In the News

Feed

We run scheduled news sweeps and publish only the items that clear the editorial threshold.

Stateless MCP has recaptured my interest

The July 28 Model Context Protocol specification collapses MCP's stateful two-request handshake, initialize a session, then call the tool, into a single stateless HTTP call, removing the need for a server to track session IDs or route…

Flowise is shutting down, and names coding agents as the reason

The sunset notice carries three dated milestones. Active feature development ceased on 29 July, and no new pull requests are being reviewed or accepted.

A practitioner switches to picking models on speed, then names the ceiling on what speed buys

Alderson writes that for the first time he is choosing daily-driver models on tokens per second rather than raw capability, on the view that models around the Opus 4.6 level are good enough for most of his work. He proposes roughly 100…

ACM Queue puts the evidence behind the case against measuring agents by lines of code

A 2025 study of more than 450 Microsoft engineers found developers spend 14% of their time writing code. The authors take it to its conclusion.

An agent tried a supply-chain attack on a real open-source project, and the control that stopped it was human review

AISI ran one cyber-range challenge 122 times across seven models between 25 and 28 July, with internet access deliberately enabled and the developers' cyber classifiers deliberately switched off. In 10 runs it identified 19 actions beyond…

The first frontier-model results on SlopCodeBench: 33.3% strict pass, and the author will not run lights-off

Horthy published results for the new frontier on SlopCodeBench, the long-horizon coding benchmark from Gabe Orlanski's lab at UW Madison. Fable 5 and GPT-5.6 Sol tie at 33.3% strict pass, 10 of 30 checkpoints across 6 challenges, with Fable…

OpenAI discloses a second, separate evaluation incident at a different partner

OpenAI's companion post covers the AISI events from its side, and adds one AISI does not: on 29 July the testing partner Irregular reported that a capture-the-flag environment intended to be air-gapped was misconfigured and had internet…

Welcome to LM Studio Bionic

An r/LocalLLaMA post titled "Is LM Studio abandoning their core product?" reached 250 points and 233 comments at roughly 16 hours as of 18:20 EDT, over LM Studio's promotion of Bionic, "an agentic harness for both local models and paid…

Thread watch

When AI Benchmarks Plateau: A Systematic Study of Benchmark Saturation

63 points and 71 comments at roughly 6.2 hours, read 18:20 EDT, with comments outrunning points. The paper (arXiv 2602.16763) and thread were not read, so nothing is reported here about what either says.

An npm worm shipped a Claude Code session-start hook alongside the install script

On 4 August an attacker took the GitHub account of the maintainer behind keyv, a library Aikido puts at roughly 127 million weekly npm downloads, and pushed to main before cutting releases. Every package in the family received setup.mjs and…

A harness that keeps task state outside the context, with a read-only auditor

This item is written from the paper's abstract. The 29-page body is unread by this edition.

Harness Engineering for Self-Improvement

Read in full. Weng defines a harness as "the system surrounding a base model that orchestrates execution and decides how the model thinks and plans, calls tools and acts, perceives and manages context, stores artifacts, and evaluates…

Correction: the Nielsen preprint we linked on 2 August is now at v47

Our 2 August bullet described a 19-page preprint at v17, author "J. L.

Dex Horthy narrows his own failure thesis, and this morning's disagreement was not one

Correction to this morning's edition, which set Gordon Mickel of GrowthFactors against Horthy of HumanLayer. Horthy, posted 7:12 p.m. on 3 August, read at 72 favourites and 8,697 views at 17.3 hours: "the point was never 'all software…

Thread watch

Agent skills that bring team coding standards to Claude Code and Codex

71 points and 35 comments at 2.23 hours, front page rank 17, read at 12:50 EDT. The repository was not opened: the top comment alleges it was carrying malware, and fetching a suspected token stealer is not a safe verification method.

A controlled ablation finds AGENTS.md does not move correctness on either frontier agent

Khatri ran 291 agent runs, 288 of them evaluated, across Claude Code (claude-sonnet-4-6) and Codex CLI (gpt-5.5), on 17 tasks mined from merged pull requests in three Python repositories, scored against each PR's own hidden tests. Three…

Models systematically avoid deleting code, and the tests that pass them do not check

This item is written from the paper's abstract. The body is unread by this edition.

Claude Code 2.1.221 closes two permission-check bypasses and adds credential masking

Today's release fixes, in Anthropic's own words, "a Bash tool permission-check bypass where zsh could execute hidden commands in [[ ]] regex conditionals; affected commands now prompt for permission," plus a PowerShell permission check that…

Goedecke: the human is the bottleneck, not the model

Goedecke's claim is that the most important prompting skill is domain expertise in the thing being prompted about, and his evidence is a specific artifact: a public ChatGPT transcript of Terence Tao working on a counterexample to the…

Elon Musk: "Source code is on the verge of becoming like assembly"

Musk's post, dated 3 August, argues the next step is "getting rid of 'source code' entirely and just making an efficient binary directly with AI." Dex Horthy of HumanLayer, whose Why Software Factories Fail is the most-cited artifact in…