Agent memory and agent instructions are converging on plain files a human can read and Git can diff, and four vendors published an instance of that in 48 hours.

Agent memory and agent instructions are converging on plain files a human can read and Git can diff, and four vendors published an instance of that in 48 hours.

The layer between the model and the task, the harness and the handoff artifacts it writes, is where this week's cost and risk numbers landed, from a doubled bill for the same success rate to compaction summaries that carry instructions nobody wrote.

The day's launches stopped asking whether an agent can do the task and started asking whether it will do it again, so the new products are measurements of repeatability and deterministic rails around the model rather than smarter models.

Tuesday's launches from Cloudflare, Anthropic, and TypeSafe all replace an all-or-nothing switch with a typed, scoped control, while the day's security story shows the old switches still leaking.

The same week the labs escalated the story that agents are becoming dangerous threat actors, three independent outside reads pushed back, and the gap between the catastrophe framing and the agents you can actually observe got wide enough to see through.

Supervision of agents is leaving the prompt and becoming a separate runtime component with its own veto, whether that is a per-command network allowlist, a guard model trained on execution events, or a validating agent that is never the one that found the bug.

Four desktop and OS vendors shipped in five days, and every one of them kept the harness and made the model the swappable part.

The product shipping this weekend was the workspace around the model, its files, memory, tools and provenance, and not the model itself.

A specialist agent is usually a SKILL.md and three tools wearing a model, and Microsoft's own trace shows that removing the model halves…

PRAXIST's license borrows the Fair Source name, drops the delayed open-source publication that fair.io's definition requires, and adds a…

Harness choice is a cost decision that has been sold as a feature decision, and HarnessTax shows the cheapest place to measure it is the…

Funes bets that coding-agent memory should be a rebuildable index of verbatim transcript passages rather than model-written summaries, and…

Most decisions inside an agent loop are enums, and a model that returns typed probabilities instead of text turns the hallucinated tool…

This week's scoped-token launches govern credentials minted from now on, but the credential that gets you was baked into a container's…

Open Code Review's value is the deterministic layer that fences the LLM into writing comments, and its self-run benchmark, lower recall by…

An agent's average pass rate hides a consistency gap caused by near-tied token decisions flipping under platform noise, so the metric to…