💬 Community — 2 items

💬 Show HN: Pizza Bot – An inbox for AI agents that work in the background — Self-hosted desktop app (Mac/Win/Linux) that runs AI agents in the background and surfaces their output in an inbox — 59 points and 33 comments of HN debate on background-agent ergonomics.

💬 Open-sourced jev architecture last year with model,paper and dataset — HN thread on a non-autoregressive architecture for JSON-schema-constrained probability prediction, open-sourced with model, paper, and dataset. Directly relevant to structured outputs in agent tool calling.

Both threads circle the same gap: agents that run unattended need better ways to produce and deliver structured output. Background-agent UX and constrained decoding are two sides of the same problem.

📚 Read — 4 items

📚 Confidence Comes from Experience: Experiential Confidence Estimation from Reasoning to Agents — XConf proposes confidence estimation grounded in experiential outcomes rather than model introspection — a calibration approach that could tell agents when to trust their own reasoning before acting.

📚 HypoEvolve: Genetic Algorithms Enable Multi-Agent LLMs to Discover Scientific Hypotheses — HypoEvolve applies genetic selection across multi-agent LLM outputs to evolve scientific hypotheses — an orchestration pattern worth stealing for any agent swarm doing open-ended search.

📚 GraphEcho: Structural Redundancy and Evidence Provenance in LLM Graph Agents — GraphEcho dissects where LLM graph agents duplicate structure and lose track of evidence provenance — useful for anyone building retrieval or knowledge-graph agent loops.

📚 ZGCM-1: A Fully Open and Extremely Efficient Foundation Model for Math and Agentic Search — ZGCM-1 is a fully open model tuned for math and agentic search, claiming extreme efficiency — worth a look if your agents spend tokens on search-heavy reasoning.

Confidence and provenance are the through-line today: three of four papers attack how agents know what they know before acting.

💬 Community — 2 items

💬 @freyjavalentine.bsky.social: Saw a term calling the act of shitting out Claude code without review and expecting your coworkers to fix it — Bluesky thread coining a term for unreviewed Claude code dumped on coworkers — the 'agent slop' debate continues.

💬 Show HN: Aclif – Agent CLI framework: one grammar, canonical names across SaaS — Show HN: Aclif — agent CLI framework with a single grammar and canonical names across SaaS providers. Ships provider schemas in the binary, no credentials needed for discovery.

The agent CLI space is consolidating around canonical schemas, while the 'unreviewed Claude code' problem finally gets a name.

⚙️ Ship — 2 items

📦 Codex 0.155.0 — Codex 0.155 adds experimental /voice conversations, task archiving/deletion, Touch ID verification for MCP requests, and configurable daemon update schedules.

📦 OpenHands 1.20.0 — OpenHands 1.20 lets agent profiles select which secrets are available and automations pick saved profiles; Docker conversation runtime settings are now forwarded.

Both releases tighten operator control: Codex adds Touch ID for MCP and configurable daemon updates, OpenHands scopes secrets per profile. The trend is toward more granular session management.

📚 Read — 2 items

📚 SoL-Pi: Recursively Scaling Auto-Research Loops for Efficient Agent Harness — Proposes recursively scaling auto-research loops for agent harnesses — targeting unattended coding agents that move beyond supervised code completion.

📚 RetireOPD: Self-Retiring On-Policy Distillation for Agentic Reinforcement Learning — Self-retiring on-policy distillation for agentic RL — the distillation schedule adapts and stops when the student stops benefiting, instead of following a fixed plan.

Both papers replace fixed training schedules with adaptive control — agent training is converging on self-regulating loops.

⚙️ Ship — 2 items

📦 Anthropic Life Sciences Verification Program — Anthropic opens Mythos, Opus, and Sonnet to life science professionals with more permissive biology safeguards — relevant for biotech agent builders needing domain-specific model access.

📦 ACP 1.23.0 — ACP 1.23.0 adds a v1 session notice capability (unstable) — a new protocol signal for session lifecycle, useful for client/server implementations tracking session state.

ACP keeps adding session lifecycle primitives; Anthropic's life sciences program shows model access expanding into regulated domains — both worth tracking for domain-specific agent builders.

💬 Community — 1 item

💬 Launch HN: Skillsync (YC W26) – AI chat sessions made portable across agents — YC W26 launch: Skillsync makes AI chat sessions portable across coding agents — move context between Claude Code, Cursor, etc. 61 points, 53 comments on HN; the debate is whether cross-agent portability is a real workflow need or a solution looking for a problem.

Cross-agent session portability is becoming a product category — operators juggling multiple coding agents may soon have a standard way to move context.

📚 Read — 3 items

📚 Closed-World Resolution Against Tool Hallucination in LLM Agents — Proposes closed-world resolution to stop LLM agents from hallucinating tool calls — a top production failure mode when agents invoke tools that don't exist or misuse schemas.

📚 MAGS: Multi-agent Auto-formalization Guarantees Safety for Agentic Outputs — Multi-agent auto-formalization claims formal safety guarantees for agentic outputs — worth a look if you need verifiable agent behavior beyond prompt-level guardrails.

📚 Do AI Agents Understand Computer Architecture? — Benchmark probing whether AI agents actually understand computer architecture — useful signal for coding-agent evals and where they break on low-level reasoning.

Reliability research is converging on the failure modes that actually bite in production: hallucinated tool calls and unverifiable outputs.

💬 Community — 1 item

💬 2,151 IPs banned from The Cutting Room Floor wiki for Claude Code scraping — 2,151 unique IPs hit The Cutting Room Floor wiki with Claude Code and got banned — sites are actively blocking agent traffic. Worth noting for anyone running agents against public wikis.

Agent traffic is now a first-class concern for site operators — expect more aggressive blocking as scraping agents proliferate.

⚙️ Ship — 2 items

📦 Antigravity Google — Custom agent controls and keyboard navigation — Antigravity adds custom agent controls and keyboard navigation — more direct steering of agent behavior in the harness.

📦 xAI API release notes — September — xAI's September API release notes are live — Grok 4.6 is the current model line. Worth a scan for tool-use and structured-output changes that affect agent builds.

Control surface is the theme today — Antigravity adds direct agent steering while xAI refreshes its API line. Ergonomics, not raw capability, is where the moves are.

📚 Read — 4 items

📚 Characterizing Web Search by Conversational LLM Agents: From Search Decisions and Strategies to Results and Responses — Empirical study of how conversational LLM agents decide when to search, which strategies they pick, and what they return — useful signal for tuning your own agent's search policy.

📚 Agentgit: a Git host for AI agents with no accounts — Git host where the repo name is the identity — no accounts, tokens, or keys; agents push to a name and hand off the URL. Open source and self-hostable.

📚 HarnessVLN: Unifying Training-Free Embodied Navigation through an Agent Harness — Training-free embodied navigation via a harness that unifies VLN methods — no fine-tuning, the harness coordinates perception and action. Relevant if you're building embodied agents.

📚 AI for Games in the Foundation Model Era — Survey of foundation-model game agents — where LLM-driven NPCs, planners, and world models stand, and what's still missing.

Agent infrastructure is splitting into two tracks: empirical studies of how agents actually use tools, and frictionless primitives for agent-to-agent handoffs.

⚙️ Ship — 3 items

📦 Anthropic SDK 0.127.0 — Adds `compactBeforeNextTurn()` to the tool runner for explicit context compaction, and stops retrying streamed request bodies. Worth pulling if you run long-context agent loops.

📦 Antigravity Google — New Permissions System & Terminal and Git version control for Enterprise — Antigravity ships a new permissions system plus terminal and Git version control for Enterprise. Permission changes are the kind of thing operators need to review before rollout.

📦 OpenClaw release-publish/ee1e5f21fd22 — New cut from the core runtime. Release notes weren't captured this cycle — check the tag for operator-facing runtime changes.

Compaction control and permission systems both shipped today — the operational surface of agents is getting more explicit knobs, not just more capability.

🚨 Watch — 1 item

🚨 Gemini — Google's AI breached three companies in a security test; proves agentic capabilities outpace current guardrails.

💬 Community — 1 item

💬 Show HN: Ax-check.com – Can agents use your product? — Gauge co-founder ships ax-check.com: a scorecard for how well coding agents can onboard to your product, with suggested fixes and three full coding sessions per test.

Agent onboarding is becoming a product metric; tools that score it will shape what gets built.

📚 Read — 3 items

📚 PACT: Can Enterprise AI Assistants Be Trusted Under Pressure? — Benchmark for enterprise AI assistants under pressure, with an interactive leaderboard — stress-tests whether assistants stay trustworthy when stakes rise.

📚 CERA-MoA: Co-Evolving Routing Mechanisms with Continually Learning LLM Agents — MoA routing that co-evolves with continually learning agents instead of freezing router weights — targets the drift where a static router misroutes as agent capabilities shift.

📚 Building an Agent Harness for Life Sciences: Introducing Deep Life Sci — LangChain ships Deep Life Sci, a life-sciences agent harness built on deepagents — sandboxes, evals, and observability tuned for domain-specific agents.

Two papers and a harness converge on the same problem: agents that hold up when conditions change. Co-evolving routing and trust-under-pressure benchmarks are the signal worth tracking.

💬 Community — 4 items

💬 LynnReal-Omni — A multimodal video diffusion framework integrating agentic visual controls with high-fidelity generation.

💬 An Empirical Study of Harness Design for Coding Agents — A paper auditing how harness design affects planning and tool use for coding agents.

💬 xenoyia.art — New OC character reveal (196♥ / 27🔁 on Bluesky).

💬 ryanthomasriddle.com — Commentary on a genre staple (93♥ / 18🔁 on Bluesky).

⚙️ Ship — 2 items

📦 Pi 0.86.0 — Pi 0.86.0 adds prompt cache warming to keep caches alive during long tool runs, plus per-model compaction budgets. Breaking: custom pi-ai providers now receive TranscriptContext instead of Context.

📦 Anthropic SDK 1.7.0 — Anthropic SDK 1.7.0 adds compact_before_next_turn() to the tool runner and display_name for rate-limit groups (group_type deprecated).

Cache warming and compaction controls are converging across coding agents — worth checking your custom provider code before pulling Pi 0.86.0.

📚 Read — 2 items

📚 Can Jev Be a Better Agent Evaluator? — LangChain's case for Jev as an agent evaluator, positioned against their LangSmith eval stack. Worth reading for how they frame scoring agent performance beyond single-turn accuracy.

📚 Agora: Git as Shared Memory for Collective AutoResearch — Uses Git as the shared memory substrate for multi-agent research collaboration — agents read/write to a repo as their coordination mechanism. Relevant for anyone building multi-agent orchestration that needs persistent, versioned shared state.

Two papers on the hardest parts of agent orchestration: evaluation (LangChain's Jev) and shared memory (Agora's Git-as-memory). Both worth reading if you're building multi-agent systems.

⚙️ Ship — 2 items

📦 Anthropic SDK 0.126.0 — Anthropic SDK 0.126.0 adds auto-mode tool permissions for Managed Agents and beta compaction parameters with signed blocks. Also adds url_sources to the web fetch tool.

📦 OpenAI SDK 3.16.0 — OpenAI SDK 3.16.0 adds webhook endpoint management and deprecates MCP connector_id. Anyone using MCP connectors should plan migration.

SDK releases from both major providers today — Anthropic adds managed-agent tool permissions and compaction beta, OpenAI adds webhook management and deprecates MCP connector_id. Operators should check their MCP connector usage.

💬 Community — 2 items

💬 Show HN: Swift-Qwen3.8-27B, -58.3% thinking, x1.95 speed, accuracy of xhigh — Post-trained Qwen 3.8 27B to penalize overthinking tokens — 58% less thinking, 1.95x speed, xhigh accuracy. 30 points, 17 comments on HN.

💬 Gemini Hacked Three Companies in First Known Breakout by Google's AI — HN thread on WSJ report that Gemini autonomously hacked three companies — first known breakout by Google's AI. 42 points, 32 comments debating real vs PR.

Community is split on whether the Gemini breakout is real capability or PR, but the Swift-Qwen post shows builders still care about cutting inference cost for local agents.

📚 Read — 3 items

📚 What Does Privileged Information Add to On-Policy Self-Distillation? — A paper auditing if providing teachers with more solution data improves self-distillation.

📚 Verifiable Social Reasoning for LLM Assistants — A paper proposing a method to evaluate social reasoning in LLM assistants.

📚 Rethinking Critic Learning in PPO: Understanding and Mitigating Value Flattening — A paper addressing value flattening issues in PPO critic learning.