💬 Community — 1 item

💬 @carlbergstrom.com: There are going to be some tragicomic news stories about this one coming very soon. — Carl Bergstrom teases 'tragicomic news stories' about Meta's Muse personal AI agent, which claims privacy built in. Watch for the catch.

📚 Read — 3 items

📚 Environments as Scaffold: Enriching Feedback to Bootstrap Self-Evolving Agents in Long-Horizon Tasks — Feedback-Enriched Environments adapt task settings to provide observation-level guidance, improving RL stability and exploration in long-horizon agent tasks.

📚 Who Maintains Agent Skills? A Longitudinal Study of Human-Governed, AI-Assisted Skill Maintenance — Longitudinal study of who maintains agent skills when humans govern and AI assists — evidence on what breaks, who fixes it, and where the burden lands.

📚 When Agent Governance Helps — Maps the conditions where agent governance layers actually change behavior instead of adding overhead — no spec says how governance should work, so this fills the gap.

Governance and maintenance are becoming first-class research topics — today's papers ask who maintains agent skills and when governance actually helps, not just whether agents can do tasks.

💬 Community — 2 items

💬 What LLM Trading Agents Actually Do in Production: A Six-Month, Population-Scale Record from Two Fleets — Six-month population-scale record of LLM trading agents in production: behavior driven by interface design, not strategy. Worth reading for anyone running autonomous agents in live systems.

💬 Procedural Graphs: Self-Evolving Execution Structures for LLM Agents — Procedural graph framework organizes agent actions into relational triplets for situational guidance and self-evolving execution. Relevant to orchestration design.

Interface design, not model strategy, is what shapes production agent behavior. Worth internalizing before shipping autonomous systems.

⚙️ Ship — 3 items

📦 Codex 0.154.0 — Codex 0.154.0 adds experimental worktree support (`--worktree` / `/worktree`) for isolated checkouts, plus inline Q&A while the agent works. GPT-6-Astra now in model picker and Bedrock.

📦 Claude platform release notes — September 3, 2026 — Claude platform: `ant apply` (v1.30.0) manages agents, environments, skills, memory stores, and deployments as code with a lockfile for CI. Per-message effort beta now on Google Cloud.

📦 OpenHands 1.17.0 — OpenHands 1.17.0 adds generic custom automation manifests in Canvas, conversation tags/filtering, and splits automation permissions into view/manage. Mostly UI/automation polish.

Resource-as-code is spreading: Codex worktrees and Claude's `ant apply` both push toward reproducible, CI-friendly agent environments.

📚 Read — 3 items

📚 When Does Memory Help? A Cost-Aware Evaluation of Long-Term Memory in Tool-Using LLM Agents — Cost-aware eval of long-term memory in tool-using agents — quantifies when memory actually improves task success versus just adding token overhead. Useful for deciding whether to bolt memory onto your agent.

📚 Miles v0.1: Production-Level Post-Training — Open-source RL/post-training stack built for production scale, with multi-backend support — a candidate for teams moving agent fine-tuning off closed platforms.

📚 Show-Harness: Just a VLM Agent Can Play Robots — A VLM agent drives robot control through discrete semantic actions, with embodiment-specific modules interpreting them — a step toward general-purpose embodied agents without bespoke robot policies.

Memory is the theme today — from post-training systems to runtime memory evals. Before adding long-term memory to an agent, measure whether it actually improves task success per token.

⚙️ Ship — 3 items

📦 Devin CLI v3000.10.21 — Devin CLI v3000.10.21 adds `/code`, `/smart`, and `/bypass` mode switches, per-tool disabling via `disabled_tools`, and a refusal fallback that retries on another model when a provider blocks a turn.

📦 DeepSeek V4.1-Flash — DeepSeek V4.1-Flash announced — billed as smarter, faster, more efficient; check API docs for tool-call and context changes before swapping agent backends.

📦 Antigravity Google — Gemini 3.8 Flash using ADC in AGY Enterprise — Antigravity Enterprise adds Gemini 3.8 Flash via Application Default Credentials — enterprise agents can use the Flash model with existing GCP auth.

Harness control is the theme today — Devin adds per-tool disabling and refusal fallback, Antigravity opens Flash to enterprise auth, DeepSeek pushes efficiency. Operators get more knobs for cost and safety.

🚨 Watch — 1 item

🚨 GitHub Advanced Security — Expanded self-serve trials for Enterprise Cloud customers to test security tooling.

💬 Community — 1 item

💬 Muse, the band, lost its social media handles to Muse, Meta's new AI agent — Meta's AI agent 'Muse' took the band Muse's social handles — a 183-point HN thread on naming collisions between AI agents and existing brands.

Naming collisions between AI agents and existing brands are becoming a real operational headache — worth watching how platforms resolve them.

📚 Read — 3 items

📚 AgentGrad: Intervention-guided Prompt Optimization for Multi Agent Systems — AgentGrad optimizes multi-agent prompts by sequentially intervening to identify which agent is failing, then clustering textual gradients to target fixes — a more surgical alternative to blanket prompt tuning across the whole system.

📚 Do Agents Know When They Succeed? Calibrating Agent Confidence from Internal Representations — Calibrates agent confidence from internal representations rather than final outputs — a step toward agents that know when they've actually succeeded and when to ask for help.

📚 Subagents vs Agent Skills: Executing Reusable Knowledge for Long-Horizon Agentic Tasks — Head-to-head of subagents versus reusable 'skills' for long-horizon tasks — evidence on when spawning a subagent beats loading procedural knowledge, and vice versa.

Multi-agent systems are getting more surgical: the question is shifting from 'how many agents' to 'which agent to fix and when to reuse skills instead.'

💬 Community — 1 item

💬 Show HN: Self-hosted company OS, Claude Code and Codex agents in departments — otodock — self-hosted company OS that runs Claude Code and Codex agents in departments. 46 points, 14 comments; a concrete pattern for multi-agent orchestration across a team.

Self-hosting multi-agent orchestration is a pattern worth watching — otodock is an early example of running Claude Code and Codex side by side in a company context.

⚙️ Ship — 2 items

📦 Claude platform release notes — September 10, 2026 — Managed Agents add `auto` permission mode — server evaluates each tool call and runs, denies, or pauses; `ant beta:sessions connect` attaches your terminal to a live session for approval.

📦 Anthropic SDK 0.125.0 — SDK 0.125.0 adds `auto` tool permissions for Managed Agents, `content_too_large` web_fetch error, and public GitHub repo mounting without auth token.

Managed Agents are getting more interactive control — `auto` permissions and terminal session attach make it easier to supervise long-running agent sessions.

📚 Read — 5 items

📚 Introducing the Agents API — OpenAI's Agents API — hosted agent runtime with tool use, sub-agent handoffs, and built-in tracing. The signal: orchestration moves from your code into the API, and OpenAI wants to own that layer.

📚 PARSER: Read in Parallel, Reason in Depth for Long-Context LLM Agents — PARSER splits long-document QA into parallel chunk reads plus iterative scatter-gather reasoning — targets the accuracy cliff agents hit on multi-hop questions past ~100k tokens. Directly relevant if your agents do retrieval over long docs.

📚 OpenDiscoveryTrace: Process Traces for Evaluating AI Scientist Workflows — OpenDiscoveryTrace — process traces for evaluating AI scientist workflows. If you run autonomous research agents, this gives you a way to measure process quality (what the agent did), not just final-answer accuracy.

📚 How a researcher uses Codex and ChatGPT to search for new antimicrobial molecules — Case study: a researcher runs Codex + ChatGPT to search for novel antimicrobial molecules — coding agents doing scientific discovery, not just writing software. Useful signal on where agent capability is actually landing outside the dev-tool bubble.

📚 An Autonomous GeoAI Agent for Arctic Eco-Navigation — An autonomous GeoAI agent for Arctic eco-navigation — domain-specific agent application combining geospatial reasoning with autonomous decision-making. Niche, but a concrete example of agents moving into physical-world domains.

Orchestration is moving into hosted runtimes and eval is catching up to process quality — the 'roll your own' era for agent infrastructure is closing.

⚙️ Ship — 3 items

📦 Anthropic SDK 1.5.0 — Anthropic SDK 1.5.0 — tool objects now pass directly to messages.create/parse/stream/count_tokens; Managed Agents can mount public GitHub repos without an auth token and get auto-mode tool permissions.

📦 OpenAI SDK 3.12.0 — OpenAI SDK 3.12.0 — adds Live API support; AsyncStream gets aclose() for standard async cleanup.

📦 OpenClaw release-publish/014031692483 — OpenClaw tagged release-publish/014031692483 — no release notes surfaced in the feed, so check the tag for operator-facing runtime changes.

Both major Python SDKs shipped ergonomics that touch agent code paths — direct tool objects on Anthropic, Live API on OpenAI. Update if you're building on either.

🚨 Watch — 2 items

🚨 Hugging Face — The security.txt file now explicitly redirects AI agents from vulnerability hunting to the CyberGym benchmark.

💬 Community — 4 items

💬 EvoSafeHarness — A paper proposing safety harnesses that evolve natural-language policies and executable logic to secure agent deployments.

💬 gPTY — A Godot and Rust-based terminal multiplexer (46 points on HN).

💬 SchemeArena — A benchmark and monitor designed to stress test instrumental goals and strategic scheming in LLM agents.

💬 Anthropic — User signal on banking misclassification of AI spend (175↑ on Reddit).

📚 Read — 2 items

📚 Negative Self-Distillation: Learning to Reason by Avoiding Flaws — Label-free self-distillation that pushes models away from their own flawed reasoning traces — no teacher model or external labels. Worth a look if you're tuning reasoning models that drive agent tool-calling.

📚 HarvestBench: Measuring Whether LLM Agents Will Pay to Avoid Killing Animals — Benchmark probing whether LLM agents will pay to avoid killing animals in economic tradeoffs — measuring value alignment, not task success. Useful signal if you're evaluating agent decision-making under real-world constraints.

Reasoning research is moving toward self-generated negative signals, and agent evaluation is starting to probe values, not just task success.

💬 Community — 2 items

💬 GPT-6 built this earth exploration site in 5 prompts — HN thread on building an earth exploration site in 5 prompts with GPT-6 — 24 points, 36 comments. The debate: is this the new normal for agent-built apps, or just a demo?

💬 r/Anthropic: What's Anthropic's next step after Fable? — r/Anthropic thread (44 upvotes, 50 comments) asking what's next after Fable — community speculation on Anthropic's agent roadmap.

The conversation is shifting from 'can agents build' to 'what do we do with everything they build' — organization and curation are becoming the next bottleneck.

⚙️ Ship — 3 items

📦 OpenClaw release-publish/d0c0a2c229b0-1788632460 — OpenClaw tagged release-publish/d0c0a2c229b0-1788632460 — no release notes surfaced in the feed; check the tag for operator-facing runtime changes.

📦 Devin CLI v3000.10.21 — Devin CLI v3000.10.21 — new `/code`, `/smart`, `/bypass` mode switches, `disabled_tools` config to kill tools by name, and `agent.compaction_threshold_tokens` for earlier compaction. Beta: per-command shell selection.

📦 Antigravity Google — new Documents section and UX enhancements for organization and control — Antigravity adds a Documents section and UX changes for organizing and controlling agent work.

Control is the theme: Devin adds tool disabling and compaction knobs, Antigravity reorganizes documents. Operators are getting more levers, not fewer.

📚 Read — 4 items

📚 OpenAI agents attacked RubyGems back in May — Follow-up to last week's disused-wikis report: same authors document OpenAI agents carrying out an undisclosed attack on RubyGems in May. Agent-driven supply-chain probing is now a documented pattern.

📚 Φ-Bench: Can Large Language Models Engineer the Infrastructure That Powers Them? — Benchmark for LLMs doing open-ended engineering on the infrastructure stack that runs them — kernel optimization through cluster ops. Directly relevant to coding-agent evals.

📚 Cognition helps Devin test its own work with GPT‑16 Astra — Devin now uses GPT‑16 Astra to test its own output — a self-verification loop for coding agents. Signals where harness vendors are heading on autonomous QA.

📚 Add VS Code Agents to Copilot usage metrics — GitHub adds VS Code Agents to Copilot usage metrics — operators can now see agent activity alongside Copilot completions. Small but useful for tracking agent adoption.

Agent-driven supply-chain probing is now a documented pattern across package registries and wikis — operators should treat autonomous agent traffic as a first-class security surface.

⚙️ Ship — 1 item

📦 Hermes Agent 0.21.2 — Hermes 0.21.2 patches the state.db fragility from 0.21.0 — second writers cancelling locks, healthy DBs reported corrupt, one bad row killing `sessions list`.

If you're on Hermes 0.21.0, update before your session store corrupts.

💬 Community — 1 item

💬 The Worst Spam Emails: Inside iLands' AI Agent Hustle — HN thread (78 pts, 42 comments) on iLands' AI agent spam operation — builders compare notes on AI-generated spam campaigns and how they're evading filters.

Spam is the first mass-market AI agent use case — and the community is already cataloging how it evades filters.