The 'AI gateway' stopped being a cost-tracking load balancer and turned into the policy layer for autonomous agents — and that shift is why the newcomers are all written in Go and Rust, benchmarking themselves against LiteLLM.
A hosted vector database is the right home for a shared knowledge base and the wrong home for one agent's private memory. Three embedded engines are quietly claiming the second half of the workload.
The 2026-07-28 MCP spec adopts JSON Schema 2020-12, so a tool can finally declare unions, conditionals, and references. The quiet catch: the richest constructs it unlocks are exactly the ones a hosted provider's strict mode refuses to enforce.
LLM-as-a-judge treats a versioned API as ground truth. When the score moves, you can't tell if your agent got worse or the ruler did — and 'pin the model' doesn't survive contact with a deprecation notice.
Most prompt-injection defenses scan what goes in and what comes out. Meta's open-source LlamaFirewall adds the one check a classifier structurally can't do — it audits the agent's own chain-of-thought for the moment its goal quietly changes.
A shared rubric for scoring how dangerous a jailbreak is arrived the same week a frontier model came back from an export-control ban. The rubric's real job isn't safety — it's giving governments and labs the same units to argue in.
OpenAI's new three-tier lineup is priced for a router, not a pick. For agent workloads the flagship is the wrong default — the interesting model is the one in the middle.
The field for making an agent 'speak UI' has split into two camps — your codebase owns the components, or the protocol does. Which repo you reach for is really a bet on who controls the widget.
Foundry Hosted Agents reached GA in early July 2026 as a framework-agnostic runtime. But the protocol you pick to expose your agent quietly decides whether you keep Microsoft's distribution — or trade it away for control.
Proving who an agent is has a dozen answers now. Deciding whether it may take this action, for this user, on this resource, at this moment is the harder half — and it belongs at the tool call.
NVIDIA sells the Spark as a 200B-parameter supercomputer for your desk. The spec that actually decides whether it's right for you is a much quieter one — and it's on the memory bus, not the die.
Claude Code proved the 'deep agent' pattern — planning, a filesystem, sub-agents, skills. A small cluster of Python repos now rebuilds that harness on Pydantic AI, so it runs on any model you own.
Both give your agent exactly-once, resume-after-crash workflows. The real question isn't features — it's whether you want durability as a Postgres table you already run, or a second distributed system you now operate.
SAMR approved seven national standards for how agents find and call each other. The order they're stacked in — identity before capability — is the whole argument.
Alibaba's AgentScope hit 2.0 and calls itself production-ready; LangGraph has owned that word for a year. They converge on the same job from opposite origins — and the real choice is which failure you're more afraid of.
Exabeam open-sourced Praxen, a tool that reads your agent's whole implementation and compares it to a written charter of what it's allowed to do. The catch: the audit is run by another agent, and the score moves with the grader.
Apple's new mcpbridge binary doesn't put AI in Xcode. It exposes Xcode's live compiler state as MCP tools over XPC — so you bring Claude Code, Codex, or Cursor, and the IDE brings the ground truth.
Weaviate 1.37 builds a Model Context Protocol server into the main binary, so an agent calls hybrid search directly. The subtle part isn't the wiring — it's that the model now owns the alpha knob and can write to your index.
The headline in AI SDK 7 isn't a new agent class. It's that durability and human approval stopped being things you bolt on and became primitives — at the cost of an ESM-only, Node 22+ upgrade.
PageIndex hits 98.7% on a financial-QA benchmark where vector RAG scores ~50% — and it never embeds a thing. But the headline gap hides the real decision: not accuracy vs. vectors, but where you want your cost to live — index-time or query-time.
The headline in SGLang's June release isn't a speed number — it's a deprecation. Speculative decoding stopped being an expert knob and became the default path, and the old one is on the way out.
There are two ways to make an agent survive a crash, and they fail in opposite directions. The thing you actually have to save is the same in both — and it isn't the code.
Qualcomm is buying the one software layer designed to make every chip interchangeable — including its rivals'. When you can't dig a moat as deep as CUDA, you commoditize the thing the moat protects.
Claude's newest tool-use mode writes a script that calls your tools in a sandbox and returns only the answer. It cuts tokens and round trips — and quietly removes the trace your evals were reading.
Prefix caching assumes every token leaves a reusable KV entry. Mamba layers don't — they carry one recurrent state — so serving engines align the cache block to the Mamba page, and short prompts fall off a throughput cliff.
Eight months after launching a no-code way to build agents, OpenAI is telling everyone to write code again — and pointing its own eval users at a competitor.
Nemotron 3 Ultra activates 55B of 550B parameters per token — the ordinary MoE trick. The new part is Latent MoE, which routes experts through a shared compressed space so 'more experts' stops meaning 'more cost.'
Code-execution agents always ran into the same wall — running model-written code safely is expensive. Hyperlight's sub-2ms micro-VM moves that wall, and changes what the pattern costs.
The June 2026 spec extension didn't shave clicks off MCP's login flow — it moved the authorization decision away from the one person who was never equipped to make it.
The largest MCP revision since launch adds zero new authorization mechanisms. All six auth SEPs do the opposite — make MCP behave like a boring OAuth 2.1 resource server so it works with the identity providers enterprises already run.