📚 Read — 7 items

📚 Agentic Scaffolding Amplifies Sycophantic Behavior in Large Language Models — Agentic scaffolding — subagents, tool loops, reflection — amplifies sycophantic behavior in LLMs. If you're building agents that interact with users, this robustness finding is worth internalizing.

📚 Prime Agent: A Self-Improving RLM Harness — Open-source harness for self-improving RLMs — recursive subagents, persistent computation, and agent-to-agent coordination to extend reasoning. Worth a look if you're building long-horizon agent loops.

📚 MobilePA-Bench: Benchmarking Mobile Planner Agents on Complex Real-World Tasks — Interactive sandbox benchmark for mobile planner agents — evaluates tool-calling, sub-agent collaboration, and memory use on complex real-world tasks. Useful if you're shipping agents that drive phones or apps.

📚 Introducing the Admin plugin for ChatGPT Work and Codex — OpenAI introduces an Admin plugin for ChatGPT Work and Codex — enterprise controls for managing Codex deployments. Operators running Codex at scale should check what policy and oversight hooks are exposed.

📚 LitReview Arena: Evaluating Literature Review Agents with Battle-Style Peer Review Platform — LitReview Arena evaluates literature review agents with a battle-style peer review platform — a new eval for research agents. Useful if you're building agents that synthesize papers.

📚 The rise of "context engineering" — LangChain argues context engineering — how you assemble prompts, memory, and tool context — is the new prompt engineering. A useful frame for operators tuning agent performance.

📚 Using skills with Deep Agents — LangChain's Deep Agents now support skills — reusable capabilities agents can invoke. Worth a look if you're building long-running agents that need composable tooling.

The Read lane is converging on evaluation and robustness — context engineering and skills are the build side, sycophancy and mobile benchmarks are the guardrails.

💬 Community — 1 item

💬 @davidcrespo.bsky.social: Revenue growth 'essentially all coming from agentic tools' — David Crespo on the revenue surge: 'essentially all coming from agentic tools.' Builder-level signal that agent-driven revenue is real, not narrative.

⚙️ Ship — 2 items

📦 Gemini CLI 0.57.0 — Gemini CLI 0.57.0 — OAuth redirect fix for Cloud Workstations, eval tool call formatter with failure summaries, and context-aware silent retries with TTL for capacity errors. Multi-turn requests now roll back entirely on cancel/abort.

📦 Devin CLI updated — Devin CLI v3000.6.2/5.20 — new `devin rm`, `devin doctor`, `/recap`, `/rename`, and Alt+P plan mode; read-only `cd` commands now resolve relative paths for permissions; pre_tool hook blocks return reasons to the agent; memory leak on screen redraw fixed.

Two CLI updates: Devin adds session management and Gemini hardens OAuth and retries. Both incremental but reduce operational friction.

📚 Read — 6 items

📚 ClawProBench: Trace-Aware Evaluation of AI Agents with Runtime Coverage and Frozen Workplace-Style Holdouts — Trace-aware eval across live and frozen tracks shows final-answer rankings obscure runtime coverage gaps — worth adopting if you benchmark harness configs.

📚 Recursive Experiential-Working Memory Evolution for Long-Horizon Agent Harnesses — Recursive memory architecture tracks progress and guides skill selection, improving long-horizon agent success rates — a concrete pattern for memory in agent harnesses.

📚 There Is No Neutral Harness: Modern LLM Leaderboards Are Manufactured by Config-Fragile Items — Argues leaderboard rankings are manufactured by config-fragile items — small harness config changes flip results. A caution for anyone trusting eval leaderboards.

📚 A Survey on Foundations and Frontiers of Multimodal Agentic Frameworks: Techniques and Applications — Survey of multimodal agentic frameworks — techniques and applications, a useful map for agents handling images, video, and audio.

📚 Plan-and-Execute Agents — LangChain's plan-and-execute pattern separates planning from execution to improve reliability on multi-step tasks — worth comparing against ReAct loops.

📚 LangSmith Engine Improves Agent Issue Detection by 2x — LangSmith Engine claims 2x better agent issue detection via improved trace analysis — worth checking if you're already on LangSmith for eval.

Eval is the theme today — trace-aware benchmarks and config-fragility critiques both point to the same conclusion: trust your own traces, not leaderboards.

⚙️ Ship — 2 items

📦 Claude Python SDK v1.0 — Python SDK v1.0 ships — HTTP layer moves from httpx to httpx2 (call `httpx2.alias_httpx()` if you patch httpx for tracing/mocking). Requires Python 3.10+, drops legacy Text Completions and `temperature`/`top_p`/`top_k`; async `.with_raw_response` now needs `await response.parse()`.

📦 Antigravity Google — Embedded Terminals, Git Version Control, and Audio Attachments — Antigravity adds embedded terminals, git version control, and audio attachments — terminal and git in-IDE move it toward full agentic coding parity.

SDK maturity day — Anthropic's Python SDK hits 1.0 with breaking changes, and Antigravity closes the terminal/git gap. Both are upgrade-and-retest items, not read-and-forget.

💬 Community — 6 items

💬 WebMCP: Teaching Your Website to Talk to AI Agents — HN debate on WebMCP — exposing website actions to agents via MCP. Top comment calls the approach 'inverted and impractical'; 50 comments arguing whether sites should serve agent APIs.

💬 CyberFactory: Scaling Cyber Security Capabilities with Instances from the Wild — CyberFactory turns real-world vulnerabilities into agentic training data for Aegis — an open-weight security agent that gets better at triage from wild instances.

💬 AgentRoom: Concurrent Multi-Agent Coding in a CRDT-Backed Shared Workspace — AgentRoom gives multiple coding agents a shared CRDT workspace — real-time collaborative editing and filesystem coordination, cutting task conflicts.

💬 Automata from Agent Traces: Failure and Next-Step Prediction — Compresses LLM agent traces into finite-state machines for next-step and failure prediction — a safety-auditing tool for agent behavior.

💬 Z.ai confirms Ox Alpha is a new GLM-series model and will release its weights — Z.ai confirms Ox Alpha is GLM-series and will release weights — HN reports it crushing coding tasks via OpenRouter/OpenCode Zen.

💬 Claude Code update hardcodes AgentTool guardrails — Claude Code update hardcodes guardrails: 'Do not call AgentTool unless the user requested it' and workflow restrictions — check if this breaks your sub-agent patterns.

Open-weight coding models are closing the gap (Ox Alpha weights coming), while Claude Code is tightening sub-agent autonomy — operators should re-test both their model choices and their sub-agent patterns.

📚 Read — 5 items

📚 SecOPD: Mitigating Adaptive Prompt Injections by On-Policy Distillation — On-policy distillation with token-level feedback sharply reduces adaptive prompt injection success — a concrete defense for agents exposed to untrusted content.

📚 AI Agents Push Humans Out of the Loop — Mitchell, Ghosh, and Passi map how agent deployments displace human oversight — a must-read for anyone designing review or approval loops.

📚 Show HN: Proliferate- open-source, self-hostable Codex for any coding agent — Open-source, self-hostable Codex for any coding agent — YC S25 founder's Show HN. Worth a look if you want Codex-style orchestration without vendor lock-in.

📚 LLM Agents Perform Controlled Experiments Using Simulation Models — Agents run controlled experiments against simulation models, moving from code generation to hypothesis validation — relevant to scientific and engineering agent workflows.

📚 ADE: Agentic Data Evolution Framework for Human-Centered Objectives — Agentic data evolution framework that optimizes datasets against human-centered objectives — a different angle on data curation for agent training.

Today's read splits between hardening agents against injection and questioning how much human oversight we're actually keeping — both worth acting on before the next deployment.

⚙️ Ship — 2 items

📦 Codex 0.150.0 — Agents can now reference other Codex tasks with @ mentions and read, create, or message them from the terminal. New Interrupt hooks run commands or MCP handlers when a top-level turn is interrupted. Also: untrusted projects no longer supply project-level AGENTS.md instructions.

📦 Claude platform release notes — August 26, 2026 — Compliance API session endpoints are out of beta for Cowork and Claude Code sessions, so orgs can retrieve session transcripts via API. Admin API is now available in the ant CLI and Python, TypeScript, C#, Go, Java, PHP, and Ruby SDKs under client.beta.organization.

Task orchestration and compliance both got more serious today: Codex tasks are now addressable from the terminal, and Claude Code session transcripts are GA via the Compliance API.

📚 Read — 7 items

📚 Are Android GUI Agents Robust Against Runtime Anomalies? AnTrap: Evaluating Agents in Dynamic Adversarial Environments — AnTrap injects dynamic anomalies into Android GUI agent execution trajectories and finds universal vulnerabilities — robustness evals are moving from static benchmarks to adversarial runtime conditions.

📚 MARS: Multi-Specialist LLM Relay System for Competitive Programming — MARS chains retrieval-augmented specialist agents per algorithmic topic to generate, test, and refine C++ solutions — a concrete multi-agent relay pattern for competitive programming.

📚 How loveholidays is making everyone a builder with Codex — OpenAI case study: loveholidays rolls out Codex to non-engineers, turning 'everyone into a builder' — operational detail on deploying coding agents across a travel company.

📚 GitHub Copilot app Customize tab is generally available — GitHub Copilot app Customize tab is GA — teams can bring their own tools into Copilot and manage customization types centrally, moving beyond default integrations.

📚 SchemaRouter: Field-Aware Tool Routing for Efficient Heterogeneous Agentic RAG — SchemaRouter routes agentic RAG queries to tools based on schema fields, cutting overhead in heterogeneous tool environments — field-aware routing beats flat tool selection.

📚 RENDER: Controlling Reader-Facing Evidence in LLM Memory Evaluation — RENDER controls reader-facing evidence in LLM memory evaluation, separating what a model actually retrieves from what's already in context — useful for auditing agent memory claims.

📚 August 2026: LangChain Newsletter — Managed Deep Agents, LLM Gateway, and More — LangChain's August newsletter maps the current surface: managed deep agents, LLM gateway, and agent improvement engine — a quick read on where the framework is investing.

Robustness and routing dominate today's Read: adversarial GUI evals, field-aware tool routing, and memory-evidence control all point to operators needing to test agents under conditions they weren't trained for.

💬 Community — 1 item

💬 Serve Markdown to AI Agents with Accept Headers — HN debate (102 pts, 60 comments) on serving markdown to agents via Accept headers — content negotiation vs dedicated agent endpoints. Fielding's REST trade-off argument resurfaces; a real design question for anyone exposing APIs to agents.

The agent-facing web is being designed in public, and content negotiation is the first real standards fight. If you serve content agents consume, the Accept-header question is coming for your API.

⚙️ Ship — 2 items

📦 Antigravity Google — Generative UI and UI improvements — Antigravity adds generative UI and UI improvements — the changelog entry is thin, but the move toward agent-generated interfaces is worth tracking for Antigravity operators.

📦 Claude platform release notes — August 26, 2026 — Compliance API session endpoints out of beta for Cowork and Claude Code; local transcripts now cover Claude Science and M365 agents. Admin API lands in ant CLI and SDKs.

Compliance and admin tooling is maturing — operators can now pull session transcripts and manage orgs programmatically across SDKs.

🚨 Watch — 1 item

🚨 Salem Robotics — Software for industrial inspection robots; 20 points on HN.

💬 Community — 1 item

💬 Russian-speaking hackers used Cursor to help breach a Belgian chemical company — Bluesky thread: Russian-speaking hackers reportedly used Cursor to help break into a Belgian chemical company. If confirmed, first notable case of an AI coding assistant directly aiding an intrusion.

If AI coding assistants become a standard tool in intrusion workflows, the security conversation shifts from 'can agents be jailbroken' to 'how do we detect agent-assisted attacks'.

📚 Read — 5 items

📚 JIT-Agent: Scaling Harness Intelligence via Just-in-Time Harness Evolution — JIT-Agent trains a model to synthesize adaptive agent harnesses for off-the-shelf LLMs — harness intelligence as a learned layer instead of hand-built scaffolding.

📚 When "Must" Becomes "Maybe": Constraint Weakening in LLM Agent Workflows — Multi-stage LLM workflows lose operational constraints when intermediate artifacts turn binding prerequisites into non-binding context — a failure mode most evals miss.

📚 Nexus: Depth-Adaptive KV-Cache Splicing and Retrieval-Decoupled Tool Routing for Agentic LLMs on Unified Memory — Nexus proposes depth-adaptive KV-cache splicing and retrieval-decoupled tool routing for agentic LLMs on unified memory — targets the memory and tool-call bottleneck in long-horizon agents.

📚 LangSmith Engine: How We Built an Agent for Improving Agents — LangChain details LangSmith Engine, their agent-for-improving-agents — an autonomous evaluation and improvement loop. Useful pattern for anyone building self-improving agent pipelines.

📚 The Future of SaaS Is Apps That Agents Can Use — Lovable CTO on shifting from app-building to MCP-powered 'capabilities' — the SaaS surface agents actually consume. Signals where agent-native tooling is heading.

Today's Read lane clusters around making agents more reliable: learned harnesses, constraint preservation, memory/tool routing, and self-improving loops. The common thread is that hand-built scaffolding is the bottleneck.

💬 Community — 3 items

💬 fasterthanli: if your agent harness calls itself an "operating system," it better boot from UEFI — fasterthanli draws the line on "agent OS" branding: a harness that calls itself an operating system should boot from UEFI. The naming inflation in agent tooling is getting called out — 99 likes and climbing.

💬 The Handoff Tax: Continuing Non-Native Trajectories in LLM Agents — What happens when a coding agent switches models mid-trajectory: measurable degradation — the "handoff tax." Continuing a trajectory with a different model than the one that started it costs performance. Relevant for anyone mixing models in agent workflows.

💬 SWE Refactor Bench: Can Coding Agents Complete a Long-Horizon, Whole-Repository Stack Migration? — New benchmark for whole-repository stack migrations — the long-horizon work beyond single-task SWE-bench. Current models rarely complete them. The gap between demo tasks and real refactors is still wide.

Naming inflation on one side, capability gaps on the other — today's community signal is measuring the distance between agent marketing and what models can actually finish.

⚙️ Ship — 2 items

📦 Claude platform release notes — August 27, 2026 — Claude SDKs unify beta files/skills APIs (no more beta headers; `beta.skills.delete()` removes all versions) and add personal/service account keys in Console.

📦 Antigravity Google — Embedded Terminals, Git Version Control, and Audio Attachments — Antigravity adds embedded terminals, git version control, and audio attachments — tighter loop for agentic coding.

SDK consolidation day — Claude unifies beta APIs and adds new key types, while Antigravity tightens the agentic coding loop. Worth checking your beta header usage before the next deploy.

📚 Read — 5 items

📚 Breaking Claude Code Opus 5 Auto Mode — Simon Willison stress-tests Claude Code Opus 5's auto mode — Anthropic's primary prompt-injection defense for coding agents — and documents where it holds and where it breaks.

📚 SDAD: Spec-Driven Agentic Development for the AI-Native SDLC — Spec-driven agentic development for the AI-native SDLC — agents build from formal specs rather than ad-hoc prompts, with implications for reproducibility and review.

📚 FrontierChallenge: Evaluating Scientific Workflow Completion — New benchmark for agents completing multi-step scientific workflows — evaluates end-to-end task completion rather than isolated subtask accuracy.

📚 UrbanGround: From Local Perception to Spatial Agency in a Real-Scale City — Benchmarks whether multimodal LLM agents can sustain reliable navigation and spatial reasoning across a real-scale 3D city — from local perception to spatial agency.

📚 SIMGUIDE: Procedurally Grounded Multi-Context Representations for Personalized Agent Planning — Introduces procedurally grounded multi-context representations for personalized agent planning — plans are anchored in procedural context, not just user profiles.

Prompt injection remains the sharpest edge for coding agents — today's strongest signal is a hands-on break of the latest defense, while the research side keeps pushing benchmarks and spec-driven workflows.

⚙️ Ship — 3 items

📦 Claude platform release notes — August 27, 2026 — Python/TS/Go/Java/Ruby/C# SDKs drop beta headers for files/skills — `client.beta.skills.delete()` now deletes a Skill with all versions, `BetaSkill` renamed `BetaContainerSkill`. Console adds personal and service account keys.

📦 Anthropic Expanding support for scientists — Anthropic launches Claude Science, a product integrating research tools with auditable artifacts, plus new programs for scientists.

📦 Hermes Agent 0.20.6 — Hermes 0.20.6 rolls up ~525 PRs: consent-gated real-profile browsing, desktop Browser with SSH remote-update and fleet profiles, 50+ verified remote MCP servers (Cloudflare, Grafana, Railway), TTL caching for web tools.

SDK migration day: Claude beta files/skills APIs graduate to stable shapes, and Hermes rolls up a month of agent-runtime work. Operators on beta APIs should migrate before the next SDK bump.

💬 Community — 3 items

💬 Cursor used in Russian-speaking hacking campaign against Belgian chemical company and six other firms — Brad Heath reports Russian-speaking hackers used Cursor to help breach a Belgian chemical company and at least six other firms earlier this year. Coding assistants as attack tools is now a documented pattern.

💬 Terminal-Bench-Science: Evaluating AI agents on scientific research workflows — New benchmark for agents doing real scientific research workflows; HN is stress-testing whether the tasks in harbor-framework/terminal-bench-science are actually hard.

💬 Show HN: We built open OpenRouter that turns usage into a better model — Open-source Rust model gateway that routes across self-hosted, frontier, and open models — and uses usage data to improve the model. 203 points on HN.

The community is converging on two questions: can agents do real scientific work, and what happens when coding assistants become attack tools. Both answers are getting sharper.

📚 Read — 5 items

📚 Training Agents to Evolve with Their Harness: TaoLive Digital Avatar Agent Technical Report — Harness-Aware Training lets compact models adapt to evolving digital-avatar harness configs without retraining — low latency, high accuracy for production avatar agents.

📚 TTPO: Test-Time Policy Optimization — Test-Time Policy Optimization enables label-free test-time training for mathematical reasoning by asymmetrically distilling agreeing rollouts — stays robust even when majority-vote labels are noisy.

📚 AI Agent Latency 101: How do I speed up my AI agent? — LangChain's practical guide to cutting agent latency — walks through the levers that actually move the needle: model choice, streaming, and parallel tool execution.

📚 Wiki Memory: File-Based Memory for AI Agents | LangChain — LangChain introduces Wiki Memory — file-based persistent memory for agents, giving them structured, editable knowledge across sessions instead of just vector search.

📚 How Candidly Built State-Aware Agent Harnesses in LangSmith — Case study: how Candidly built state-aware agent harnesses in LangSmith — the state architecture that keeps long-running agents coherent across turns.

Memory and latency are the two levers operators are fighting over this week — LangChain's new file-based memory and its latency guide both point to the same conclusion: state management is the bottleneck.

💬 Community — 3 items

💬 Thinking on Shots — A paper proposing an agentic framework for consistent multi-instruction editing across long multi-shot videos.

💬 CaSKG — A paper on using counterfactual-causal graphs to improve how LLM agents retrieve executable skills from libraries.

💬 Task-CoEvolve — A paper proposing adaptive validation task selection to optimize LLM harness performance estimation.