Langflow Is the First AI-Agent Platform in CISA's KEV — and Both Ways In Reach the Same Loot
An unauthenticated RCE and an authenticated cross-tenant IDOR are opposite bug classes. In Langflow they end the same way: a prompt that says 'leak api keys.'
4 min
Git for Your Corpus: LanceDB Branching Makes RAG Evals Reproducible
LanceDB 0.34.0 added table branches — writes on a branch don't touch main. The headline feature is substring search; the sleeper is that the hard part of RAG evals was never the metric. It was holding the corpus still.
4 min
LanceDB's FM-Index: Substring Search for Code, Logs, and IDs — Not Word Search
Full-text search tokenizes your text into words, so it structurally cannot match a fragment inside a token. LanceDB's new FM-Index indexes the raw bytes instead — the exact-match primitive code and log agents were missing.
4 min
Kubernetes Has No Word for "One Agent": Inside the Sandbox CRD and Its Warm Pool
Deployments assume fungible replicas; StatefulSets assume a numbered set. An AI agent session is neither — it's a singleton with a stable identity, one of a million uniques. The kubernetes-sigs Agent Sandbox project adds the primitive that was missing, plus a warm pool that hands one over in milliseconds.
4 min
JadePuffer: The First Agentic Ransomware Ran on the Same Harness Tricks You Do
Sysdig documented an AI agent that ran a ransomware operation end to end. The scary part isn't the model — it's that the attacker's reliability engineering was indistinguishable from yours.
5 min
How to Throttle an Agent Against a Third-Party API Rate Limit
The instinct is to rate-limit per user. An agent breaks that in one move: a single user's run fans out into hundreds of calls, and the ceiling that binds isn't yours — it's the API you're calling.
5 min
How to Resume an Agent's Stream After the Connection Drops
Durable execution saves the agent's work when the server dies. It does nothing for the user whose phone dropped Wi-Fi mid-answer — that's a different resume problem, on the other side of the wire, and the new stateless MCP spec quietly made it harder.
4 min
How to Build a Coding Agent (The Loop Is the Easy Part)
A working coding agent is a few hundred lines and four tools — a weekend. What separates a toy from Claude Code is everything that isn't the loop: the edit contract, what you keep out of context, and whether it runs the tests.
4 min
Grok 4.5 vs Opus 4.8: Losing the Benchmark, Winning the Token Bill
On xAI's own SWE-Bench Pro numbers, Grok 4.5 loses to Opus 4.8 by 4.5 points — and finishes the same task for roughly a seventeenth of the output cost. The interesting number isn't the price. It's the token count.
5 min
Go AI Agent Frameworks: Eino vs LangChainGo vs Genkit (and When to Skip the Framework)
In Python, an agent framework sells you concurrency, cancellation, and retries. Go ships all three in the standard library — so the real question in Go isn't which framework, it's whether you need one.
5 min
Why DSPy Rebuilt ReAct: The Trajectory String Was Quietly Breaking Prompt Caching
DSPy's ReActV2 looks like a native-tool-calling upgrade. The real fix is deeper — the classic ReAct loop re-serialized its whole scratchpad into one prompt every turn, which silently defeated provider prompt caching. Moving to structured history cut cost up to 50%.
4 min
You're Measuring Your Semantic Cache Wrong: Hit Rate Hides the False Positives
Everyone reports the hit rate. The number that decides whether a semantic cache is safe to ship is the false-positive rate — and the fix for false positives eats the exact win you installed the cache to get.
4 min
LangChain's Deep Agents Now Ships Its Own Coding Agent — and Speaks ACP
In early July, Deep Agents quietly split into three shippable packages: a model-agnostic harness, a terminal coding agent, and an ACP adapter. The library became a product line — and unbundled the coding agent from both the model and the editor.
4 min
Decoder-Backbone Rerankers: Why Your Cross-Encoder Is Now an LLM (and Fails Like One)
The word 'cross-encoder' still means one query-doc pair, one relevance score. But the model underneath quietly flipped from a BERT encoder to a causal decoder — and it brought the LLM's failure modes with it.
4 min
CrewAI Conversational Flows: What 'Chat' Actually Adds to a Crew
CrewAI 1.15 shipped conversational flows, and it's easy to read that as "your crew can hold a conversation now." It can't. What shipped is a persisted, resumable flow behind a poll loop — and that distinction decides how you build.
4 min
The Claude Memory Tool Ships No Storage — It's a Contract You Implement
Anthropic's memory tool gives Claude a /memories directory it can read and write across sessions. But the directory is a fiction, the store is your code, and so is every line of the security.
5 min
Claude Code Dynamic Workflows vs Subagents: When to Move the Plan Into Code
Subagents let Claude delegate a few tasks per turn. Dynamic workflows fan out hundreds. The line between them isn't how many agents you need — it's whether the plan is stable enough to freeze into a script.
4 min
Chinese AI Models Passed 45% of OpenRouter's Tokens. US Labs Still Take Most of the Money.
The token-share charts everyone is quoting measure the wrong thing. On the same marketplace where Chinese open-weight models now move most of the tokens, Anthropic — with roughly an eighth of the volume — still captures nearly half the revenue. That gap is the whole story.
5 min
Webhooks vs Polling for Long-Running Agent Tasks: Why Agents Reversed the Default
For a decade the advice was "stop polling, use webhooks." The agent runtime quietly broke the webhook's core assumption — so the newest async surfaces ship polling first.
5 min
How to Scale a Vector Database to Billions of Vectors
Sharding vectors is nothing like sharding rows. The real decision isn't where the data lives — it's how many shards each query is allowed to skip, and what recall you pay to skip them.
4 min
Tracing MCP Tool Calls Without Sessions: Why traceparent Became the Correlation ID
MCP's 2026-07-28 spec deletes the session handshake that ops teams quietly used to stitch an agent's tool calls together in their logs. The replacement is W3C Trace Context — and it doesn't do the same job.
5 min
How to Handle a Tool Result Too Large for the Context Window: Truncate, Paginate, or Hand Back a Handle
The overflow that kills agents happens at the one boundary the MCP spec never paginated — the tool result. And the reflex fix, truncating to N characters, is the only option that's strictly worse than doing nothing.
5 min
Together AI Raised $800M at an $8.3B Valuation. The Story Is What Agents Did to Inference Pricing.
A neocloud that owns none of the models it serves just booked $1.15B a year. The number that matters isn't the valuation — it's that open-model inference outgrew the labs whose weights it runs.
5 min
Tencent's Hy3 Is an Open 295B Agent Model. The Number That Matters Is 21B.
A 295B Mixture-of-Experts under Apache 2.0, activating 21B per token. For agent builders, the headline size is the least interesting spec on the card.
4 min
Tabstack: Mozilla's Web-Data API for AI Agents Bets on the Permissioned Web
Mozilla shipped a one-call API that turns any URL into structured JSON, cited research, or a finished browser task. The pitch isn't the features — it's that it obeys robots.txt on purpose.
4 min
SWE-Together vs SWE-bench: The Benchmark That Counts How Often You Corrected the Agent
A new multi-turn coding benchmark reconstructs 109 real user sessions and scores agents on a second axis SWE-bench never had: not just whether they finished, but how much you had to steer them there.
5 min
Semantic Caching Quietly Breaks AI Agents — and Accuracy Isn't the Fix
A cache that skips a duplicate chatbot answer is a savings. A cache that skips a duplicate agent step is a wrong action. New 2026 benchmarks show the standard tools score under 40% — and the fix is the opposite of what you'd guess.
4 min
Retry Budgets for LLM Calls: Why Retrying Every 429 Makes the Outage Worse
Wrapping every model call in retry(3) feels responsible. Under a provider brownout it's the fastest way to turn a slowdown into a blackout. The fix is a budget, not more backoff.
4 min
Qdrant's TurboQuant: Binary-Quant Storage at Scalar-Quant Recall
Qdrant 1.18 shipped a Google Research quantizer that rotates your vectors before it compresses them. The rotation is the whole trick — and the reason it works on any embedding model.
4 min
Pydantic AI V2 Quietly Repointed `openai:` at the Responses API — What Actually Breaks
V2's headline is the Harness. The change that will page you is smaller: the bare `openai:` prefix now resolves to a different OpenAI API, and no deprecation warning fires.
4 min