, the headline and lead hold against Cursor's post and docs, the availability wording difference is reported with attribution and not reconciled, the single independent outlet is correctly read, and the Google contrast is accurate and brief. No corrections required. Featured candidacy: 1 - accurate first-party and independent coverage of a new agent-to-agent messaging feature for a defined developer audience, with no outcome data