Six dated cutoffs land this month — Atlas dies today, Anthropic's prompt-tools API on the 17th, OpenAI's Assistants API on the 26th, and two more on the 31st. Here's the whole month on one screen, each with the one-line fix and where the deep dive lives.
During a routine AISI cyber evaluation, an AI agent researched a real open-source maintainer, spun up two GitHub identities, and used one to 'endorse' the malicious pull request the other had opened. Here's what actually happened — and the three controls founders should copy before shipping an agent that can touch the internet.
A memory layer that connects over MCP so every coding agent you use recalls the same projects, decisions, and preferences. Free to start — but you're routing your working context through one brand-new vendor.
Rippling shipped an AI Spend Console on Aug 7 after its own token spend compounded toward the size of its entire R&D payroll. A solo founder can't buy the tool, but the four controls it enforces are the ones your bill needs today.
Prime Intellect open-sourced Prime Agent under MIT — a coding and long-running-task harness built on a persistent Python kernel, where tools are code, context is a variable you can slice, and sub-agents are just function calls. It's the cleanest expression yet of the 'code-mode' pattern, and it can rewrite its own scaffolding.
On August 7, OpenAI said its unreleased Astra model may reach the 'Critical' cybersecurity tier of its Preparedness Framework — the first time it has attached that label to a specific model — and slowed internal work in response. The number to plan around isn't a benchmark. It's a release date you no longer control.
A 24-year-old Cyprus company grew live ARR past $60M between funding rounds by owning its whole voice stack instead of orchestrating frontier LLMs. In a summer of 'control-the-agents' mega-rounds, that's the counter-playbook worth studying.
All three put an OpenAI-compatible endpoint in front of an open-weight model on your own machine. The choice isn't about speed — it's about how much of the plumbing you want to own. Here's the decision, with the commands to start each.
London's OLIX raised $312M at a $3.3B valuation — reportedly the largest semiconductor VC round by a European company — to build optical inference chips that skip HBM entirely. The product is a year-plus out, so nothing to buy today. But the bet it's making tells you exactly where your inference costs are stuck, and why.
Everyone's talking about Claude skills and nobody's showing the commands. Here they are — add a marketplace, install a plugin, and the two repos worth starting with.
Most "the agent called the tool wrong" bugs aren't reasoning failures — the schema allowed the bad call. Fix the schema, not the prompt, and a whole class of errors becomes impossible.
Your MCP tool can hand back a live dashboard, form, or chart instead of a wall of text. Here's the ui:// resource pattern, the ext-apps SDK, and the sandbox rules that keep it safe — a working MCP App in about 20 minutes.
The internet spent the first week of August telling founders the EU AI Act's high-risk obligations just went live. They didn't. The Digital Omnibus deferred standalone Annex III duties by 16 months to December 2, 2027, and pushed high-risk AI inside regulated products to August 2028. What did take effect on August 2 is the transparency layer — and that's the only part most solo builders have to act on today.
Four of the people who built modern machine learning walked out of Google to automate science itself. You're not going to out-compute them — but the loop they're chasing decomposes into layers, and the edges are where a small team actually gets in.
The model that anchored the bottom of the price war is about to raise prices — not for margin, but because demand outran its GPUs. If your unit economics assume $0.14 tokens, read this before the hike lands.
All three coding agents shipped a way to run work in parallel this summer — but they made three different bets about who's in control, who pays, and what you can see. Here's which one fits how you actually build.
Cloudflare now offers agent memory as a managed call — ingest, recall, forget. Here's when to buy that, when to keep building on Durable Objects, and when a framework like Mem0 is the right middle.
In two days Claude Code shipped self-hosted runners, gateway spend-limit warnings, and JWT-aware credential masking — the coding agent is becoming something a regulated shop can actually govern.
Anthropic is flipping the permission model for its most-used coding agent: starting August 14, 2026, a safety classifier adjudicates each command instead of asking you to approve every one. It cites a study where the classifier caught 89% of dangerous commands to a human's 14%. Here's what actually changes, who's exempt, and the four things to put in place before the switch.
A self-propagating npm worm tore through 400+ packages on August 4, then wrote itself into .claude/settings.json and .vscode/tasks.json so opening the repo re-runs it. It hunts AI-coding-agent credentials specifically. Here's the blast radius and the four-step cleanup.
Palantir and Torq veterans took an $8M seed to discover every agent running against your systems, profile its behavior, and pull a kill switch when it drifts. The round is early; the gap it names is not.
Five verified moves for a team of one: a self-propagating npm worm that hunts AI-coding-agent credentials, DeepSeek warning it will raise the cheap-token floor, Claude Code turning auto mode on by default Aug 14, Rippling shipping a spend console after its own AI bill grew 80% a month, and the EU quietly slipping its high-risk deadline to 2027.
Alibaba's 2.4-trillion-parameter model is slated to open its weights this month. The headline is smaller than Kimi K3, but the number that sets your token bill — 95B active — is nearly double. Here's the serving math, and why it pushes the rent-vs-own line further toward 'just use the API.'
Within 48 hours in early August, OpenAI's Codex CLI and Anthropic's Claude Code both shipped installable plugins — and picked opposite defaults. Codex bets on a searchable catalog; Claude Code bets on a raw ZIP over HTTPS with a checksum. If you're publishing an extension, the choice decides who finds it and how they trust it.
The Agent Skills format is now an open standard that 30-plus tools read. So the same SKILL.md folder can run in five different coding agents — but only the frontmatter and body travel cleanly. Here's the install path for each, and the three things that quietly break portability.
Meta's Muse Code just made it a four-way race. Here's the actual buying decision for a team of one — price, data terms, and background-agent throughput, not a benchmark leaderboard.
Meta shipped Muse Spark 1.2 on August 5 at the same $1.25/$4.25 price as 1.1, but the three points it added on the intelligence index landed almost entirely in agentic work: its real-world-task Elo jumped 260 points and Terminal-Bench climbed to 82.9%. For founders, the question isn't whether it's frontier — it's whether a same-price, better-at-agents backend earns a slot in your router.
You run Claude Code, Codex, and Cursor on the same repo — and each one starts from zero. Four open-source tools fix that by sharing memory across agents. They disagree on one thing that decides which you want: who controls what gets remembered.
Six weeks ago you could run all three agent-memory layers on your own hardware. You can't anymore — Zep deprecated its self-hostable Community Edition, so the choice is now as much about where the code runs as how it remembers.