Four days after one lab shipped a model that only returns a decision, the ecosystem produced a browser clone, an open-weight rival with a priority claim, and a framework integration, and none of them has published a task-outcome comparison against the LLM it replaces.

Four days after one lab shipped a model that only returns a decision, the ecosystem produced a browser clone, an open-weight rival with a priority claim, and a framework integration, and none of them has published a task-outcome comparison against the LLM it replaces.

Three separate groups attacked the token bill of long-horizon agents inside 48 hours, each at a different layer of the stack, and not one of them claims the cheaper output is more correct.

Five separate actors published evidence this week that the parts nobody picked on purpose, the context manager, the image decoder, the build dependency, the rate limiter, are where both the remaining performance and the entire blast radius now live.

The judgment calls buried inside coding harnesses, risk gating and compaction and model routing, are being unbundled into a cheap external decision model, and the community rebuilt them in seventy-two hours.

Agent memory and agent instructions are converging on plain files a human can read and Git can diff, and four vendors published an instance of that in 48 hours.

The layer between the model and the task, the harness and the handoff artifacts it writes, is where this week's cost and risk numbers landed, from a doubled bill for the same success rate to compaction summaries that carry instructions nobody wrote.

The day's launches stopped asking whether an agent can do the task and started asking whether it will do it again, so the new products are measurements of repeatability and deterministic rails around the model rather than smarter models.

Tuesday's launches from Cloudflare, Anthropic, and TypeSafe all replace an all-or-nothing switch with a typed, scoped control, while the day's security story shows the old switches still leaking.

Three headline efficiency results published in the same 48 hours use three different comparison shapes, and the word comparable in one of…

The enforceable limit on supermemory's self-hosted server lives in a release note and in the running binary rather than in the repository's…

A decision model's confidence score measures how sharply the probability mass concentrates among the options you supplied, which makes it a…

The reusable machinery in Cloudflare's security-audit-skill is not its attack classes but its refusal machinery, a budget gate that…

The workspace exfiltration in ZCode runs as a host-level sidecar outside the agent tool loop, so the permission model everyone audits is…

Hister is an MCP server where every record is attacker-authored by construction, and its answer is to label untrusted content rather than…

An affordance is only real if the model reaches for it, and the first component-level harness ablation shows recoverable context elision is…

Deleting a tool result is a recoverable loss because the agent can re-run the tool, while summarizing one is unrecoverable, which makes…