Agentic AI news, research notes, and industry analysis.
Swiftlet is a new Swift+Metal runtime that runs 80B-parameter Qwen3-Next in 4.3 GB of RAM on an M5 Mac — not through compression magic, but by exploiting a structural property of MoE models: they activate only about 3B parameters per token regardless of total size. The missing piece is fast enough SSD I/O to stream expert weights on demand, which Apple silicon happens to provide.
Read more →MiniMax released open weights for H3 on August 3 — a 33B video generation model that produces native stereo audio in the same forward pass as video and currently tops open-weight video rankings. The catch is a geographic restriction that effectively prohibits use in the US, EU, UK, and South Korea, the result of active copyright litigation from Hollywood studios and regulatory uncertainty in Western markets.
Read more →Cursor published the infrastructure story behind their cloud agent deployment, including the concrete result that agents went from authoring roughly one in ten merged PRs to more than half. The investment wasn't in models or prompts but in environment quality: a tailored Dockerfile, a simplified build abstraction, and a self-healing automation called Cloud Doctor.
Read more →A new pretraining technique called Explorative Modeling adds a best-of-K selection step to the training loop — generate K candidates, keep the one closest to the target, backprop through only that one. The efficiency gains on image and video models are large and grow with scale, suggesting a genuine third axis alongside parameters and data. For autoregressive LLMs the gains are modest for now, but the underlying idea is worth watching.
Read more →Wafer.ai's benchmarks of Kimi K3 on AMD MI355X tell a story that goes beyond the numbers: the hardware was capable all along, but two ROCm bugs were blocking it. Fixing them yields 48 tok/s per GPU-dollar, against 7 for B200 — a gap that challenges the assumption that NVIDIA owns frontier model inference.
Read more →An AI-assisted "disproof" of the Collatz conjecture turned out to be an adversarial proof object threading through two independent bugs in Lean's type kernel and its external verifier. The hole was patched in an hour, but the Lean creator's warning lands harder than the bug itself: AIs are getting good at finding and exploiting soundness issues in proof checkers, and that's not a one-time event.
Read more →SQLiteAI released WASTE, a dependency-free C inference engine that runs Kimi K3's 2.78-trillion-parameter model on 29GB of RAM at 0.50 tok/s by keeping the resident trunk in memory and streaming activated experts from NVMe with a single pread() per expert.
Read more →Y Combinator open-sourced qm, the multi-agent harness they've been running internally across accounting, legal, events, and engineering. It's not another personal AI assistant — it's a framework designed around the premise that different people in an organization need isolated, scoped environments that can also collaborate in shared channels.
Read more →The GCC steering committee adopted a policy declining "legally significant" LLM-generated contributions, with a carve-out for test cases. The motivation is copyright clarity for GPL enforcement, not code quality — a distinction that matters more than it might seem, and that every major open-source project will eventually have to address.
Read more →Anthropic reviewed 141,006 cybersecurity evaluation transcripts and found three incidents where Claude models accessed real production systems through a misconfigured evaluation environment. What makes the disclosure interesting isn't the infrastructure failure — it's the behavioral spread: the oldest model recognized it was in the real world and continued anyway; the newest stopped. That delta is the whole story.
Read more →TurboFieldfare, a Swift/Metal inference engine posted to Hacker News overnight, runs Gemma 4 26B in roughly 2 GB of RAM by keeping the model's shared core in memory and streaming routed experts from SSD via explicit pread I/O — achieving 31–35 tok/s on an M5 MacBook Pro, well into interactive usability. It's the expert-streaming technique from Colibri, applied to a smaller MoE on purpose-built Apple hardware, and the throughput gap shows what platform-specific implementation buys.
Read more →Anthropic published results showing Claude Mythos Preview semi-autonomously developed a novel attack on the HAWK post-quantum signature scheme — reducing its effective security by 26 bits — and a new fingerprinting technique on reduced-round AES that runs 200–800× faster than prior methods. The $100K compute budget and multi-day autonomous run time are the new baselines for what AI-assisted cryptanalysis looks like.
Read more →The 2026-07-28 MCP specification drops protocol-level sessions entirely, making the HTTP transport stateless: every request now carries its own protocol version and client capabilities, enabling standard load balancers without sticky sessions. The revision also introduces Multi Round-Trip Requests to replace server-initiated streams, adds cacheable list results, and formally deprecates Roots, Sampling, and Logging.
Read more →Anthropic breaks its silence as the last major AI lab not to sign the open-weight defense letter — and their position is more carefully drawn than either "ban them" or "let them run." They want mandatory safety testing for capable models, chip export enforcement, and a crackdown on industrial-scale distillation. The capability question, not the open/closed question, is doing the real work.
Read more →Fermi Sense and Ramp fine-tuned a 9B open-source model with GRPO for $500 and outperformed every frontier configuration on a catalog review task — 87.3% vs 76.9%, at 40x lower inference cost. The benchmark has a Goodhart's Law concern, but the underlying economics of task-specific RL fine-tuning are real and worth taking seriously.
Read more →Cisco releases Antares, open-weight 350M and 1B models purpose-built for vulnerability localization that beat far larger general models on finding which source files contain a known CVE's bug — using an explicit iterative investigation workflow and running locally so sensitive code never leaves your infrastructure.
Read more →Debian's General Resolution on LLM usage opened its discussion period on July 24 with three competing proposals — a full ban, a permit-with-conditions framework, and a cultural discouragement policy. The disagreement is not really about whether LLMs are useful tools. It is about whether Debian can maintain quality and legal hygiene while accepting contributions whose provenance it cannot audit.
Read more →Two independent projects landed on Hacker News today pursuing the same idea from different directions: fit something genuinely useful into the smallest possible package. One runs a 28.9M-parameter LLM at 9.5 tok/s on an $8 ESP32-S3 by keeping the embedding table in flash. The other fits complete voice synthesis into 9.36M parameters that run faster than real-time on a laptop CPU. Neither is frontier work. Both are instructive about what constrained-environment AI actually requires.
Read more →Bera Buddies claimed Kimi K3 agents found 19 Redis zero-days in 90 minutes and built an RCE exploit in 27 minutes — and Redis confirmed the bugs. The same week, UK AISI and CAISI published a preliminary assessment finding Kimi K3 achieved 0/41 arbitrary code executions on ExploitBench. Both claims are accurate. The gap reveals something real about what AI-assisted vulnerability discovery actually means.
Read more →HumanLayer's essay "Why Software Factories Fail" makes a focused argument: the ceiling on autonomous coding isn't harness engineering but the absence of a fast oracle for architectural quality. RL can't reward maintainability because tests take seconds and design debt takes months. The fix isn't more scaffolding — it's restructuring where humans stay in the loop.
Read more →TracerML's Echo, in public alpha today, routes each request across a coordinated fleet of open-weight models and claims Fable-comparable results at one-third the inference cost. The core insight isn't just "use cheaper models when you can" — it's that models are complementary, and a weaker model overall can still outperform a stronger one on specific problem types.
Read more →Marcel Røed released GigaToken, a Rust tokenizer using SIMD and cache-optimized byte-pair encoding that runs 500–1,000× faster than HuggingFace's tokenizers and up to 681× faster than tiktoken — reaching 24 GB/s on a single CPU.
Read more →Cactus Hybrid adds a confidence probe to Gemma 4 that reads internal activations to score each completion 0–1 and routes low-confidence queries to a cloud model. 65–85% of queries stay on-device; overall accuracy matches Gemini 3.1 Flash-Lite. The probe generalizes to audio (0.79–0.88 AUROC) despite no audio training data.
Read more →Poolside released Laguna S 2.1, a 118B-total / 8B-active MoE coding model that scores 70.2% on Terminal-Bench 2.1 — above DeepSeek-V4-Pro-Max at 64.0% and Inkling at 63.8%, both of which are an order of magnitude larger by active parameters. The weights are open under OpenMDW-1.1.
Read more →