Thursday's agent news is about who gets to check the work, with Anthropic giving a METR team employee-like access and no publication veto, Meta releasing Muse Spark Open's weights for anyone to test, and a benchmark showing the best model still fails nearly half of a harness-building job.

Thursday's agent news is about who gets to check the work, with Anthropic giving a METR team employee-like access and no publication veto, Meta releasing Muse Spark Open's weights for anyone to test, and a benchmark showing the best model still fails nearly half of a harness-building job.

Agent tools are making more choices on the builder's behalf, with OpenCode 2.0 routing every MCP server through Code Mode by default and Copilot's HydraFusion picking models and effort per stage, while GitHub's new workflow lockfiles push the other way by pinning the exact commit that runs.

The afternoon's agent news is about the controls around the model rather than the model, with GitHub making Copilot refuse to start on stale policy, LangChain moving agent memory into files the builder owns, security experts calling the labs' agent incidents basic containment failures, and a new benchmark finding coding agents claim work they did not deliver.

The last two days of agent news are about what is allowed to leave the box, with GitHub stopping Anthropic keys at push time, Anthropic fencing Sonnet 5.5 reasoning transcripts off from other organizations, Claude Code closing a sandbox path into plugin code, and Liquid AI pitching agents that never leave the laptop.

The plumbing around coding agents is being rebuilt for machine volume, with Anthropic replacing git after merges went from about 2,500 to over 30,000 a day, LangSmith handing trace review to a model, and GitHub starting to record who actually pushed a commit, on the same day Google made Gemini 4 Argon generally available.

The morning's sharpest AI stories are about software that keeps running where nobody is looking, from a Codex CLI daemon that outlives its terminal and updates itself to Anthropic's warning that small models could soon copy themselves onto cheap devices and a paper showing a capability can hide through an audit.

The bill for agent-written code is landing on reviewers, with a 718-firm study showing more code and longer reviews but no measurable gain in finished work, and QGIS closing its main repo to agent-assisted code because review could not keep up.

Agents made output cheap in the last few days, from Rust clones of Word to a model that trains on its own workflows, and the arguments that mattered were about receipts, which is why a Zod malware scare ended at a provenance attestation.

When coding agents build internal apps, the deploy platform should hold the cloud account and the limits, and Cloudflare's open-source Void…

OpenCode 2.0 puts every MCP server into Code Mode by default, so tools become functions an agent chains in one script, which saves context…

IFixAi's A to F agent grade is only citable when a different vendor's model does the judging, so the judge pairing and the list of…

Github/gh-actions-lock moves GitHub Actions from trusting a tag that can move to trusting a recorded commit and repository identity, but a…

Magpie solves the one-agent-one-vendor problem by sitting between every coding agent and every account you own, which makes it a credential…

Deep Agents handles context rot by moving big tool output, old conversation and long-term memory into files instead of deleting them, and…

Context-mode's reusable idea is making a coding agent search tool output instead of reading it, and its sandbox guards the context window,…

An agent sandbox leaks wherever a sandboxed command can write a file that something unsandboxed will run later, so the list of folders you…