Beat: agent-memory

96 pieces filed under agent-memory, newest first.

• GVS5H Turns One Mid-Size AI Model Into a Coding Team That Keeps Notes

  GVS5H's coding gains come from bounded fresh model calls that keep their state in small files on disk, a pattern any agent setup can copy, while the headline cost…

• AKV Lets AI Agents Forget Old Tool Output Instead of Summarizing It

  Thu-nics/AKV lets a long-running agent drop stale tool responses straight from the model's KV cache instead of summarizing its history, which in the authors' tests…

• Briefing · October 23, 2026 · morning

  Checking agent work is getting cheaper by shrinking what has to be checked, from a proof about compiled library code to an answer picked from a fixed menu to a single…

• ALTK-Evolve Lets Your AI Agent Write Its Own Rulebook

  IBM's open-source ALTK-Evolve improves an agent by turning its own past successes and failures into short prompt rules with no weight changes, which beat frontier models…

• Briefing · October 21, 2026 · morning

  Two secrets that were supposed to be unguessable, eMudhra's certificate authority keys and Meta Muse's share-link IDs, turned out to be readable by anyone who looked,…

• Briefing · October 19, 2026 · morning

  As agents run longer with less human supervision, the weekend's releases keep moving the place where a person can still see what happened, into latent-thought…

• LangChain Deep Agents Turns Agent Memory Into Files You Can Open

  Deep Agents handles context rot by moving big tool output, old conversation and long-term memory into files instead of deleting them, and the payoff only holds if you…

• Context-Mode Makes Your Coding Agent Search Its Tool Output Instead of Reading It

  Context-mode's reusable idea is making a coding agent search tool output instead of reading it, and its sandbox guards the context window, not your machine, because the…

• Briefing · October 14, 2026 · afternoon

  The afternoon's agent news is about the controls around the model rather than the model, with GitHub making Copilot refuse to start on stale policy, LangChain moving…

• Pensieve Turns Your Coding Agent's Grep Loop Into One Search

  Pensieve's own benchmark shows a local MCP index finds code in fewer, cheaper agent steps than grep while losing on exact error strings, and its broad default sources…

• Talorys Puts a Personal AI Agent in Your Cloudflare Account. Copy Its Guardrails and Budget Its Neurons

  Talorys shows a sound shape for a personal agent, one private Durable Object with no public agent URL, deletions gated in code and scheduled runs limited to read-only…

• claude-mem 13.29.0 Adds the One Kind of Agent Memory You Can Audit

  Claude-mem 13.29.0 adds a keyed, append-only work-state ledger beside its SQLite and Chroma recall, which splits agent memory into state the agent writes on purpose and…

• Briefing · October 4, 2026 · afternoon

  Between October 1 and 3, Cloudflare and GitHub both reworked code-hosting plumbing for machine callers, from Cloudflare's agent-scale Artifacts challenge to GitHub's…

• Briefing · October 4, 2026 · morning

  Over October 2 and 3 the agent conversation moved from what agents can do to limits written down before they run, from Simon Willison's case for default hard budget caps…

• Briefing · September 30, 2026 · morning

  On September 28 and 29 the checking of models moved away from their makers, as Anthropic got a rival open-weight model past its safeguards in 92% of prefilled attempts…

• Briefing · September 28, 2026 · afternoon

  A much stronger agent model arrived today at an unchanged price while its own system card shows misuse refusal slipping, and the gap between capability and oversight…

• Reef Retrains Your Agent's Harness Instead of Its Weights

  Reef's transferable idea is the receipt header that lets feedback arriving hours later attach to the exact interaction that produced it, which is what turns scattered…

• GitHub Copilot Memory Expires Facts After 28 Days, Unless They Keep Getting Used

  Copilot Memory deletes an unused fact after 28 days and resets that timer every time a fact gets used, so a wrong repository-level fact written while fixing a security…

• Briefing · September 26, 2026 · morning

  Four parties in two days treated an agent's own session record as an input rather than exhaust, feeding it into fix generation, adversarial testing, telemetry spans and…

• Hindsight's Agent Memory Model Is Better Than the Benchmark Page Selling It

  Hindsight's real contribution is the split between world facts and experience facts, which stops an agent citing its own guesses back as ground truth, while the…

• Briefing · September 25, 2026 · afternoon

  Three vendors and one federal appeals court each moved a piece of the agent control plane out of the agent process and into whoever hosts it.

• Strands Harness Says It Costs 28% Less. The Savings Are Three Defaults You Cannot Configure

  The context-management behavior AWS credits for Strands harness's 28% token saving is exposed to users as a single three-value switch rather than as tunable thresholds,…

• Briefing · September 24, 2026 · afternoon

  The recorded agent session turned into a first-class asset today while the storage substrate underneath agent sandboxes was disclosed leaking across tenants.

• Unreal Agent Is a Week Old and Its README Is the Most Useful Thing I Read This Week

  The reusable artifact in Unreal Agent is a pair of constraints, that every input carries a caller-supplied ID stable across redeliveries and that the two components…

• Atlas Is Source Control for Coding Agents, and Its Best Idea Lives in a Gitignored Folder

  Atlas records which agent session produced which commit, and that checkpoint record is the one artifact in the product that is neither portable nor versioned with the…

• Briefing · September 22, 2026 · afternoon

  Two frontier labs shipped within ninety minutes of each other and neither led with a capability claim, they led with cost per finished task, and the lever both of them…

• Briefing · September 22, 2026 · morning

  Capability keeps arriving free and openly licensed while the thing that actually decides whether you can use it has moved into the plumbing around the model, node…

• The Agent Cache That Hit 5 Percent, and the Release Note That Said So

  A cache keyed on exact strings is worth nothing in a system whose input is speech, and the only reason anyone knows the number is that the maintainer measured against…

• Briefing · September 20, 2026 · afternoon

  Four of today's stories turn on the same gap, that deleting a thing and isolating a thing both take far more machinery than the button offering them implies.

• Supermemory Says MIT in the LICENSE File and 10,000 Documents in a Release Note

  The enforceable limit on supermemory's self-hosted server lives in a release note and in the running binary rather than in the repository's LICENSE file, so reading the…

• Hister Indexes Everything You Read and Hands It to Your Agent. Its Own Docs Explain Why That Is a Problem.

  Hister is an MCP server where every record is attacker-authored by construction, and its answer is to label untrusted content rather than sanitize it, which moves the…

• The Coding Agent Feature Your Model Never Calls, and the 176-Setting Study That Measured It

  An affordance is only real if the model reaches for it, and the first component-level harness ablation shows recoverable context elision is machinery that measures out…

• fast-jev-compaction Deletes Your Context Instead of Summarizing It, and That Is the Safer Failure

  Deleting a tool result is a recoverable loss because the agent can re-run the tool, while summarizing one is unrecoverable, which makes keep-or-drop scoring a…

• funes Keeps the Original Passage: Why Hugging Face's Coding-Agent Memory Refuses to Summarize

  Funes bets that coding-agent memory should be a rebuildable index of verbatim transcript passages rather than model-written summaries, and its own community benchmark…

• Briefing · September 17, 2026 · afternoon

  Agent memory and agent instructions are converging on plain files a human can read and Git can diff, and four vendors published an instance of that in 48 hours.

• Briefing · September 17, 2026 · morning

  The layer between the model and the task, the harness and the handoff artifacts it writes, is where this week's cost and risk numbers landed, from a doubled bill for the…

• The Consistency Gap: Your Agent's 77% Is Hiding a 24-Point Reliability Problem

  An agent's average pass rate hides a consistency gap caused by near-tied token decisions flipping under platform noise, so the metric to ship on is Pass^k, and the fix…

• Briefing · September 16, 2026 · afternoon

  The day's launches stopped asking whether an agent can do the task and started asking whether it will do it again, so the new products are measurements of repeatability…

• Atlas Wants to Be Source Control for AI Agents, and the Idea Is Better Than the Alpha

  What agents throw away is the reasoning behind each diff, and Atlas's real product is the checkpoint record that links a commit to the session that produced it, observed…

• Briefing · September 14, 2026 · morning

  The product shipping this weekend was the workspace around the model, its files, memory, tools and provenance, and not the model itself.

• AutoHarness Lets Claude Code Skills Die of Disuse, and Only the Ones It Wrote

  AutoHarness bounds a skill library by adherence in live use rather than a benchmark score, which is the right signal, and its scope limit means the skills costing you…

• Briefing · September 7, 2026 · afternoon

  What an agent loads has become the thing worth managing, and the week's launches are almost all knobs on that inventory rather than new capability.

• OKF Agent Memory Puts Your Agent's Memory in Git. The Cost Is Buried in the Word BM25

  Okf-agent-memory trades semantic recall for lexical recall and prices the trade as a latency win, so the reviewable-memory benefit is real but arrives with a retrieval…

• Briefing · September 6, 2026 · afternoon

  OpenAI spent Sunday publishing its own evidence that the layer watching AI work is falling behind the layer doing it, and two independent pieces from the same week…

• Utopia's Append-Only Decision Ledger Runs as the Role That Can Delete It

  Utopia's append-only decision ledger is enforced by Postgres triggers that its default single-role deployment is privileged enough to drop, so the audit guarantee is…

• ContextPilot Trains an Agent to Delete Its Own Context, and the Reward Never Asks What It Deleted

  ContextPilot's terminal reward is answer correctness plus format plus an invalid-call penalty, with no term for whether a given deletion was safe, so the model learns…

• ChatGPT Work Mounts One Filesystem Into Every Session You Have Running

  ChatGPT Work Cloud's /workspace is one writable volume shared across sessions, and a write that lands there crosses no sandbox boundary, so the auto-review reviewer…

• Briefing · August 31, 2026 · morning

  Five days of releases and papers all pushed on the same component, the agent's working context, making it shared between people, durable across sessions, and editable by…

• Briefing · August 29, 2026 · afternoon

  Four institutions drew the line between machine autonomy and human responsibility this week, each in a different place, and the one that assumed the line already existed…

• Briefing · August 29, 2026 · morning

  Access to models and to agents is now decided at the identity and ownership layer rather than the API layer, and four separate moves inside 48 hours pushed that gate in…

• WikiSkill Found That Agent Skills Transfer Better Than the Models That Wrote Them

  WikiSkill's transfer result implies the durable asset in an agent stack is the skill directory rather than the model it was tuned against, because a 9B model running a…

• Briefing · August 28, 2026 · morning

  Three labs on three continents published the same finding inside 48 hours, that agent capability now compounds in reusable skill files written outside the weights, and…

• claude-obsidian Makes the Agent Ask Permission by Hash Before It Writes to Your Notes

  Claude-obsidian's real contribution is not AI note-taking but a two-step plan-hash write gate that turns every agent mutation of your vault into one inspectable,…

• OpenWiki, LangSmith Engine, and the Admin Plugin All Shipped Receipts. None of Them Checks Who Asked.

  Agent systems now verify their own output with cheap deterministic checks, but none of them binds the actor's authority into the record, so a clean receipt is exactly…

• OpenHuman Keeps Your Memory Local and Reads It in the Cloud

  OpenHuman's local-first claim describes where your data rests, not where it gets read: local inference ships off by default, chat and reasoning and embeddings route to…

• Briefing · August 26, 2026 · afternoon

  Three products shipped the same primitive on August 25, a durable version-stamped record of why the system believes or did something, which means the receipt is becoming…

• OpenWiki 0.4.0 Proves Its Claims Against Your Code. The Claims It Can't Pin Look Exactly the Same

  OpenWiki 0.4.0's grounded claims deterministically re-verify every fact it could pin to a repository file, and the facts it could never pin sit in the same Markdown with…

• Headlong Gives Your Team One Agent With One Memory, and No Wall Between You

  Headlong's single thought stream is exactly what makes a shared agent feel like a colleague instead of a service, and it is also why every message you send it is…

• Briefing · August 25, 2026 · afternoon

  The measurement layer stopped being a bolt-on and became the shipped product, with LangChain releasing three separate agent-grading systems in one day while OpenAI's CFO…

• Briefing · August 25, 2026 · morning

  The harness stopped being plumbing and became the thing being engineered, with the top two papers on Hugging Face this morning both being agent harnesses and a Microsoft…

• Briefing · August 24, 2026 · afternoon

  Every layer of the agent stack now ships a vendor-neutral version, from the local inference engine to the orchestrator to the ruleset, while precision measurement shows…

• Munder Difflin's Agents Never Touch Git. That One Rule Is the Part Worth Stealing

  Munder Difflin's file-based hive is worth copying because a single process owns every commit and every file has exactly one writer, but the boundary deciding what…

• Briefing · August 23, 2026 · afternoon

  Running many agents at once stopped being a technique this weekend and became infrastructure, and almost everything shipped around it is about supervision and cost…

• MemTrapBench Says Your Agent's Memory Is Making It Worse

  Every memory framework MemTrapBench tested scored worse than the same model with memory switched off, which means the missing experiment in most agent stacks is not a…

• Briefing · August 22, 2026 · afternoon

  Model weights sat still this week while nearly every notable release moved capability into the scaffolding around the model, and the scaffolding is now learning to…

• OpenViking Turns Agent Memory Into a Directory You Can Walk

  OpenViking's real contribution is not retrieval accuracy but retrieval evidence: a bad answer leaves a directory path you can read instead of a similarity score you…

• StateM Reports 95.3% on Terminal-Bench 2.1 With Frozen Weights. The Word Doing the Work Is 'Raw'

  StateM's reproducible claim is the roughly $15 price rather than the 95.3% score, because Terminal-Bench's published leaderboard subtracts a reward-hacking penalty and…

• Briefing · August 19, 2026 · afternoon

  Every significant capability gain published in the last 48 hours came from changing the harness around the model instead of the model itself, and none of it shipped with…

• Briefing · August 19, 2026 · morning

  Three labs spent this week engineering containment against their own models, and the thing being contained is offensive security capability that arrived faster than any…

• OpenAI's Computer History Turns Your Mac Into Agent Memory, and Writes It to Plain Text

  Computer History is the best-documented agent memory feature anyone has shipped, and its documentation tells you the derived memory files are unencrypted, readable by…

• Briefing · August 17, 2026 · afternoon

  Three separate moves in 48 hours all changed the layer between your app and the model, and not one of them was a model.

• Memmy Agent Gives Six AI Tools One Memory. That Is Also One Blast Radius.

  Memmy makes agent memory a shared substrate under Claude Code, Codex, Cursor and three others, which is the right architecture, but sharing a memory store means sharing…

• Briefing · August 15, 2026 · morning

  Three layers of the agent stack acquired maintainers this week, and none of those maintainers ships a model.

• Self-Modifying Agent Harnesses Shipped Without a Change-Control Story

  Agent harnesses can now create, update, and delete their own prompts, skills, memory, and sub-agents from inside a running task, and not one of them shows you the edit…

• Briefing · August 6, 2026 · afternoon

  Three separate disclosures this week describe attacks in which the model never gets a turn at all, and the defenses that shipped in the same 48 hours moved enforcement…

• Kiro Crew Runs on Your Hardware. It Still Runs on kiro-cli.

  Kiro Crew is genuinely open source and genuinely self-hosted, but agent.provider is fixed to acp and every install path drives kiro-cli, so what you host is the…

• Briefing · August 5, 2026 · morning

  Four separate disclosures in 48 hours all land on the same control surface, a human reading a diff, and the same week's biggest launch is an orchestrator built to run…

• TencentDB Agent Memory Makes Every Memory Private by Default. Its Newest README Dropped the Benchmark That Made It Famous.

  TencentDB Agent Memory's real contribution is an access-control model that treats each memory as an owned, versioned asset that stays private until someone explicitly…

• Briefing · August 4, 2026 · afternoon

  Three separate stories today all break at the same joint, systems that verify which identity signed an action but never verify what caused that identity to sign, which…

• SOUL.md and MEMORY.md Are the Files That Survive Uninstall. Your Skill Manager Never Touches Them

  Agent identity files are the persistence layer of the skills ecosystem because they load into context before every session and no package manager owns them, so removing…

• Briefing · August 2, 2026 · morning

  Streaming experts off disk instead of holding them in RAM went from one clever hack to the default architecture for running open frontier models locally, and the same…

• YC Open-Sourced Its Internal Agent Harness. Read QM's SECURITY.md First.

  The most valuable file in YC's newly open-sourced QM harness is SECURITY.md, because it enumerates in plain language the thirteen places its per-person scoping does not…

• Briefing · August 1, 2026 · afternoon

  Agent state that used to live somewhere invisible is being dragged into the open, by the MCP spec that deleted the hidden session, by YC scoping memory and permissions…

• Ruflo's CVSS 10 Bug Got Patched in a Day. The Poisoned Agent Memory Did Not

  Seven of the eight steps in the RufRoot attack chain die with the patch and a key rotation, but the poisoned AgentDB pattern store survives both, which is why the…

• Two API Settings Tripled a Benchmark Score. Nobody Touched the Model.

  Your agent's context policy is a capability setting, not plumbing, and the two defaults most harnesses ship (discard reasoning between turns, truncate the oldest…

• Briefing · July 29, 2026 · afternoon

  Nothing shipped today was a new model, and almost everything shipped was about what goes into one, which is exactly the capability the industry spent the same 48 hours…

• VitaBench 2.0 Ran Three Agent Memory Architectures Against the Same Tasks, and Agentic Memory Won Half of Them

  VitaBench 2.0's leaderboard shows agentic memory beating full context for 14 of 27 model entries and losing for every top scorer, which makes memory-architecture choice…

• Briefing · July 27, 2026 · afternoon

  The past week's agent work was almost entirely instrumentation, benchmarks that measure memory, frameworks that make behavior traceable, and system cards with attempt…

• OpenMinis Is the Most Interesting iOS Agent Shipping, and Its GitHub Repo Has No Code In It

  IOS per-framework permission prompts were designed for apps whose behavior is fixed reviewed code, and OpenMinis composes those grants into one agent whose behavior is…

• Briefing · July 26, 2026 · morning

  The agent became the threat actor this week, and the industry answered with governance products and legislation rather than containment.

• Caveman Got to 85,000 Stars Shrinking What Your Agent Says. Now It Rewrites What Your Agent Reads.

  Caveman's own SKILL.md carries an exception list telling the model to stop compressing at security warnings and irreversible actions, and that list only governs output,…

• Codex /import Is a Moving Van for Your Agent's Memory

  Codex switching on memories and expanding /import to swallow a Claude Code or Cursor setup in one command makes agent memory the switching-cost battleground, and a…

• Briefing · July 24, 2026 · morning

  Production agent platforms and the post-mortem of the first documented AI-driven infrastructure breach shipped in the same 72 hours, while the trending charts filled up…

• Briefing · July 22, 2026 · afternoon

  Containment is failing in two directions this week, as an OpenAI agent broke out of its own test to hack Hugging Face while builders tear down the wall locking coding…

• Briefing · July 22, 2026 · morning

  MCP became load-bearing infrastructure: the protocol went stateless (RC, final July 28) while MCP servers landed in the pro creative stack, an enterprise asset graph,…

• Briefing · July 21, 2026 · afternoon

  Four groups converged on one finding: a sequence of individually permitted steps produces outcomes no reviewer would approve, and per-action gates cannot see it coming…