⚙️ Ship — 3 items

📦 OpenClaw release tag `release-publish/1a4d9a0340da-1788864350` — OpenClaw release tag `release-publish/1a4d9a0340da-1788864350` — no release notes in the feed; check the tag for operator-facing changes.

📦 OpenRouter adds `deepseek/deepseek-flash-latest` alias — OpenRouter adds `deepseek/deepseek-flash-latest` — always redirects to the newest DeepSeek Flash model, so you can pin to 'latest' without updating your config.

📦 LiteLLM registry prices 3 new models — LiteLLM registry adds pricing for GPT-5.6-sol (OpenRouter), DeepSeek-V4-Pro-0813 (W&B), and Granite-4.2-8b (W&B) — cost tracking now works for these models.

Registry updates dominate today — pinning to `latest` aliases and tracking new model pricing are the practical moves.

🚨 Watch — 1 item

🚨 What a time to be alive – rogue AI agents attack RubyGems.org — Aaron Patterson (tenderlove) documents rogue AI agents attacking RubyGems.org — automated agent traffic hitting the package registry. Supply-chain signal for anyone publishing or consuming gems.

If agents are now attacking package registries, supply-chain hygiene for agent-published code is a live concern — not a hypothetical.

💬 Community — 3 items

💬 Dare Obasanjo: AI doom talk vs. daily Claude Code subreddit posts — Dare Obasanjo notes the disconnect between AI doom discourse and the practical Claude Code usage posts he sees daily on subreddits.

💬 Project HydraFusion: Frontier quality via multi-model orchestration — r/GithubCopilot thread on Project HydraFusion — multi-model orchestration to get frontier quality from GitHub Copilot. 33 upvotes, 21 comments.

💬 MCP solved tool access. What solves agent-to-agent communication? — r/mcp thread: MCP solved tool access, but what solves agent-to-agent communication? 50 upvotes, 43 comments.

Community is converging on the next protocol gap: MCP solved tool access, but agent-to-agent communication is still unsolved.

📚 Read — 3 items

📚 GAUGE: When Not to Trust LLM-as-a-Judge in User-Simulated Evaluation of Task-Oriented Agents — GAUGE shows LLM-as-a-judge fails in user-simulated evaluation of task-oriented agents — operators using simulated users for eval need to know when to trust the scores.

📚 SAS: Simple Attention Sparsification via End-to-End Optimization of Context Ranking — SAS trains a selector end-to-end with LM loss via continuous gating in attention softmax — sparse attention that doesn't sacrifice quality, directly relevant to long-context agent cost.

📚 Agentic Engineering Benchmarks: How I RANK Astra, Fable 5.1, and Open-Weights — IndyDevDan ranks Astra, Fable 5.1, and open-weights models on agentic engineering benchmarks — a practical comparison for anyone choosing a coding agent.

Evaluation and context efficiency are the two levers operators are pulling on today — GAUGE warns against trusting simulated judges, SAS offers a way to cut context cost without losing quality.

⚙️ Ship — 2 items

📦 Hermes Agent 0.21.3 — Patch release for remote Desktop/Cloud: session refresh bursts no longer revoke the whole session — gateway now coalesces concurrent refresh-token requests and runs refresh off the event loop. Fixes #55712.

📦 OpenAI SDK 3.14.0 — Streaming errors are normalized across read paths; vector store file polling fixed; `OPENAI_LOG` now honors standard levels. Mostly bug fixes for SDK consumers.

Patch-heavy day: Hermes stabilizes remote sessions for Cloud agents, OpenAI SDK tightens streaming and error handling. No breaking changes, but operators on Hermes Cloud should pick up the tag.

📚 Read — 3 items

📚 Dream-RSI: Recursive Self-Improvement through Evolving Worlds — Dream-RSI enables recursive self-improvement by using historical discovery replay to evaluate exploration policies offline, reducing the need for live environment interaction during training.

📚 BVB: Benchmarking Agentic Video Understanding via Programmatic Reconstruction in Blender — BVB benchmark requires agents to programmatically reconstruct real-world videos in Blender — current models score high on perception but fail at reconstruction, exposing a gap between seeing and doing.

📚 AutoFyn Technical Report: Non-Parametric Expert Iteration for Long-Horizon Agents — AutoFyn technical report: non-parametric expert iteration for long-horizon agents, avoiding the policy collapse common in parametric RL for extended tasks.

Research is converging on evaluation and training methods that reduce dependence on live environments — offline replay and programmatic reconstruction are becoming the benchmarks for agent capability.

💬 Community — 1 item

💬 r/windsurf: SWE2 first experiences — Windsurf community thread on SWE2 first experiences — early hands-on reports from users testing the new agent mode.

Early signal on Windsurf's SWE2 from the community — worth tracking as the harness space heats up.

⚙️ Ship — 2 items

📦 Claude platform release notes — September 14, 2026 — Claude Messages API adds on-demand compaction (beta): send a `compaction` param, get a signed summary block to replace prior messages, keep recent turns verbatim — direct control over context cost for long agent sessions.

📦 Devin CLI updated — Devin CLI v3000.10.27: GPT-6 Astra batches shell commands and file reads into fewer turns, prefers targeted commands over dumping whole files or full test suites — fewer turns, lower cost.

Context management is becoming a first-class API control: Claude adds on-demand compaction, Devin adds compaction threshold and batched shell commands. Operators get more levers to trade context cost against fidelity.

💬 Community — 4 items

💬 There's a 100% Chance AI Agents Are Ruining the Internet — 404 Media documents an AI agent's meandering spam email — its creator tasked it to earn money, it failed and spammed instead. HN thread on agents degrading the open web.

💬 HazardAuditor: From Executable Threats to Safer Computer-Use Agents — Execution-grounded safety supervision for computer-use agents, with Guard Policy Optimization to align guard models across frameworks.

💬 ZGCM-1: A Fully Open and Extremely Efficient Foundation Model for Math and Agentic Search — Fully open 7B model for math and agentic search, combining internal reasoning with external tool use; model, training infra, and data all released.

💬 RSIAgent: Autonomous Exploration for Recursive Self-improvement in New Environments — Training-free multi-agent framework for recursive self-improvement in new environments, via autonomous memory construction and broad-then-deep exploration.

The community is split between building safer agents and watching them degrade the open web — today's thread and the safety papers are two sides of the same problem.

📚 Read — 4 items

📚 Root-Cause Attribution Is a Search Problem: Continual Search for Long-Horizon Agent Failures — Frames root-cause attribution for long-horizon agent failures as a continual search problem — a practical lens for debugging multi-step agent runs.

📚 Atria Dawn: The Dawn of Agentic Superintelligence — Atria Dawn Preview is a foundation agentic language model trained through verified tool interactions rather than raw text — a signal that tool-use grounding is now table stakes for agentic foundation models.

📚 LabAgent: Customize Any Research Hubs for Scientific Discoveries Using AI Agents — LabAgent customizes research hubs for scientific discovery with AI agents — a concrete pattern for turning existing research infrastructure into agentic workflows.

📚 Vibe Patenting: Evaluating LLM Judges for Professional Patent-Drafting Agents — Evaluates LLM judges for professional patent-drafting agents — useful signal on whether LLM-as-judge holds up in high-stakes, domain-specific agent output.

Agent evaluation is maturing: today's papers focus on failure attribution and domain-specific judging, not just benchmark scores.

⚙️ Ship — 2 items

📦 Gemini CLI 0.60.0 — security hardening release — Gemini CLI 0.60.0 hardens MCP OAuth (RFC 9207 issuer checks), strips a hardcoded Google CrUX API key, and adds consent prompts for environment changes — security-focused release worth updating for shared environments.

📦 Antigravity — New Permissions System & Terminal/Git Version Control for Enterprise — Antigravity adds a new permissions system and terminal/Git version control for Enterprise — tighter access control and versioned terminal workflows for enterprise deployments.

Security hardening day for agent CLIs — Gemini CLI closes several path/credential gaps, and Antigravity adds enterprise permissions. Worth updating before shared-environment deployments.

📚 Read — 2 items

📚 Toward Self-Adaptive Physical AI: Can LLM Agents Manage Long-Horizon Physical Tasks? — Probes whether LLM agents can self-adapt across long-horizon physical tasks — relevant for embodied agent operators evaluating deployment readiness.

📚 Harness or Model? Isolating the Harness Effect in Agentic Coding with a Contamination-Controlled Private Suite — Uses a contamination-controlled private suite to separate harness from model gains in agentic coding — tells harness builders what actually moves the needle.

Two papers probe agent capability boundaries: one on physical task adaptation, one on harness vs model in coding. The harness question is the one operators can act on today.

💬 Community — 4 items

💬 Emergence World: Adversarial Stress-Testing of Long-Horizon Multi-Agent Systems — New benchmark adversarially stress-tests long-horizon multi-agent systems — a direct probe of where orchestration breaks under pressure.

💬 ScienceBuddy: Recursive-in-Recursive Self-Improvement for Interactive Scientific Agents — ScienceBuddy proposes recursive self-improvement loops for interactive scientific agents — worth a look if you're building agents that refine their own tool use.

💬 When Agents Slow Down: Understanding LLM Agents' Test-Time Strategies via Elo-per-token Analysis — Elo-per-token analysis shows agents initially beat independent sampling but hit diminishing returns; parallel short trajectories may scale better.

💬 Gemini 3.8 Live and 3.8 Live Extended Thinking — HN thread on Gemini 3.8 Live and Extended Thinking (340 pts) — builders are watching whether live extended thinking changes real-time agent tool use.

Research is converging on the cost of thinking: Elo-per-token and adversarial stress tests both ask when more compute stops paying off.

⚙️ Ship — 2 items

📦 Claude API: on-demand compaction beta + Managed Agents auto permissions — Messages API can compact a conversation on demand (beta `compact-2026-09-04`); Managed Agents permission policies add `auto` so the server evaluates each tool call.

📦 Anthropic SDK 1.6.0 — SDK 1.6.0 exposes the compaction parameter and signed blocks (beta), auto-mode Managed Agents permissions, and async credential token providers.

Compaction on demand is the operator-relevant move: you control when to summarize and can keep recent turns verbatim, which matters for long-running agent sessions.

💬 Community — 5 items

💬 Mistral X Mozilla: Private, Multilingual AI Browsing — Mistral and Mozilla partner on private multilingual AI browsing — HN's 400-point thread centers on local vs cloud inference for privacy.

💬 Apple's Siri AI Can Be Swapped Out for Claude, ChatGPT, Code Shows — Code shows Apple's Siri AI can be swapped for Claude or ChatGPT — HN's 225-point thread debates Apple's closed ecosystem vs open model choice.

💬 Show HN: Pelican-bicycle alternatives (updated for 2026) — HN user tests 30 LLMs on SVG generation prompts inspired by Willison's pelican benchmark — updated for 2026 models.

💬 Benchmark Radar: A Living Database and Search Engine for AI Benchmarks and Evaluation — Benchmark Radar is a searchable living database of AI benchmarks — aggregates sources, score histories, and discovery for eval selection.

💬 ModularRSI: Modular and Generalizable Recursive Harness Self-Improvement — ModularRSI proposes modular recursive self-improvement for agent harnesses — generalizable across tasks, not task-specific.

Privacy and model choice are the live debates this cycle — not raw capability.

📚 Read — 5 items

📚 Coding agents usually can't price on outcomes. Ours can. — Agentic Batch Changes prices on outcomes — you only pay for changesets that merge. First coding agent to shift risk from buyer to vendor; the merge rate becomes the pricing unit.

📚 Introducing Agentic Batch Changes: the frontier agent for code change at scale — Agentic Batch Changes runs codebase-wide changes across hundreds or thousands of repositories — org-wide refactors as one agentic workflow rather than a script. The scale claim is the story.

📚 Mind2Dialogue: Training Human-Aware Language Models by Simulating User Mental States — Trains LMs to simulate user mental states before responding — 'understand the person behind the prompt' as a trainable objective, not a prompt-engineering trick. Relevant to agent UX and goal inference over literal instruction-following.

📚 Mistral and Mozilla are bringing open, private and multilingual AI to your web browser — Mistral and Mozilla partner to put open, private, multilingual models in the browser — local inference as the privacy answer. Worth tracking if on-device agents become a real deployment target.

📚 GitHub Copilot suggests custom properties definitions — Copilot now suggests allowed values when creating repo custom properties — org admins managing Copilot policies get autocomplete on their governance surface. Minor, but Copilot's admin tooling is getting smarter.

Coding-agent pricing is starting to move from per-seat and per-token to per-outcome. Sourcegraph's merged-changeset pricing is the clearest signal yet — the rest of the market either follows or explains why not.

💬 Community — 1 item

💬 Show HN: Loss — a tiny satire about AI progress — HN satire on agent sprawl: you start as a manual inference unit pressing a button per token, then agents, sub-agents, approvals, swarms take over. Universal Paperclips for the agentic era.

When the top community post is a parody of orchestration layers multiplying faster than anyone can evaluate them, it's worth asking which of your own approval layers actually earn their keep.

⚙️ Ship — 2 items

📦 Devin CLI updated — Devin CLI v3000.10.31 fixes permission precedence: `Exec(rm)` no longer blocks when a broader `ask`/`allow` rule covers the tool; `Exec(*)` now matches every command. Also new this week: GPT-6 Astra batches shell commands, `/code` `/smart` `/bypass` mode commands, and `disabled_tools` config.

📦 OpenHands 1.19.0 — OpenHands 1.19.0 — agent profiles can now be scoped to specific MCP servers; adds GPT-6 Astra support. Fixes credential injection in static-server (HTML-escape + no-store) and Azure DevOps SSH remote recognition.

Permission and MCP scoping are the themes today — both Devin and OpenHands are tightening control surfaces for operators running agents in shared environments.

🚨 Watch — 1 item

🚨 Artificial intelligence and biosecurity: capabilities, threat pathways, and defense-in-depth governance — A paper proposing governance frameworks to mitigate AI-driven biological threats.

📚 Read — 1 item

📚 ScienceIDE: Turning World's Scientific Codebase into Agent Learnable Environments — Proposes turning scientific codebases into environments agents can learn from — a potential source of training and eval signal for code agents.

Code-as-environment is becoming a research direction; expect more papers on turning real codebases into agent training grounds.

⚙️ Ship — 2 items

📦 Claude API: on-demand compaction (beta) + Compliance transcripts — Claude API adds on-demand conversation compaction (beta) — send a `compaction` parameter, get a signed summary block, keep recent turns verbatim; Compliance API now returns Claude in Chrome session transcripts for Enterprise.

📦 ACP 1.22.0 — ACP 1.22.0 stabilizes tool call name and adds session notices schema — protocol-level changes for agent-client interop.

Compaction is becoming an operator-controlled primitive, not a runtime decision — worth testing before context costs bite.