How to Migrate an AI Agent to a New LLM Without Breaking It
The new model isn't worse. Your prompt was quietly overfit to the old one's defaults — so the swap changes your agent's behavior even when you change nothing. Freeze the baseline before you switch, not after.
5 min
How to A/B Test an AI Agent in Production (and Why Your t-Test Is Lying)
You're not measuring a button — you're running a noisy judge over a stochastic, multi-turn system. The variance stacks, and the standard playbook quietly breaks. Here's the version that survives contact with an agent.
5 min
Higgs Audio v3: A Chat-Native Open TTS for Voice Agents — With a License You Have to Read
Boson AI's 4B model speaks before the sentence is finished, which is the right shape for a voice agent. The catch isn't quality or speed — it's the non-commercial license on the exact use case it was built for.
4 min
Foundry Hosted Agents: Any Framework, Its Own Identity, Zero When Idle
Microsoft's new agent runtime scales to zero like a serverless function but keeps the filesystem and a machine identity — quietly moving the lock-in from your framework down to the sandbox your agent lives in.
5 min
Does Multi-Agent Debate Improve Accuracy? Usually Not Enough to Beat One Model Sampled Twice
Making several agents argue toward consensus does raise accuracy a few points — but a single model sampled the same number of times, at the same cost, usually matches it, and debate has a failure mode solo sampling doesn't.
4 min
Deterministic vs LLM Orchestration for Multi-Agent Systems
The field spent a year making the orchestrator smarter. Microsoft's Conductor argues the routing layer should be dumb — and spend zero tokens deciding what runs next.
5 min
CrewAI Flows vs Crews: When to Let Agents Decide and When to Script Them
CrewAI ships two orchestration models in one framework. Picking wrong is why your multi-agent demo worked and your production run didn't — and the fix is usually not choosing between them.
4 min
Best Vector Database for Multi-Agent Systems: Why the Single-Query Leaderboard Lies
Every vector-DB benchmark measures one query at a time. A multi-agent system is the opposite workload — many agents reading and writing at once — and that is exactly where the rankings flip.
4 min
App Intents: How Your App Plugs Into Apple Intelligence's On-Device Agent
Apple's agentic bet is the mirror image of MCP: no server, no OAuth, no network hop — just a typed contract the OS reads on-device. An app without one is invisible to Apple Intelligence.
4 min
AI Agent Tool-Call Error Handling: The Most Dangerous Failure Returns 200 OK
Exponential backoff and durable checkpoints handle the errors that throw. They do nothing for the tool call that succeeds with the wrong answer — and that's the one that kills agents in production.
5 min
AGENTS.md vs Agent Skills: What Vercel's Evals Actually Prove
A compressed 8KB index in AGENTS.md scored 100% on Vercel's coding-agent evals; Skills topped out at 79% — because the agent skipped invoking the Skill 56% of the time. The lesson isn't "dumb beats smart."
5 min
Agent Framework Token Costs, Compared: Why the Same Task Can Cost 2–3× More on CrewAI
Independent 2026 benchmarks running the identical task on the identical model find the framework alone can double or triple the token bill. The number you can't see on the invoice is the one the framework spends on your behalf.
5 min
x401: The Protocol for Proving Who Authorized an AI Agent's Action
Proof shipped an open HTTP challenge that makes an agent present a signed credential naming the human behind it — arriving, tellingly, after the payment rail it completes.
4 min
X's Hosted MCP Server Reads Everything and Posts Nothing
X now runs an official Model Context Protocol server at api.x.com/mcp so agents can search posts, look up users, and read trends through your own login — but it will not let them post. The asymmetry is the whole design.
4 min
Why Your AI Agent Bill Grows Faster Than Its Workload: The Quadratic Nobody Prices In
Token prices are falling and agent bills are still exploding. The reason isn't the model getting pricier — it's that an agent re-pays for its entire history at every step, so cost scales with the square of the loop, not its length.
5 min
vLLM Rewrote Its Frontend in Rust — and the GPU Was Never the Bottleneck
One Rust process now matches 32 Python API servers. The lesson isn't 'Rust is fast' — it's that everyone was optimizing the wrong layer of the serving stack.
4 min
TensorZero Shut Down With Money in the Bank: What the LLMOps Squeeze Looks Like
An 11.7k-star, Rust-based open-source LLMOps stack archived itself on June 12 — not because it ran out of adoption or cash, but because the wedge it was built on is closing from both ends.
4 min
Redis Agent Memory Server: Two-Tier Memory as Infrastructure, Not a Library
Mem0, Letta, and Zep argue about how to structure an agent's memory. Redis's answer is quieter and more radical: make memory a server, and move the expensive part off your agent's request path.
5 min
Red-Teaming AI Agents in CI: What RAMPART Does That a One-Off Pentest Can't
Microsoft open-sourced RAMPART — a pytest-native framework that turns an agent red-team finding into a test that runs on every commit. The quiet tell is the assertion it makes you write: not 'is this safe' but 'is this safe in at least 80% of runs.'
5 min
Playwright MCP vs the CLI: Why Your Browser Agent Burns 114K Tokens When It Could Use 27K
A browser agent running through Playwright MCP spends roughly four times the tokens of the same task run through the CLI. The gap is real — but the cheap path isn't free. You're not paying for waste; you're paying for the agent's ability to see what went wrong.
4 min
Parsing Partial JSON From Streaming Tool Calls: It's a Prefix, Not a Bug
When a model streams a tool call, the arguments arrive as half-written JSON. The teams that struggle treat it as corruption to repair. It's a valid prefix to complete — and the naive fix is quietly O(n²).
5 min
OpenCode vs Claude Code: You're Comparing a Harness to a Product
OpenCode passed Claude Code on GitHub stars this year, and everyone rushed to benchmark them against each other. But one of them has no benchmark score of its own — and that's the whole point.
4 min
OpenAPI to MCP: Why Auto-Generating a Tool Per Endpoint Breaks Your Agent
The one-click tools that turn a REST spec into an MCP server work perfectly — and that's the problem. The easier the conversion, the worse the agent, because ease produces the exact abstraction an LLM can't use.
5 min
OpenAI Agents SDK vs LangGraph: Two Frameworks Answering Different Questions
The usual framing is 'simple handoffs vs powerful graphs.' That's the wrong axis. One framework asks who is in charge right now; the other asks what shape the computation has — and they fail from opposite directions as you scale.
5 min
On-Device Vector Search for Agent Memory: sqlite-vec, ObjectBox, and Qdrant Edge
A hosted vector database is the right home for a shared knowledge base and the wrong home for one agent's private memory. Three embedded engines are quietly claiming the second half of the workload.
4 min
MCP Tool Schemas Just Got oneOf and $ref — and Your Model Probably Won't Enforce Them
The 2026-07-28 MCP spec adopts JSON Schema 2020-12, so a tool can finally declare unions, conditionals, and references. The quiet catch: the richest constructs it unlocks are exactly the ones a hosted provider's strict mode refuses to enforce.
5 min
MCP Tool Poisoning: How a Poisoned Tool Description Turns Your Agent Against You
Microsoft's incident response team just walked through a live case: an attacker edits a tool's description — not its code, not your prompt — and the agent quietly exfiltrates your invoices. Here's why this is worse than prompt injection.
5 min
Your Eval Scores Dropped. Was It the System, or the Judge?
LLM-as-a-judge treats a versioned API as ground truth. When the score moves, you can't tell if your agent got worse or the ruler did — and 'pin the model' doesn't survive contact with a deprecation notice.
4 min
LlamaFirewall's AlignmentCheck: The Agent Guardrail That Reads the Reasoning, Not the Input
Most prompt-injection defenses scan what goes in and what comes out. Meta's open-source LlamaFirewall adds the one check a classifier structurally can't do — it audits the agent's own chain-of-thought for the moment its goal quietly changes.
4 min
The Jailbreak Severity Standard: What Four Labs Agreed On After Claude Fable 5 Vanished for 18 Days
A shared rubric for scoring how dangerous a jailbreak is arrived the same week a frontier model came back from an export-control ban. The rubric's real job isn't safety — it's giving governments and labs the same units to argue in.
6 min