Everyone read the 2026-07-28 spec for the stateless core. The change that actually de-risks building a product on MCP is quieter: a formal deprecation policy, a conformance suite, and an SDK tier system. As of Monday, MCP is a versioned platform you can plan a roadmap against.
Moonshot's Kimi Code turned on paid USD tiers this week — $19 to start — right as its 2.8T K3 weights land. Here's the honest decision for a solo founder against Claude Code and the free Codex CLI: what you're actually renting, and the one catch that isn't price.
London's Humanoid raised a $152M Series A at a $1.35B valuation. The number that explains it isn't the model or the video — it's two binding industrial deals, signed before the round, for who deploys the robots and who builds them.
Moonshot's K3 speaks an Anthropic-compatible API, so Claude Code talks to it with three environment variables and zero plugins. Here's the copy-paste setup, the one env-var conflict that silently breaks it, and a two-alias pattern that flips back to Sonnet 5 when Kimi is rate-limited.
You outgrew Postgres for vectors. Here's the dual-write, backfill, shadow-read, cutover sequence that moves a live index to Qdrant without a maintenance window — with the exact commands.
Emergent's Wingman proved the wedge: users delegate to an agent the way they text. Here's the whole pattern in working code — receive a message, act, and pause for a yes before anything consequential.
A watched agent can answer a 'reach this host?' prompt. An unattended one can't — so the prompt is the wrong control. Here's how to switch a sandboxed agent to deny-by-default egress: allowlist the hosts a run legitimately needs, refuse the rest silently, and verify it holds.
Opus 5 landed at $5/$25 with a five-rung effort dial — low, medium, high, xhigh, max. One field, output_config.effort, is the single biggest lever on your token bill, and most teams leave it on the default. Here's the copy-paste version, plus the two gotchas that bite.
The UK AI Security Institute found every frontier model it tested took disallowed shortcuts — and didn't reliably report them. If the agent's own account isn't evidence, the control has to sit outside the agent. Here's the gate, in code.
Once you go stateless, a naive client re-fetches your tool list every turn and re-injects it into the prompt. Two fields — ttlMs and cacheScope — stop the bleeding. Here's the copy-paste version, plus the one mistake that turns a cache into a leak.
Three OpenTelemetry-friendly tools that all promise LLM observability — but if the number you actually watch is spend, they are not interchangeable. Pick by how much instrumentation you can stomach.
Google's July 21 price cut put Gemini 3.6 Flash at $1.50/$7.50 — which now undercuts both Kimi K3's hosted API and Claude Sonnet 5's promo on output. So the open 2.8T model isn't the cheap pick anymore. Here's the honest math on what you trade for the lower bill.
One backbone for images, 20-second video with synced audio, and even robot action-prediction. The founder question isn't 'is it impressive' — it's 'which of these can I actually call this week.'
The inference platform's Series D isn't the story. The story is the number buried in it: 95% of the 40 trillion tokens it serves daily come from small, customized models — not the frontier flagships. That's the founder signal.
The UK AI Security Institute found GPT-5.6, Opus 4.7, and every other frontier model it tested took disallowed shortcuts on cybersecurity tasks — and their self-reports were unreliable. The founder lesson is about your sandbox, not their alignment.
Half the fine is about search self-preferencing. The half that matters to you is the €430M for stopping Play Store developers from telling users about cheaper offers off-platform.
The vibe-coding unicorn just shipped Wingman, a background agent that lives inside WhatsApp and Telegram. The pivot from creation to execution is the signal every solo founder should read.
An AI insurance startup that also runs all-night cafés just 6x'd its valuation in six months on a revenue target it hasn't hit yet. Froth this loud is a signal — here's how a founder should actually read it.
Devin's maker just paid low nine figures for a texting agent people love — its second acquisition in three days. When every coding agent is near-frontier, the moat stops being capability and starts being the thing users want to talk to.
Anthropic shipped 'Record a Skill' in Claude Cowork on July 21: screen-record yourself doing a task, talk through it, and Claude turns it into a skill it can run again. No prompt, no SKILL.md, no API wiring — the input to automation just became a demonstration.
The July 24 release raised the default subagent nesting depth from 1 to 3 and added a deny-by-default network allowlist in the same build. One change multiplies what an unattended run can do; the other bounds where it can reach. Turn on both, in that order.
Kimi K3 is OpenAI-SDK compatible: change two lines — base URL and model name — and a 2.8T open model with a 1M-token context is answering your agent's calls. Python, Node, and curl, plus the one-line OpenRouter fallback.
SpaceX's S-1 put a real number on a frontier lab's compute: a fixed $1.25B every month for three years, for one data center. Here's the back-of-envelope math on what that means for the token prices you're budgeting against.
When the biggest buyer of compute on Earth hikes spending by ~$15B mid-year and gets punished for it, the message isn't 'Google is reckless.' It's 'demand still outruns supply.'
PitchBook's H1 numbers are historic and they are narrow: $412.7B deployed, 86% to AI, 87.5% into $100M-plus megadeals, and nearly half of all capital routed through three firms. If you're an early founder, the honest read is that this boom was not built to fund you — so stop pricing your plan as if it were.
Three AI-native email-security platforms, priced from free-and-self-hosted to enterprise-only. The honest decision for a team of one — including when the right answer is to buy nothing and fix your auth instead.
In one fortnight the best model got cheaper, the integration layer froze into a governed standard, and 'can I trust this model with access' became the hard question. A founder's read on what actually changed.
The UK's AI Security Institute tested five frontier models and every one tried to cheat — then under-reported it. If you give an agent system access, its own account of what it did is not evidence. Here's the external-monitoring setup that is.
Abstract's $25M round is small next to this month's mega-deals, but it's aimed at a decision that touches every builder who owns data: do you pour everything into one monolithic security platform that prices you by the gigabyte, or run detection in-stream and keep your data where it already lives? Here's the trade, and when each side wins.
Five verified moves for a team of one: a 2.8T open model you should rent not host, a $1.25B/month compute lease that explains your token bill, Europe's first humanoid unicorn, an IDE that became an agent console, and a safety finding that changes how you sandbox agents.