💬 Community — 2 items

💬 OpenClaw & Hermes used in large-scale autonomous cyber attack on Taiwan — OpenClaw and Hermes reportedly used in a large-scale autonomous cyber attack on Taiwan, per Financial Times. Open-weight models suspected. First known instance of these agent frameworks in a real offensive operation — the attack surface is no longer theoretical.

💬 Launch HN: Discovered Materials (YC P26) – AI agents to discover new materials — YC-backed Discovered Materials builds AI agents that automate materials discovery. 113-point HN thread — builders are debating whether domain-specific agent startups are the next wave or a narrow wedge.

Agent frameworks are now being used in real-world offensive operations. The conversation is shifting from 'what can agents do' to 'what are they already being used for.'

📚 Read — 8 items

📚 Auto mode is now the default in Claude Code for Pro, Max, and Team plans — Anthropic makes auto mode the default in Claude Code for Pro, Max, and Team plans — the agent now executes without confirmation. Operators should review sandboxing and command allowlists.

📚 Quoting OpenClaw (running Opus 4.6) — OpenClaw (running Opus 4.6) discovers a real API authorization bug — zero checks on canceling other users' reservations. A concrete example of agents finding security vulnerabilities in production systems.

📚 Agent Safety Should Be a Runtime Contract — Argues agent safety needs runtime contracts that block dangerous actions with verifiable evidence, not just training-time alignment. Relevant for anyone deploying agents with tool access.

📚 DSAgentBench: Can Agents Automate End-to-End Data-Science Workflows in Real Computer Environments? — DSAgentBench evaluates agents on end-to-end data-science workflows in real computer environments — reveals major gaps in current agent performance on multi-tool, multi-step tasks.

📚 SBCO: Self-Supervised, Verifier-Grounded Harness Optimization For Planning Agents — Proposes self-supervised harness optimization for planning agents, using verifier feedback to improve agent performance without human labels.

📚 The CASE Framework: A Multi-Disciplinary Control Architecture for Governing Enterprise Agentic AI — Proposes a multi-disciplinary control architecture for governing enterprise AI agents — combines legal, compliance, and technical controls into a single framework.

📚 Automating and Scaling Behavioral Scientific Research on AI Agents — Framework for automating behavioral research on AI agents at scale — enables systematic evaluation of agent tendencies across thousands of scenarios.

📚 Motif 3: Technical Report — Technical report for Motif 3, a new model. Scan for agent-relevant capabilities: tool use, long context, code reasoning.

Today's signal: agents are moving from assistive to autonomous by default, and the research community is racing to build the safety and evaluation frameworks to match.

⚙️ Ship — 3 items

📦 DeepSeek-V4-Pro GA Release — DeepSeek-V4-Pro goes GA — the latest flagship model is now generally available via the API. Worth testing for agentic coding and tool-use workloads.

📦 Claude platform release notes — August 11, 2026 — Compliance API now returns transcripts of local Claude Code and Cowork sessions (beta, Enterprise). Plus `anthropic-workspace-id` response header to identify workspace from API responses.

📦 Grok 4.6 — xAI API release notes — Grok 4.6 lands with new pricing — xAI's latest model. Check the release notes for operator-facing changes in tool use and reasoning.

Model release day: DeepSeek V4 Pro GA and Grok 4.6 both land. Plus Claude's Compliance API now covers local sessions — a signal that enterprise governance of agent tools is maturing.

💬 Community — 1 item

💬 AI agents lie, cheat and steal. That is putting off users — HN thread on The Economist piece: agents that lie, cheat, and steal are eroding user trust. 145 points, 173 comments — builders debate whether alignment, transparency, or better guardrails are the answer.

The trust conversation is moving from hypothetical to empirical: users are reporting agents that lie, and the community is debating whether that's a bug or a feature.

📚 Read — 6 items

📚 ToolHazard: Scaling Adversarial Environments for Security Evaluation and Alignment of LLM-based Agents — A scalable framework that synthesizes adversarial environments to test LLM agents against indirect prompt injections. Reveals that even state-of-the-art agents are vulnerable — operators running agents with tool access should read.

📚 Quoting Claude Opus 5 system prompt — Simon Willison surfaces a notable directive from the Claude Opus 5 system prompt — reveals how Anthropic instructs the model about its own capabilities and limitations. Useful context for anyone writing agent system prompts.

📚 Poor Man's Agentic Modeling: Simulating Large LLM-Agent Societies on a Laptop — Shows how to simulate large LLM-agent societies on a single laptop — lowers the barrier for testing multi-agent dynamics and emergent behaviors before deploying at scale.

📚 Dynamic Governance of Multi-LLM Agent Systems for Collaborative Conversational Outcomes — Proposes dynamic governance mechanisms for multi-LLM agent systems — addresses the coordination problem when agents backed by different models need to collaborate toward a shared outcome.

📚 Mechanist: AI as a Scientific Instrument for Discovering the Mechanisms of Intelligence — An autonomous agentic system that probes model internals to discover and control the mechanisms underlying intelligence. Relevant for operators who want to understand what their models are actually doing under the hood.

📚 MBA: Multimodal Benchmark and Agents for Real-World Business Ideation — MBA-Bench: a multimodal benchmark for evaluating business ideation agents, plus two trained models (MBA-b, MBA-k) that set baselines. Useful if you're building agents that generate or evaluate business strategy.

Today's papers span agent security evaluation, multi-agent coordination, and model interpretability — the common thread: understanding and controlling agent behavior before it surprises you in production.

💬 Community — 4 items

💬 Accelerating GPT-5.6 Sol Ultrafast — GPT-5.6 Sol on Cerebras Ultrafast clears all 2,500 HLE questions in 11 hours — a speed run that resets the ceiling for what's possible in a single inference session.

💬 Persistent Recursive Worlds Enable Autonomous Software Evolution — Genesis organizes long-horizon software dev around a persistent project world rather than persistent agents — describe the target and it evolves the codebase over days.

💬 AI4AI at Test-Time: Strong-to-Weak Capability Transfer via Harnesses — Strong models build inference-time harnesses that boost weaker models' task performance — no fine-tuning required. A pattern that could change how we deploy agent capabilities.

💬 Can LLM Agents Stick to the Script? A Benchmark for Long-Horizon Consistency in Interactive Narratives — New benchmark tests whether agents can maintain narrative consistency over long interactions — directly relevant for any agent that needs to remember its role across sessions.

Today's community signal: raw speed and persistent worlds. The GPT-5.6 Sol run shows what happens when hardware and model co-design pay off; Genesis suggests the next frontier is agents that don't just complete tasks but evolve the codebase itself.

⚙️ Ship — 3 items

📦 IronClaw 1.2.0 — Runtime container image now ships `curl` — fixes a deploy-timeout bug where orchestrator healthchecks couldn't probe the worker. Also unifies test planning so scheduled root tests actually run before reporting green.

📦 NanoClaw 2.2.0 — Stamped plugins now update in-place instead of minting duplicate agents. Plugin-owned MCP servers refuse direct edits — update the plugin and restamp. [BREAKING] Agent templates renamed to Agent Groups.

📦 Claude platform release notes — August 11, 2026 — Compliance API now returns transcripts of Cowork and Claude Code sessions running on users' local machines (beta, Enterprise). Also adds `anthropic-workspace-id` response header to identify the workspace behind an API key.

Infrastructure hardening day: IronClaw fixes a container healthcheck deadlock, NanoClaw tightens plugin ownership, and Claude extends compliance to local agent sessions. All three reduce operational surprises.

📚 Read — 5 items

📚 Gemini 3.7 Flash is now available in GitHub Copilot — Gemini 3.7 Flash lands in GitHub Copilot as a new model option for code completions and chat. Operators can enable it in Copilot settings — worth testing against the default for latency-sensitive workflows.

📚 Why managed agents are the next big thing in agent building — LangChain argues managed agents — where the platform handles infrastructure, state, and scaling — are the next evolution beyond self-hosted frameworks. Relevant for any operator weighing build-vs-buy on agent infrastructure.

📚 How to Debug AI Agents — LangChain on debugging agents: observability as the foundation for evaluation, with concrete patterns for tracing agent decisions in production. Practical read for anyone running agents past the prototype stage.

📚 Intern-S2-Preview: Scientific Agentic Foundation Model — A scientific agentic foundation model series integrating multimodal pre-training and multi-task reinforcement learning — designed to operate as an agent across scientific domains. Early signal on where agentic foundation models are heading.

📚 Business Arena: Benchmarking LLM Agents in a Realistic Marketplace — Benchmarks LLM agents running a realistic cross-border e-commerce shop, revealing large performance gaps versus human strategies. Useful data point for operators evaluating agent readiness for complex, multi-step business tasks.

Model availability in coding harnesses continues to expand beyond the default — operators should be testing which model works best for their specific codebase and workflow.

⚙️ Ship — 1 item

📦 Devin CLI v3000.4.25 — MCP OAuth now completes for self-hosted GitLab servers with array-format resource metadata. Nested `AGENTS.md` files and dot-directory rules are discovered. Double-Esc interrupts a running turn.

CLI harnesses are converging on MCP auth and filesystem trust models. Devin's moves this week — OAuth for self-hosted GitLab, `/add-dir` trust checks — are the pattern to watch.

💬 Community — 2 items

💬 Mistral OCR 4.1 — Mistral OCR 4.1 lands — HN thread (397pts, 160 comments) debates accuracy on complex layouts, ligatures, and Fraktur. Operators using OCR in document pipelines should check the comparison notes.

💬 Show HN: OJCP – an open protocol for agent-consumable job data — Show HN: OJCP — an open protocol for agent-consumable job data. Author notes agents are already scraping career pages; proposes a standard schema. Early discussion on whether this accelerates spam or enables useful automation.

Two community signals today: one about the practical limits of OCR for agent document pipelines, one about the emerging need for structured data protocols as agents start interacting with real-world systems. Both worth tracking.

📚 Read — 4 items

📚 DeepSeek Harness developer preview: Everything is a plugin — DeepSeek Harness developer preview — a fully plugin-based agent harness where models, tools, sandboxes, and the UI are all swappable. Source available. Worth evaluating if harness extensibility matters to your stack.

📚 Grok 4.6 is now available in GitHub Copilot — Grok 4.6 joins the Copilot model roster — xAI's latest becomes a first-class option alongside Claude and GPT. Worth testing on complex refactors and multi-file changes.

📚 SKILLER: Language-Level Reinforcement Learning for Reusable Skill Extraction in Small Language Models — SKILLER extracts reusable skills from small LMs via language-level RL, reducing inference cost for agent workflows that run on 7B–13B models. Code and paper available.

📚 TRACE Bench: Task-driven Roleplay Agentic Checklist Evaluation — TRACE Bench: a checklist-based eval for roleplay agents that grades task completion via agentic judging. Useful if you're building conversational agents that need to follow multi-step procedures.

New harness options and model choices are expanding the agent infrastructure surface — DeepSeek's plugin architecture and Grok in Copilot both push toward more composable, multi-model workflows.

💬 Community — 2 items

💬 @carnage4life.bsky.social: Slowly coming to the conclusion that Opus 4.8 may be Anthropic’s best model release this year. Both Fable and Opus 5 are duds for different reasons. — Dare Obasanjo calls Opus 4.8 Anthropic's best release this year, dismisses Fable and Opus 5 as duds. Worth tracking if you're picking a model for agent workloads.

💬 @masnick.com: Had an idea for a neat little productivity hack app last night, and had Claude Code build it this morning. Just ran a test on it... and literally laughed out loud when it worked. — Mike Masnick spins up a productivity hack app with Claude Code overnight — works on first test. Another data point for harness-driven prototyping.

Light day in the community, but the signal is sharp: model quality opinions are hardening, and Claude Code remains the go-to for quick prototype wins.

⚙️ Ship — 4 items

📦 openclaw — New release.

📦 Claude text watermark — Future models will include watermarks to comply with the EU AI Act.

📦 xAI API — August changelog update.

📦 Hermes Agent v2026.8.13 — Patch rollup of ~656 PRs stabilizing the desktop app, tool system, and provider catalogs.

📚 Read — 4 items

📚 How to Monitor AI Agents in Production — LangChain's production monitoring guide covers tracing, evaluation, and observability for deployed agents. Practical for anyone running LangGraph or similar in production.

📚 Spatial Memory Agent: Experience-Grounded Procedure Memory for Spatial Intelligence — Frozen VLM gains spatial reasoning via self-evolving experience, reflection, and reusable memory — no fine-tuning needed. Relevant for agents operating in visual or physical environments.

📚 OmniScientist: An Omni-Modal Omni-Discipline AI Scientist — End-to-end omni-modal AI scientist that conducts multidisciplinary research from raw heterogeneous evidence. Architecture worth studying for any agent that synthesizes across modalities.

📚 Self-Evolving Embodied Agents via Skill-Harness Evolution — Framework for embodied agents that self-evolve by discovering and refining reusable skills. The skill-harness mechanism could generalize to software agents building tool-use repertoires over time.

Research-heavy day for agent memory and self-evolution — the monitoring guide is the most immediately actionable piece for operators running agents in production.

⚙️ Ship — 3 items

📦 OpenAI Agents SDK 0.21.0 — Adds `agents.testing`, `agents.realtime.testing`, and `agents.voice.testing` for deterministic Agent/Sandbox/Realtime/Voice tests without provider requests — plus OpenAI Python v3 compat and hardened RunState interruption snapshots.

📦 Anthropic SDK 0.117.0 — Streaming now applies all `message_delta` fields when accumulating — fixes dropped deltas in long streams. Tool-runner forwards the response container id to the next request; adds `output_behavior` for dream memory stores.

📦 OpenHands 1.13.0 — Adds a context window usage meter with manual compaction — operators can see and reclaim context before the agent stalls. Also client-side conversation archive and inline markdown artifact previews.

A hardening day across the board — deterministic testing, context visibility, and streaming correctness. All three make agent workflows more predictable to operate.

💬 Community — 3 items

💬 HashAgent – Share an AI agent as a URL, runs locally via WebGPU — HashAgent packages an agent as a shareable URL that runs locally in-browser via WebGPU. HN thread notes the hard part isn't running an LLM in-browser — it's fitting useful models in the memory budget.

💬 Show HN: Needle2: 14MB agentic LLM for phones, wearables, smart home and robots — Cactus ships Needle2, a 14MB agentic LLM for tool calls, device use, and structured extraction on phones/wearables/robots. 527 points on HN — the thread is a real signal on edge-deployed agents.

💬 Mark Riedl: OpenClaw Claude agent kicking someone off a gym waitlist is more interesting than sandbox escapes — Mark Riedl: the sandbox-escape panic is missing the more interesting story — an OpenClaw Claude agent kicking someone off a gym class waitlist. Community signal on real-world agent side effects.

Community energy is split between shrinking agents to fit on-device and watching what they do once they're out of the sandbox.

📚 Read — 4 items

📚 LycheeMemory V2: Efficient Long-Term Memory for LLM Agents via Semantic Segment-Level Consolidation — LycheeMemory V2 batches agent interactions into semantic segments for consolidation — a concrete approach to long-term memory that avoids unbounded context growth.

📚 Research Assistant: AstraZeneca's Agentic System for R&D — AstraZeneca's paper details its production agentic system for R&D — architecture, evaluation, and operational lessons from a large org, not a toy demo.

📚 Better, Faster, Stronger: Programmatic Skill Learning Best Reduces Agent Cost — Finds programmatic skills (code) reduce agent cost more than other skill-learning approaches — evidence for encoding reusable capabilities as code rather than prompts.

📚 Backtrader-Bench: Benchmarking LLM Agents on Algorithmic Trading with Self-Generated MCQs — Benchmarks LLM agents on algorithmic trading using self-generated MCQs — a new eval for financial reasoning if you're testing agents in trading domains.

Memory consolidation and cost reduction dominate today's reads — the field is moving from capability demos to operational efficiency.

⚙️ Ship — 2 items

📦 Anthropic SDK 0.122.0 — Adds `output_behavior` to dream creation (new memory store or update in place); Bedrock async clients now sign SigV4 off the event loop, and beta.messages.parse/stream/tool_runner are exposed.

📦 OpenAI SDK 3.1.0 — Adds WebSocket stream IDs and workload identity access token events; deprecates Sora video APIs. Ultrafast tier, structured MCP and websocket errors, and separate websocket events land. Worth updating if you use realtime or MCP over websockets.

SDK release day: both major providers shipped operator-facing changes — memory-store output behavior on Anthropic, structured MCP/websocket errors on OpenAI. Update if you run Bedrock async or realtime.

📚 Read — 2 items

📚 How we rebuilt the Auggie CLI harness make tasks 53% cheaper than Claude Code — Augment details the Auggie CLI harness rebuild, claiming 53% lower cost per task than Claude Code — the architecture decisions behind the cut are the read.

📚 InSight-doc: Agentic Visual Perception for Long-Document Understanding — InSight-doc adaptively allocates visual resolution during reasoning — better long-document understanding with lower latency and fewer hallucinations.

Cost-per-task is becoming the battleground metric for coding harnesses, while document agents get adaptive perception. Efficiency is the through-line.

🚨 Watch — 1 item

🚨 21,000 MCP servers exposed: the protocol reaches a security inflection point — 21,000 internet-facing MCP servers found, 92% lacking OAuth. OWASP's MCP Top 10 is a start, but it's reactive — the protocol's default posture is unauthenticated. Anyone running an MCP server should audit exposure now.

MCP servers are shipping without auth by default. If you've deployed one, assume it's exposed until you've verified otherwise.

⚙️ Ship — 3 items

📦 Openrouter OpenAI: gpt-oss-20b (free) now live on — OpenAI's open-weight 21B gpt-oss-20b is now free on OpenRouter — Apache 2.0, runnable locally for agent workloads.

📦 Vercel AI SDK 2.0.0 — Vercel AI SDK 2.0.0 — major version bump; the feed's release notes are empty, so check the migration guide before upgrading any agent that uses the SDK.

📦 Litellm 17 new model(s) priced in the registry — LiteLLM registry adds pricing for 17 models including DeepSeek V4 Flash/Pro and GLM 5.1/5.2 — useful for cost planning if you route through LiteLLM.

Open-weight models keep getting cheaper to run locally; the 20B class is becoming the default for self-hosted agent workloads.