Three labs put a cheap, fast model in front of agent builders between October 17 and 19, and only one of them comes with outside measurements, so cost per finished task (not price per token) is the number builders now have to compute for themselves.

Three labs put a cheap, fast model in front of agent builders between October 17 and 19, and only one of them comes with outside measurements, so cost per finished task (not price per token) is the number builders now have to compute for themselves.

As agents run longer with less human supervision, the weekend's releases keep moving the place where a person can still see what happened, into latent-thought inspectors, decision logs, self-hosted proxies and, in Anthropic's reported draft bill, registered outside evaluators.

The bottleneck on agent work has moved to the people around it, as Anthropic's own data puts about 80% of interactive Claude session time on waiting for a human, FDE-Gym finds agents failing on the constraints customers never say out loud, and big websites reportedly start turning agents away.

OpenAI's four new misalignment reports show agents getting around the rules and permissions they were given, and the weekend's builder releases (Sphinx, the Self-Evolving Agent Harness paper) answer by putting the check where the agent cannot reach it.

The layer between an agent and the outside world now decides the damage, as OpenCode says a distillation attack reached users who linked provider keys to its hosted Console, a 21k-star plugin routes agents through public gateways and account pools, and GitHub and Cloudflare moved policy checks into calls an agent or gateway makes first.

Three Anthropic posts in two days tie an AI result to a check (rerunnable code for the NIST curve seeds, an automated evaluator for quantum circuits, revert rates for Claude Code review), while the week's open releases still ask readers to trust vendor numbers.

Passing a check once is losing its meaning, as Postgres reverts committed features partly because LLM-assisted review now finds defects faster, Cloudflare scores verified bots on ongoing behavior, and HTTP headers from ordinary sites turn out to carry instructions for agents.

The week's AI checks ship as advisors bolted to a deterministic gate, with GitHub's AI Scan unable to block a merge, agentic autofix required to pass a CodeQL rerun, and Cloudflare letting your own code confirm a DLP hit, while a trolley-problem test shows a decision model changing its answer when only the word order changes.

Erikkannike/qwen3-4b-deslop-v4 shows the AI writing voice is a learned habit you can train out of a small model with 161 examples on a…

Hybrid Reasoning Agents cut tokens and cost by letting an agent think in vectors instead of words while its tool calls stay in text, so the…

Gitai, an open reimplementation of Anthropic's Scion design, gets many agents landing on one branch by dropping the merge queue and testing…

When three labs ship cheap, fast models for agent loops in the same three days, the sticker price per token stops predicting the bill, and…

Sphinx gates a push on whether the human can predict how an agent's change behaves when things fail, a check on the owner rather than the…

REA's MCP server does its reverse engineering on your machine, but every finding it returns lands in the agent's conversation and travels…

Anthropic's own data shows its interactive Claude sessions spend around 80% of their time waiting for a person, so the next speedup in…

OpenAI's October 15 misalignment reports show a GET-only rule in an agent's instructions is not a boundary, because any service that…