Three ways to run an agent that lives longer than one request — and they disagree on one axis: how much of the loop you write yourself. The right pick follows how much control you want and whether the agent must run anywhere but Cloudflare.
Don't pick one Claude model for your agent — pick three, route by how hard and how frequent each step is, and do it before Sonnet 5's promo pricing expires on August 31.
The client is Apache-2.0 and self-hostable; the brain is still OpenAI's. Here's what `@openai/codex-security` actually does, the exact commands to run your first scan, and the one flag that decides whether founders can trust it in CI.
v2.0.0 shipped with the 2026-07-28 spec and split `@modelcontextprotocol/sdk` into nine subpackages. The split isn't bookkeeping — it's the packaging finally matching a stateless world. Run the codemod, pick two or three packages, delete the fat import.
There's no converter button. Classic ran your config; AgentCore runs your code. Here's the concrete port map — reuse the Lambdas and Knowledge Base, rewrite the orchestration — with the verified CLI and SDK calls, ARM64 gotcha included.
Anthropic ships two agent-memory primitives with nearly identical names. One is an interface you back yourself; the other is managed, versioned state you rent. The deciding question isn't which remembers better — it's who runs your agent loop and who should own the bytes.
MAI-Realtime — spotted in a hidden preview this week — gives Microsoft a native listen-and-speak voice model. With OpenAI and Google already there, full-duplex just stopped being a differentiator. Here's where the moat moved.
Both give an agent memory that survives across sessions. One is a primitive you write to; the other is a layer that decides what to remember for you. That single difference — who does the extraction — is the whole decision, and it's the one the comparison tables never name.
Three genuinely self-hostable eval-and-tracing platforms, three different licenses. The choice that decides your lock-in isn't a feature — it's the LICENSE file. Here's who picks which.
A single standard parameter now sets reasoning effort across OpenAI, Anthropic, xAI, and Fireworks. It's portable. It is not equivalent — 'medium' means a fixed gear on one provider and half your token budget on another.
The headline '$/1M tokens' number is the one you'll budget on and the one that's wrong. Here are the six things a model's pricing page hides — and the questions that turn a sticker price into your actual bill.
The technique that cuts RAG retrieval failures by two-thirds isn't one trick — it's four, stacked. Here's the whole build: contextualize each chunk, index it two ways, fuse the rankings, and rerank. With code.
A copy-paste walkthrough: the Cloudflare Agents SDK puts each agent in its own Durable Object — its own compute plus its own SQLite file — so memory lives inside the agent at the edge, with zero infrastructure to run.
You can't compute recall@k or MRR without labeled (question, relevant-chunk) pairs — so bootstrap them from your own chunks with an LLM, then score your retriever in ~15 lines of numpy.
V4 Flash 0731 shipped July 31 as an OpenAI-compatible model: two lines to point your agent at it, one extra_body flag to turn thinking on or off, and one gotcha in the 384K-token output ceiling. Python, Node, and curl.
Simile just raised $200M at $2B to sell simulated customers. You can build a rough, honest version this afternoon — good enough to kill a bad pricing page before real users ever see it, as long as you calibrate it and never trust it as a verdict.
Project Think is Cloudflare's opinionated base class for long-running agents: durable turns that survive an eviction, sub-agents with their own SQLite, and a code sandbox — wired together. Here's the whole loop, from empty folder to a turn that resumes after a crash.
Google shipped Agents CLI on August 3. The interesting part isn't a new terminal agent — it's that Google is distributing its Cloud-deploy playbook as skills you drop into Claude Code, Codex, or Antigravity. Here's what it actually is, and the wedge it opens.
Microsoft made Foundry's hosted agents generally available — and the interesting part isn't the runtime. It's that the old 'which framework?' decision is finally decoupled from 'where does it run?', and every deployed agent now gets its own Entra identity. Here's what actually changed for a solo builder, what it costs, and where the lock-in hides.
Google's Agents CLI shipped August 3. Here's the whole loop — install, scaffold, run locally, evaluate, deploy, publish — with the real commands, so you can take an ADK agent from an empty folder to a Google Cloud runtime in one sitting.
Two things collided this month. On July 31 DeepSeek shipped V4 Flash 0731 — an open-weight model that beats its own Pro on agent benchmarks at $0.14/$0.28. On August 31 Claude Sonnet 5's $2/$10 introductory price expires and jumps 50%. If bulk agent work is your biggest line item, this is the decision to make before the cliff.
Four open-source tools now give Claude Code, Codex, and Cursor one shared memory. They don't disagree on recall — they disagree on what your agent's memory *is*: files you own, a tool your agents call, a local service, or a second-brain agent.
Cline's July 31 build routes native MCP tool calls by server name instead of a random in-memory id, so routing outlives restarts and server-list changes. It landed three days after MCP's spec dropped sessions entirely — the same lesson, on both sides of the wire.
The August 4 build extends sandbox credential masking from environment variables to files on Linux and WSL — a sandboxed command reads a decoy copy while the proxy swaps in the real secret on egress. Here's the mechanism, the one setting it depends on, and where it quietly falls back to a hard deny.
Existing agents keep running, but the model catalog is frozen at July 30 and new accounts get a 403. The real decision isn't Classic vs AgentCore — it's whether your agent logic is portable enough that AWS's next retirement doesn't become your next rewrite.
July's funding wave bet on controlling the agents or owning a regulated vertical. On August 3, capital jumped one layer lower — to the reactors that power the models, the light-based chips meant to run them cheaper than a GPU, and the autonomous hackers that defend against other autonomous hackers. Here's the day's board and the one line each raise writes for a team of one.
Three experimental endpoints — generate, improve, and templatize a prompt — return an error after August 17, and the legacy Workbench that held your saved prompts and evals goes with them. Here's what to export today and a copy-paste replacement that no vendor can deprecate.
On August 5, calls to claude-opus-4-1 stop working — no grace period. And on Opus 4.7 and later, setting temperature, top_p, or top_k at all now returns a 400. Both are one-line fixes if you catch them before your users do.
Nine models, four price tiers, one decision. A founder's reference for what to run each agent workload on this month — with real per-token prices, the caveats that make them lie, and the one config change that lets you switch.
Every 'give your agent memory' course collapses three different problems into one word. They aren't the same problem, and they don't use the same code. Here are the three tiers, the one call that wires each, and the rule for when a fact should climb from one tier to the next.