What Anthropic's 'Dreaming' Does to Agent Memory — and Why a Bad Dream Doesn't Wash Out
Claude's new consolidation loop replays an agent's day and writes down what it learned. The same mechanism that lifted one customer's task completion ~6x is the one that makes a poisoned lesson permanent.
6 min
Batch API vs Real-Time Inference: The 50% Discount Isn't Why You Should Use It
Every provider now sells the same deal — hand over your requests, wait up to 24 hours, pay half. The savings are real, but the reason to reach for batch is the thing nobody puts on the pricing page.
4 min
AWS Will Now Let You Charge AI Agents Per Request: How x402 Metering at the CDN Edge Works
AWS WAF Bot Control can now return an HTTP 402 with a machine-readable price and settle USDC before the request ever reaches your origin. The real shift isn't crypto — it's that a web page finally has an enforceable price for a machine.
4 min
Agent Skills Are an Open Standard: What Portability Buys — and What It Can't Enforce
A Skill is a folder with a SKILL.md and an Apache-2.0 license — no server, no transport, no auth. That's why another runtime can adopt it in an afternoon, and why a Skill can't revoke, throttle, or contain anything.
4 min
Agent Handoffs in LangGraph, OpenAI Agents SDK, and Google ADK: What Actually Transfers With Control
Every multi-agent framework now has a handoff primitive, and they all look the same in the demo. The difference that bites you in production is what rides along when one agent passes the baton to the next.
5 min
Tool Choice: auto vs required vs Forcing One Tool
tool_choice looks like a switch for making a model use tools. It's really the decision of whether a turn is allowed to end the conversation — and leaving 'required' on traps the agent loop with no way out.
5 min
TeleMem vs Mem0: When a Drop-In Memory Layer Is Really a Different Bet
TeleMem ships as a one-line replacement for Mem0 — import telemem as mem0 — and claims a 16-point accuracy edge. Read where that number comes from and you learn exactly which agent it's for.
4 min
Right to Be Forgotten in RAG: How to Actually Delete a User From a Vector Database
The DELETE call is the easy five percent. A user's data has already fanned out into the index, the chunk store, the cache, your trace logs, and maybe a fine-tune — and in most vector engines the delete is a tombstone the graph keeps walking until compaction.
6 min
When Prompt Injection Becomes Remote Code Execution: Why Agent Command Allowlists Keep Failing
Three critical 2026 CVEs — in ModelScope's MS-Agent, Microsoft's Semantic Kernel, and Cursor — share one root cause. The agent filtered the command it was about to run. It never controlled the ground that command would run on.
5 min
MCP Server Cards: How an Agent Will Vet a Server Before It Connects
A new .well-known discovery file lets clients read an MCP server's identity, transport, and auth requirements without a handshake — and it pointedly refuses to list the tools.
5 min
The Confused Deputy Problem in MCP: Why Agent Auth Keeps Failing the Same Way
A 1988 access-control bug is the shape of 2026's worst MCP breaches. Understanding the confused deputy tells you why 'just add OAuth' doesn't fix your agent — and what the spec actually changed.
5 min
MCP-Bench vs MCPToolBench++ vs MCPAgentBench: How to Benchmark an Agent's MCP Tool Use
Function-calling leaderboards test a model against a handful of curated tools. A real MCP host hands it thousands — and that is a different benchmark, with a different failure mode.
4 min
How to Attribute LLM Costs Per Agent, Tenant, and Feature
The invoice arrives and no one can say which customer spent the money. Cost attribution isn't a report you run later — it's a schema decision you make at request time, and for agents the gateway total lies about where the spend went.
4 min
Hyperlight vs Firecracker: The Micro-VM That Deleted the Guest Kernel to Sandbox Agent Code
Firecracker gives each agent a whole Linux to boot — 125 ms of it. Hyperlight keeps the hardware wall and throws away the OS behind it, and that deletion is what makes per-tool-call isolation affordable.
5 min
How Vulnerable Are MCP Servers? A Scan of 39,884 Repos Found 106 Zero-Days
A new automated auditor didn't just flag risky code in Model Context Protocol servers — it wrote the prompts to prove the holes were real. 67 already carry CVE IDs, and almost none are AI-specific.
4 min
How to Tune HNSW: The Three Knobs Behind Vector Search Recall
M, ef_construction, and ef_search decide whether your vector search is fast, accurate, or neither. Only one of them can be changed after you build the index — and it's the one most teams never touch.
5 min
How to Summarize a Document That Doesn't Fit in the Context Window: Map-Reduce vs Refine vs Not at All
Map-reduce's 'reduce' step quietly re-creates the exact overflow you were escaping. Refine can't parallelize. And in 2026 the fastest-improving option is often to stop summarizing and put the whole document in a million-token window — if you can pay the middle.
5 min
How to Handle a Truncated LLM Response: finish_reason, max_tokens, and the Reasoning-Token Trap
A cut-off completion isn't an error your code catches — it's a 200 OK whose only tell is a stop-reason field most callers never read. And on reasoning models, the fix everyone reaches for can hand you an empty response.
5 min
How to Evaluate an AI Coding Agent
Public leaderboards answer 'which model is smartest,' not 'will it fix my bugs' — the only test that predicts your outcome is a private eval built from your own repo.
7 min
How to Deploy a Long-Running AI Agent Without Losing In-Flight Work
A web server drains its in-flight requests in 30 seconds and restarts. An agent's in-flight request is a multi-hour, side-effecting loop — so graceful shutdown stops being a deploy setting and becomes an architecture decision you had to make weeks earlier.
5 min
How AI Agents Decide What to Forget: Memory Consolidation in Mem0, Zep, and the Memory Tool
Every serious agent-memory system is really a forgetting system. The hard part was never storing what the agent learns — it's pruning the contradictions and stale facts that quietly poison retrieval.
5 min
The Best AI Model for Coding Agents in 2026 Is Half a Harness
GPT-5.5 and Claude Opus 4.8 are tied on SWE-bench Verified at ~88.6%. That means the leaderboard number stopped being the answer — and your agent's scaffolding started being it.
5 min
Kubernetes' Gateway API Inference Extension: When the Load Balancer Starts Reading GPU Metrics
Round-robin is the wrong way to route an LLM request. Kubernetes now has a GA'd standard that lets the gateway pick a model server by live KV-cache pressure and queue depth instead — and it changes what a load balancer is.
4 min
Every AI Agent Framework Became a Graph in 2026 — and the Hard Part Is Still Unsolved
With ADK 2.0's GA, LangGraph, OpenAI's Agents SDK, Google's ADK, and Microsoft's Agent Framework all now run on a graph execution engine. The programming model war is over. It settled the easy question.
5 min
Declarative Agents: When a YAML File Should Define Your Agent — and When It Can't
Microsoft and Google both now let you define an agent in YAML instead of code. The split isn't about simplicity — it's about whether your agent's logic lives in its wiring or in its decisions.
5 min
Context Compaction Is Quietly Deleting Your Agent's Guardrails
The summary your long-running agent writes to stay under its token budget is lossy in one direction: it keeps the rules that fire and drops the rules that forbid. New research puts a number on how fast safety erodes.
5 min
Brute-Force vs Approximate Vector Search: Do You Even Need a Vector Database?
Approximate nearest-neighbor search is a tax you pay to survive scale you may not have. Below a few hundred thousand vectors, exact brute-force is faster, perfectly accurate, and has no index to rot.
4 min
When "Trust This Folder" Means Remote Code Execution: The Amazon Q Flaw Every Coding Agent Shipped
Amazon Q auto-ran an MCP config out of any repo you opened, with your live AWS keys in the process. It got a CVE. The identical bug in Claude Code, Cursor, Gemini CLI and Copilot got declared working-as-designed — because the trust prompt you inherited from your editor was never a consent to run code.
5 min
Why AI Browsers Still Can't Stop Prompt Injection
Nearly a year after the first Comet and Atlas exploits, the browsers' own makers say prompt injection may never be fully solved. The reason is structural, not a bug waiting for a patch.
5 min
AI Agents Are Finding Real Zero-Days at Scale — and Drowning Maintainers in Fake Ones
An autonomous agent found 21 genuine zero-days in FFmpeg for about $1,000. The same technology just made curl kill its bug bounty. Discovery got cheap; disposition didn't.
5 min