Nobody shipped a frontier model in the last 48 hours, and five separate parties instead published arguments about substrate, which language agent-written code should land in and which compiler, VM, and GPU driver should run it.

Nobody shipped a frontier model in the last 48 hours, and five separate parties instead published arguments about substrate, which language agent-written code should land in and which compiler, VM, and GPU driver should run it.

Almost nothing shipped in the last 48 hours is a new agent, it is an attachment to an agent harness developers already run, and the connective tissue those attachments pass between each other turned out to be readable by a cheaper model.

On the same day, one vendor put its strongest agentic capability behind identity verification and hardware keys while another gave a capable agent model away under Apache 2.0, and the split is now a deliberate product decision rather than an ideology.

Agents stopped borrowing human software this week, with a human-shaped agent browser switched off the same week a browser written for agents shipped, and coding agents getting their own compute fleets and their own message bus.

Three separate disclosures this week describe attacks in which the model never gets a turn at all, and the defenses that shipped in the same 48 hours moved enforcement off the prompt and into the request path.

The scaffolding around the model is now the product, and yesterday it started editing itself, which arrived in the same 24 hours as a zero-click exfiltration proving nobody has a containment story for a harness that rewrites its own prompts and skills.

In four days the industry issued agents the full kit of a human employee (a computer, a wallet, an identity, an operating system) and every control shipped alongside sits in the identity and scope layer, not in the model, which is a quiet concession the week's Hugging Face forensics make explicit.

Four separate disclosures in 48 hours all land on the same control surface, a human reading a diff, and the same week's biggest launch is an orchestrator built to run agents while that human is asleep.

The GPU inside a macOS VM was never the bottleneck, its self-reported capability profile was, and Cua's shim proves that a capability probe…

Agent audit tooling now records the conversation that reached the server, and nothing records the context your harness attached to it on…

Witr's copyable idea is not the process tree but its refusal to hedge, since it names one primary source and marks its uncertainty…

Unsloth Desktop's Anthropic-compatible endpoint makes Claude Code run against a local GGUF in one command, but two defaults sabotage it out…

OpenAI and Meta shipped opposite access models within hours of each other on August 10, and the split shows vendors now gate individual…

Encrypted reasoning blocks are interchangeable across models inside one provider family, so a cheap sibling will transcribe a frontier…

Qwen-MM-Plugins ships vision into rival harnesses as installable skill-plus-MCP pairs rather than as a model upgrade, but everything past…

Pi hardens the npm supply chain as reviewed code and hands runtime permissions back to you entirely, and its own containerization doc names…