The afternoon's agent news is about the controls around the model rather than the model, with GitHub making Copilot refuse to start on stale policy, LangChain moving agent memory into files the builder owns, security experts calling the labs' agent incidents basic containment failures, and a new benchmark finding coding agents claim work they did not deliver.

The afternoon's agent news is about the controls around the model rather than the model, with GitHub making Copilot refuse to start on stale policy, LangChain moving agent memory into files the builder owns, security experts calling the labs' agent incidents basic containment failures, and a new benchmark finding coding agents claim work they did not deliver.

The last two days of agent news are about what is allowed to leave the box, with GitHub stopping Anthropic keys at push time, Anthropic fencing Sonnet 5.5 reasoning transcripts off from other organizations, Claude Code closing a sandbox path into plugin code, and Liquid AI pitching agents that never leave the laptop.

The plumbing around coding agents is being rebuilt for machine volume, with Anthropic replacing git after merges went from about 2,500 to over 30,000 a day, LangSmith handing trace review to a model, and GitHub starting to record who actually pushed a commit, on the same day Google made Gemini 4 Argon generally available.

The morning's sharpest AI stories are about software that keeps running where nobody is looking, from a Codex CLI daemon that outlives its terminal and updates itself to Anthropic's warning that small models could soon copy themselves onto cheap devices and a paper showing a capability can hide through an audit.

The bill for agent-written code is landing on reviewers, with a 718-firm study showing more code and longer reviews but no measurable gain in finished work, and QGIS closing its main repo to agent-assisted code because review could not keep up.

Agents made output cheap in the last few days, from Rust clones of Word to a model that trains on its own workflows, and the arguments that mattered were about receipts, which is why a Zod malware scare ended at a provenance attestation.

Between October 8 and 11, an essay on a Rust port of Campfire its critic says an agent wrote and Hugging Face's ML Intern writeup showed agent output drifting wherever requirements went unwritten, while a paid README test showed humans still find gaps that a model-simulated user would not.

Between October 9 and 11, a game decompilation writeup and a unikernel essay showed agent output becoming trustworthy only when checked against a ground truth the agent could not edit, a DIY decision model showed raw confidence failing the same test, and AI-built browser game ports spread with no check at all.

Magpie solves the one-agent-one-vendor problem by sitting between every coding agent and every account you own, which makes it a credential…

Deep Agents handles context rot by moving big tool output, old conversation and long-term memory into files instead of deleting them, and…

Context-mode's reusable idea is making a coding agent search tool output instead of reading it, and its sandbox guards the context window,…

An agent sandbox leaks wherever a sandboxed command can write a file that something unsandboxed will run later, so the list of folders you…

Janas shows that for mixture-of-experts models the spec deciding what runs locally is shifting from RAM to SSD read speed plus a cache of…

God's Eye View's MIT license covers only its code while its bundled and live data carry non-commercial, share-alike and proprietary terms,…

Coding agents move the first bottleneck from writing code to the source control and CI built for human pace, and git's own partial clone,…

Codex CLI 0.157.0 turned an interactive coding agent into a resident background service that outlives its terminal and updates itself, so…