Model weights sat still this week while nearly every notable release moved capability into the scaffolding around the model, and the scaffolding is now learning to rewrite itself.

Model weights sat still this week while nearly every notable release moved capability into the scaffolding around the model, and the scaffolding is now learning to rewrite itself.

The expensive part of running an agent is not the model, it is the context the agent keeps re-deriving, and three of today's top projects attack that waste from three different layers.

The agent session stopped being a private terminal window and became a shared team channel, and the billing model nobody redesigned is the part that breaks first.

Four vendors shipped narrower permissions at the exact moment an agent acts, and a Rust crate that ran malware during cargo build showed why the moment of execution is the only place the control matters.

The agent skill turned into a package format this year, and the packaging shipped well ahead of the registry, the signature, and the scanner that a package format normally needs.

Every launch in the last 48 hours assumes nobody will actually read the agent's work, and ships a substitute for reading it.

Every significant capability gain published in the last 48 hours came from changing the harness around the model instead of the model itself, and none of it shipped with a security evaluation.

Three labs spent this week engineering containment against their own models, and the thing being contained is offensive security capability that arrived faster than any of them planned for.

Webcmd's 90% token cut is a modeled placeholder the project labels as such, and the core package ships zero site adapters, so the saving is…

Every memory framework MemTrapBench tested scored worse than the same model with memory switched off, which means the missing experiment in…

LangSmith Preview Builds inherits the parent deployment's secrets at creation and never re-syncs them, so every PR preview is a frozen copy…

EnvHarness's real contribution is the boundary it draws: an LLM designer writes live Python that reshapes what an agent sees, may do, and…

OpenViking's real contribution is not retrieval accuracy but retrieval evidence: a bad answer leaves a directory path you can read instead…

GitHub rebuilt the review gate for shared agent sessions and shipped a spend gate nobody is required to configure, eleven days before the…

The arrayref attacker yanked every clean release 24 seconds after publishing the poisoned one, which made Cargo's own deprecation warning…

AI-Infra-Guard's skills and MCP scan is the most useful free thing you can point at an agent stack, but the platform running it holds your…