Archive · 38 issues

The archive

Every issue, nothing gated. The archive is the sample: if the last two weeks read well to you, the email will too.

  1. Daily

    Most of a harness-evolution gain is overfitting and extra compute

    Plus: Monzo's 1,800 agent tasks a day, and a credential the agent thought was yours. 5 min.

    Oct 22, 2026 · 5 min

    A wide bar feeds into a three-way chute that splits it into three trays below. The left tray is heaped nearly full, the middle a quarter full, the right holds one small cube with calipers resting against it.
  2. Daily

    Claude Code's Bash tool changed 12% of calls carrying code or escapes

    Plus: UndoBench, a Copilot CLI secret leak, and what Codemode is for. 5 min.

    Oct 07, 2026 · 5 min

    A row of relay stations along a conveyor belt. An instruction card enters clean at one end, gets nudged by a small arm inside each station, and drops out altered at the other end. A dashed line above traces the unchanged card the sender believes was delivered.
  3. Daily

    Branch steering breaks the Dual-LLM guarantee for computer-use agents

    Plus: swarms borrowing public URL scanners, pipelines that go wrong under replay. 5 min.

    Oct 06, 2026 · 5 min

    A rail line splits into two already-laid branches. A long scroll of printed page content leans against the switching lever at the junction and pushes it toward the lower branch, which ends at a strongbox with its lid ajar.
  4. Daily

    VS Code rebuilt its release process around agents and now ships weekly

    Plus: an agent that writes its own tools, and a support bot at 80%. 5 min.

    Oct 05, 2026 · 5 min

    A conveyor belt crosses the frame carrying four stamped crates under three inspection arches, each with a jointed arm reaching down. One crate sits alone on a side spur beside the first arch. Above, a row of twenty small robots each feeds an arrow into the belt's left end.
  5. Daily

    Six ways an agent harness can run something other than what you approved

    Plus: elaborate harnesses lose to a plain coding agent. 5 min.

    Oct 02, 2026 · 5 min

    A desk from above. A stamped sheet sits in a tray lettered APPROVED and travels through a sealed cabinet. A different sheet emerges into a tray lettered EXECUTED, carrying the same stamp but different text, with a carbon copy of the first sheet beside it.
  6. Daily

    A forged chat-template marker loses most of its authority as ordinary subwords

    Plus: 5 papers, 3 builder posts, 9 quick links. 5 min.

    Oct 01, 2026 · 5 min

    Two parallel tracks cross the frame toward a tall box on the right. The upper track carries one large tile through a wide arrow. The lower track carries the same text split across eight small tiles through a narrow arrow. A switch lever sits between the tracks beside a server rack.
  7. Daily

    Agent context compression can cut tokens by two thirds and still run slower

    Plus: a rescored injection benchmark, Letta's self-written workflows. 5 min.

    Sep 30, 2026 · 5 min

    Two arrangements side by side on a table. On the left, a tall loose stack of paper next to a small clock whose hand has moved a short way round the dial. On the right, the same paper pressed into one flat dense block, next to an identical clock whose hand has travelled much further.
  8. Daily

    AISI finds GPT-6 Astra attacking out of scope during a cyber evaluation

    Plus: five papers, METR's per-action monitor, and nine quick links. 5 min.

    Sep 29, 2026 · 5 min

    A low square fence encloses a workbench with one card on it. A line of footprints leaves the bench, passes through a gap in the fence, and branches into three trails that each end at a small closed parcel outside.
  9. Daily

    Agent-written pull requests match human ones on revert rates, and fail differently

    Plus: two papers pricing what agent context costs to serve and to keep. 5 min.

    Sep 28, 2026 · 5 min

    Two chutes drop equal stacks of paperwork into one central review tray. Below the tray, three labelled bins catch different contents: identical small tags, almost nothing, and a heap of long curling ribbons.
  10. Daily

    Forged control tokens blank an agent's reasoning while the tool call still fires

    Plus: a completion gate you can prove, and 8 tools where 83 were. 5 min.

    Sep 25, 2026 · 5 min

    A cross-section of a pipeline. An envelope enters a rendering box on the left and splits into two tracks. The upper track, marked REASONING, carries a blank scroll watched by two lenses on stands. The lower track, marked TOOL CALL, carries a sealed packet through an open valve and out of the arrangement.
  11. Daily

    Two MemOS packages shipped credential stealers into the agent memory layer

    Plus: an agent that spent eight days rewriting itself, and an MCP hijack that rides tool metadata. 5 min.

    Sep 24, 2026 · 5 min

    A stack of four wide flat slabs labelled model, harness, tools and memory. The memory slab is a row of small closed cells; one has swung open and a single-file line of small keys marches out of it and away from the stack. A thin arrow runs down the right side.
  12. Daily

    Dormant prompt injections land on nine production agents where direct orders fail

    Plus: what context compression actually saves, and 383 self-written rules on trial. 5 min.

    Sep 23, 2026 · 5 min

    A sheet of ruled text lies flat, one middle line drawn as a clasp holding a folded slip closed, with a thin thread running from it across to a toggle switch that is still off.
  13. Daily

    Approve one operation, run another: the binding failure in shipped agent products

    Plus: Benchling's DNS-tight sandbox, Shopify's Swift rewrite, nine skill techniques. 5 min.

    Sep 22, 2026 · 5 min

    Two display panels side by side on a rail. The left one is an empty frame; the right holds a dense printed document. A wax seal on a cord has slid along the rail from the left panel to the right one.
  14. Daily

    Giving an agent the decoder's confidence never beat a plain deterministic gate

    Plus: three agent architectures priced against the same task, and nine quick links. 5 min.

    Sep 21, 2026 · 5 min

    A wire from the left splits at a central junction into two routes leading to the same closed door. On the upper route a seated figure reads a dial and reaches for the handle. On the lower route a mechanical latch sits on the wall and the figure stands beside it holding up a note.
  15. Daily

    Split an MCP injection across two channels and resistant models leak at 100%

    Plus: reward hacking at 57.2% of rollouts, and Exa searches the web by date. 5 min.

    Sep 18, 2026 · 5 min

    Three pipes enter the frame from different sides, each carrying a short paper strip with a few words on it. The pipes meet at a funnel, and past it the three strips lie end to end on one band whose words run in a continuous line toward a small open door.
  16. Daily

    Every audited chat tokenizer lets prompt text forge control tokens

    Plus: 91% of audited vibe-coded deployments shipped a hole. 5 min.

    Sep 17, 2026 · 5 min

    A mechanical sorter feeds small tags into a slot on a machine. Most are stamped metal plates reading SYSTEM and TOOL. One is a sheet of ordinary typed paper with TOOL written on it by hand, going into the same slot.
  17. Daily

    A shell beats a typed tool catalog, and agents barely report their work

    Plus: an MCP registry census, four AI Engineer talks, one very late transcription. 5 min.

    Sep 16, 2026 · 5 min

    A plain terminal window on the left and a tall cabinet of many small labelled drawers on the right. One short line runs from a small robot through the terminal; a much longer line winds through drawer after drawer. Both lines end at the same document above.
  18. Daily

    An agent deleted an AML control, and benchmark scaffolds do the model's work

    Plus: OpenAI's 10,000-agent proof, a 297-iteration model loop, MCP merges Skills. 6 min.

    Sep 14, 2026 · 6 min

    Thirteen identical signposts form a fence across a field. One lies flat on the ground, and a small robot steps through the gap holding a sheet of paper out in front of it. A large check mark floats behind the fence.
  19. Daily

    Per-phase model routing cuts agent cost, RASER on Slurm, Amp steers mid-run

    Plus: 2 papers, a context-mode split, and OpenAI's Navier-Stokes claim. 5 min.

    Sep 09, 2026 · 5 min

    Four small workstations in a row on a bench, linked by a thin line, with a paper ticket travelling between them and a coin slot of a different size beside each.
  20. Daily

    Prefix caching changes agent runs, and cross-family reviewers beat self-review

    Plus: a harness that moves solve rates 4x, and 883 commits to nowhere. 6 min.

    Sep 08, 2026 · 6 min

    Two identical text strips enter a box; one is partly taken from a shelf of stored slices, the other read fresh. Their exit paths fork and wind through a grid of small tool icons to different endpoints.

Browse by topic