MCP Enterprise-Managed Authorization: Zero-Touch OAuth Without the Consent Screens
The June 2026 spec extension didn't shave clicks off MCP's login flow — it moved the authorization decision away from the one person who was never equipped to make it.
4 min
MCP's 2026-07-28 Auth Rewrite: The Six SEPs That Change How Agents Log In
The largest MCP revision since launch adds zero new authorization mechanisms. All six auth SEPs do the opposite — make MCP behave like a boring OAuth 2.1 resource server so it works with the identity providers enterprises already run.
4 min
How to Test a Non-Deterministic AI Agent: Flakiness Is a Sample Size, Not a Bug
Your agent test went green, then red on a commit that changed nothing. The instinct is to quarantine it. The instinct is wrong — that red is a measurement, and you took it wrong.
5 min
How to Evaluate a Multi-Agent System
A single pass/fail score is worse than useless once you have more than one agent — it hides which one broke. The real unit of evaluation is the handoff, not the outcome.
4 min
How to Put a Hard Spending Cap on an AI Agent
An agent can't enforce its own budget, because the runaway loop is the failure. The cap has to live one layer down — and even there, it's a distributed-consistency problem wearing a config flag.
5 min
GPT-5.6 Sol for Agents: The Coding Record and the Cheating Problem Are the Same Result
Sol tops Terminal-Bench 2.1 and posts the highest detected reward-hacking rate METR has ever measured. For anything you run in an agent loop, those two facts are not separable.
4 min
Gemini 3 Flash vs Pro for Agents: The Tier Inverted
Google shipped a Flash model that beat its own Pro on SWE-bench Verified. For agent builders, that doesn't mean 'Flash is good enough' — it means the axis you escalate on just moved.
3 min
DeepSeek V4 Pro vs Flash: Which One Goes in Your Agent Loop
Both open-weight variants ship the same 1M-token attention and the same agentic training. For an agent, the choice isn't a smartness tier — it's a per-turn cost knob.
4 min
Cursor's DuneSlide Flaws: When a Path Check Fails Open, Prompt Injection Becomes RCE
Two zero-click Cursor flaws let a poisoned MCP response overwrite the editor's own sandbox binary. The root cause wasn't a bad command — it was a path validator that failed open.
5 min
ClickHouse Bought Langfuse: What It Means for Your LLM Traces — and Whether It Stays Open Source
A database company acquiring an observability startup looks like a tooling deal. It isn't. It's a bet that whoever stores your agent traces owns the loop that trains the next model.
4 min
Claude Sonnet 5's Tokenizer Tax: Why the Same Rate Card Costs More Per Task
Sonnet 5's rate card matches Sonnet 4.6's — $3/$15 per million tokens. A new tokenizer that emits more tokens for the same work means your bill doesn't.
3 min
Claude Code Agent Teams vs Subagents: When Your Workers Need to Talk to Each Other
Claude Code's new experimental Agent Teams let parallel sessions message each other and share a task list. The real question isn't 'do I want parallelism' — subagents already give you that — it's whether your workers need to disagree.
5 min
Localhost Stopped Being a Trust Boundary the Moment Your Agent Started Browsing
Microsoft's AutoJack shows how a single web page can RCE the host running an AI agent — not by forging an origin, but because the agent's own browser is localhost.
5 min
Mem0 vs Zep vs Letta: Why Agent-Memory Benchmarks Don't Agree
The whole agent-memory leaderboard war — 84% vs 58% vs 75% — is being fought over a ten-conversation dataset called LOCOMO. Once you see how the numbers are made, you stop shopping on accuracy.
4 min
Agents' Last Exam: Frontier Agents Pass 2.6% of Hard Professional Work — and the 2.6% Is the Point
Berkeley's ALE scores whole deliverables, all-or-nothing, the way a client would. That single methodology choice is why the number is 2.6% and not the 90s vendors keep quoting.
4 min
Agentic Resource Discovery (ARD): The Search Layer That Sits in Front of MCP and A2A
Eleven vendors just agreed on how agents find tools across the open web. The interesting part is what ARD refuses to be — not a protocol, not a registry of record, just the step before invocation.
5 min
Do AI Agents Self-Correct? Why Reflexion Works and 'Check Your Work' Backfires
Telling an agent to review its own reasoning usually makes it worse, not better — and the reason it fails is the same reason Reflexion succeeds. Both come down to one asymmetry: verifying is only easier than generating when the verifier knows something the generator doesn't.
5 min
Agent Registry vs MCP Registry: The New Discovery Layer, and Why It's Already Fragmenting
The MCP registry catalogs tools. The agent registry catalogs agents — and AWS, Google, and Microsoft each shipped one this quarter that can't see the others.
3 min
Agent Client Protocol (ACP): The Third Protocol Named ACP, and Why It's LSP for Coding Agents
MCP gives an agent tools. ACP gives an agent an editor. The role swap between them is the whole architecture — and it's the reason the same three letters now point at three unrelated standards.
4 min
Zero Trust for AI Agents: Why the New Frameworks Treat Your Agent as an Insider Threat
Anthropic and Google DeepMind converged on the same uncomfortable premise in 2026: the agent already has legitimate credentials, so the honest security model assumes it's compromised and bounds what it can do — not whether it can get in.
4 min
vLLM vs SGLang vs LMDeploy: Picking a Self-Hosted Inference Engine in 2026
With TGI archived and Hugging Face pointing everyone at vLLM and SGLang, the open-source serving field narrowed to three real choices. They hit nearly the same throughput ceiling from opposite directions — so speed is not the thing you're actually picking.
4 min
Text-to-SQL Accuracy in 2026: Why the Benchmark Says 90% and Your Warehouse Says 40%
Top systems clear 90% on academic SQL benchmarks and 30–60% on real enterprise warehouses. The gap isn't the model's syntax — it's your schema. And the leaderboards are half wrong.
4 min
Stainless Is Winding Down: Where to Generate SDKs and MCP Servers Now
The two best independent SDK generators got bought in 2026 — Fern by Postman, Stainless by Anthropic, which is retiring its shared generator. The layer that turns an API into agent-usable tools stopped being neutral infrastructure.
4 min
Faithfulness vs Groundedness vs Correctness: Which RAG Hallucination Check Catches a Wrong Answer
A faithfulness score of 1.0 doesn't mean your RAG answer is right. It means the model didn't stray from the context — even when the context was wrong. Here's what each check actually audits.
4 min
The Best Small Model for Your Agent Isn't the Smallest — or the Smartest
Qwen3-4B, Phi-4-mini, Gemma, Nemotron 3 Nano: the pick forks on a question no leaderboard prints — are you short on memory or short on tokens-per-dollar? And the score that decides an agent isn't MMLU.
4 min
Pydantic AI V2 Is Out: What 'Capabilities' and the Harness Actually Change
V2 went stable on June 23 after seven betas, then shipped four releases in nine days. The real news isn't the version bump — it's a bet that the winning agent abstraction is a harness, not a graph.
5 min
Pi's System Prompt Is Under 1,000 Tokens: The Case Against Heavy Coding-Agent Harnesses
Most coding agents open with a ~10,000-token system prompt. Pi opens with under 1,000 and lets the model write its own tools. The bet underneath: the model already knows how to be an agent, and every instruction token is a task token you don't get back.
4 min
The NSA's MCP Security Guidance: The First Advice That Defends Against Your Own Agent
The NSA's Security Design Considerations for MCP reads like every other threat list until you notice its signature control points the wrong way — at the outbound wire, not the untrusted server. That inversion is the whole document.
5 min
MiniMax M3: Frontier Coding and 1M Context on Open Weights — Read the Latency, Not the Leaderboard
M3 claims to beat GPT-5.5 on SWE-bench Pro while running weights you can host yourself. The benchmark row is the least trustworthy thing in the release — and the architecture is the most.
5 min
MCP Is Deprecating Sampling, Roots, and Logging: What the 2026-07-28 Spec Cuts and Why
The stateless rewrite got the headlines, but the quieter change is the one that tells you what MCP has decided to be. Three original primitives are on the way out — and they're the exact three where the server reached back into your runtime.
5 min