2026

The Moving Goalposts of Coding Agent Rewards

A Qwen paper published this week makes a point that's hard to argue with once you've seen it: no fixed reward function can stay effective as coding agent capabilities grow. Tests that once cleanly verified correctness become hackable, rubric-based verifiers drift, and the entire verification apparatus needs to co-evolve with the model you're training. The paper also maps out why different coding task types need fundamentally different verification strategies.

Read more →

What OpenAI's Internal Codex Numbers Actually Tell You

OpenAI published internal Codex adoption figures: 97.9% employee usage, 137x non-developer individual growth, 10x growth in long-task requests. All data is self-reported. The numbers are almost certainly inflated by incentive and methodology, but the directional story — agents crossing from developer tool to general knowledge-work tool — looks real.

Read more →

Images from a Field of Oscillators

Unconventional AI released Un-0, an image generator built not on diffusion or adversarial training but on Kuramoto coupled-oscillator dynamics. The learned parameters are coupling strengths between oscillators; the image emerges from a physical simulation rather than a stack of nonlinear layers. FID 6.74 on ImageNet-64 won't unseat SOTA, but the architecture is genuinely different and the code is MIT-licensed.

Read more →

Mojo Goes to Qualcomm

Qualcomm agreed to acquire Modular for approximately $3.9 billion on June 24. Modular makes Mojo (a Python-superset systems language) and MAX (a hardware-agnostic inference engine). The deal is a bet that AI inference will fracture across hardware vendors, and whoever owns the abstraction layer wins.

Read more →

28.8 Million Prompts

Anthropic disclosed to the US Senate that operators affiliated with Alibaba ran 28.8 million exchanges against Claude through 25,000 fraudulent accounts over six weeks — the largest known distillation attack against Anthropic. The numbers are real; the framing is lobbying.

Read more →

2.5 Million Parameters Beats Gboard

FUTO released the models behind their swipe keyboard — a three-component stack totalling 2.5 million parameters that achieves 26% fewer errors than Gboard on their benchmark. It trains on one workstation GPU, runs on low-end Android devices in milliseconds, and is the first freely licensed open swipe-typing model. It's a reminder that model scale is a tool, not an objective.

Read more →

Simulate the Terminal, Train the Agent

Alibaba's Qwen team released Qwen-AgentWorld, two open-weight models trained to simulate digital-agent environments — terminals, browsers, OS interfaces, software engineering tasks — via chain-of-thought reasoning. The bet is that a sufficiently accurate environment simulator lets you run RL training without real environment calls, which is expensive, slow, and hard to parallelize at scale.

Read more →

Give Early Layers More

A paper submitted yesterday finds that reducing MLP width monotonically from early to late transformer layers — using a cosine schedule — consistently improves performance across three scales and four architectures at zero additional cost. Later layers refine the residual stream rather than transform it, so the standard uniform allocation gives too much capacity to the wrong end of the network.

Read more →

The Inpainting Model That Skipped the Attention

HUST's Moebius (0.22B) matches FLUX.1-Fill-Dev (11.9B) on six image inpainting benchmarks at 15× the inference speed. Two mechanisms make it work: Local-λ Mix Interaction blocks that replace quadratic spatial attention with fixed-size linear matrices, and adaptive multi-granularity latent-space distillation. For inpainting specifically, attention overhead appears to be the actual bottleneck — not parameter count. Weights are out.

Read more →

The Model That Manages Models

Sakana AI launched Fugu today: a multi-agent orchestration system packaged as a single OpenAI-compatible API. The underlying claim — that learned coordination beats any individual frontier model on hard tasks — is backed by two ICLR 2026 papers and benchmark numbers that hold up. The detail worth noticing: Fable 5 and Mythos are absent from the agent pool because they're export-controlled. Swappable orchestration isn't just a feature; it's a hedge.

Read more →

The Dog Still Won't Fetch, But the Gap Is Closing Fast

Anthropic's Phase Two of Project Fetch has Claude Opus 4.7 completing a four-task robotic quadruped challenge nearly 19× faster than a human team with AI assistance and generating a tenth of the code — through no robotics-specific training. The robot still can't autonomously retrieve the beach ball. That combination of dramatic capability transfer and stubborn physical limits tells you something interesting about where general AI scaling is and isn't working.

Read more →

Cloudflare Removes the Last Login Prompt Between Agents and the Internet

Cloudflare's Wrangler CLI now accepts a --temporary flag that provisions a fresh Cloudflare account, deploys a Worker, and gives a 60-minute claim window — removing the OAuth friction that had been blocking AI agents from completing autonomous write-deploy-verify cycles. Small feature, meaningful shift in how agentic infrastructure is designed.

Read more →

After AlphaFold, Jumper Places a New Bet

John Jumper, who led AlphaFold and won the 2024 Nobel Prize in Chemistry, is leaving Google DeepMind for Anthropic. The interesting question isn't who won the talent war — it's what his choice says about where the hard problems in biology AI go next, and why a safety-focused lab might actually be the right place to work on them.

Read more →

The Token Compression Illusion

Przemek Mroczek's critique of RTK — a tool claiming 60-90% token cost reduction by compressing CLI output for AI agents — lands a specific technical argument: the savings are measured on terminal output alone, which is not what's expensive; the compression happens silently without telling the agent context was stripped; and there's no published data on whether tasks actually succeed. The post is a useful diagnostic for a broader pattern in agent cost tooling.

Read more →

MCP Gets Its Enterprise Authorization Layer

The Model Context Protocol stabilizes Enterprise-Managed Authorization: organizations configure MCP server access once through their identity provider and users get zero-touch provisioning via an Identity Assertion JWT flow, no per-server consent screens. Okta is the first supported IdP, with Claude, Claude Code, and VS Code 1.123 as the first clients. It's the plumbing that turns MCP from a developer prototype into something an enterprise can actually operate.

Read more →

GLM-5.2: Open Weights, Confirmed Benchmarks

Z.ai shipped the MIT weights for GLM-5.2 on June 17 — 753B MoE, 40B active, 1M context — and the benchmarks back up the release: 74.4% on FrontierSWE, 81% on Terminal-Bench 2.1, and top of the Artificial Analysis open-weights leaderboard. The catch is token consumption nearly double its nearest open-weights competitors.

Read more →

Alibaba Splits the Robot Brain in Three

Alibaba's Qwen-Robot Suite breaks the physical AI problem into three specialized models — navigation, manipulation, and world prediction — sharing a common foundation but targeting different action spaces. The interesting architectural decision is the canonical state-action representation that lets all three train on heterogeneous robot data without task-specific pipelines.

Read more →

The Laptop Won

Vicki Boykis published a careful practitioner's report on her local-inference stack this week, and the conclusion that stuck — ~75% of frontier model capability for agentic coding on a 64 GB M2 Mac — is more significant than the raw number suggests. The tooling layer finally grew up, and that changes what "running locally" means.

Read more →

Memory That Doesn't Help You Think

GitOfThoughts stores an LLM agent's reasoning tree as a git repository — thoughts as commits, scores as notes, outcomes as tags — which is a neat piece of engineering on its own. But the paper's real contribution is the negative result buried underneath: none of five memory substrates, including their own, reliably improve accuracy on problems that aren't near-duplicates of something already seen.

Read more →

The Gateway Was the Weak Link

Obsidian Security chained three bugs in LiteLLM, the open-source proxy that sits in front of more than 100 model providers, to turn a default low-privilege account into full admin and remote code execution. The interesting part isn't the CVSS 9.9 — it's that a compromised gateway can rewrite LLM responses in flight and forge tool calls into agents like Claude Code, which makes the proxy itself part of the attack surface agent builders need to model.

Read more →

The Weights Don't Lie

Rio de Janeiro's municipal AI company IplanRIO released Rio-3.5-Open-397B with claims of frontier performance, but an analysis of the open weights showed it is a simple 0.6/0.4 element-wise merge of Nex-N2_pro and Qwen3.5-397B-A17B. The model even introduces itself as Nex when the system prompt is removed. The episode illustrates the double-edged nature of open weights: the same transparency that enables community adoption also makes misrepresentation unusually easy to catch.

Read more →

GLM 5.2 Ships Access Before Evidence

Z.ai shipped GLM 5.2 to every Coding Plan subscriber on June 13 with a 1-million-token context and zero published benchmarks. Open weights arrive "next week." The inversion — distribution first, proof second — is becoming a deliberate strategy in the crowded coding-model space.

Read more →

Claude Passes an NMR Exam

Anthropic published a study showing Opus 4.7 matching or beating ChemDraw and MestReNova on 1D NMR spectroscopy tasks. The 80% J-coupling spacing accuracy — versus 26–35% for dedicated software — is the surprising number. The bidirectional structure elucidation capability has no direct equivalent in existing tools.

Read more →

The Lockbox Problem

The US government banned Anthropic's Fable 5 and Mythos 5 globally after a narrow jailbreak was found that could unlock Mythos's autonomous offensive cybersecurity capabilities. Anthropic disputes the decision as disproportionate. The real issue is harder than either side is saying: you can't export-control your way out of a model that already knows how to hack.

Read more →