Archive
Agent、MCP、coding agent、工作流自動化與評測。
AI 安全
ToolHive 0.47.0 can verify agent skills and plugins using pinned Cosign public keys and exposes SPIFFE trust configuration through Kubernetes CRDs. The release also tightens boundaries around OIDC discovery, OAuth permissions, and callback data leakage, though deployers must still configure trust roots for several mechanisms themselves.
代理工具
Docker Sandboxes 0.42.0 lets the same `sbx` CLI manage local and cloud agent sandboxes, with support for file transfers, SSH, public HTTPS services, and separate network policies. The release also strengthens the change-preview and confirmation flow for `sbxenv.yaml`, but includes compatibility changes to port defaults and environment-file semantics.
AI 安全
The Python Agents SDK can now apply input and output guardrails to function tools and local MCP servers, with customizable replacement messages passed to the model when content is blocked. The release also reduces the host environment variables inherited by local sandboxes, although coverage still excludes hosted tools and built-in execution tools.
AI 科研／形式驗證
OpenAI claims that an unreleased multi-agent system more capable than GPT‑6 Astra has constructed a proof that the three-dimensional Navier–Stokes equations lose smoothness in finite time under smooth external forcing. The team also released a Lean 4 formalization, but formal verification does not mean the mathematical community has accepted it as a solution to the Millennium Prize Problem.
代理工具
A Zstandard implementation experiment compared 26 conditions, including TDD, fuzzing, property-based testing, and formal verification. None consistently outperformed the default group, which received no additional instructions. Agents often correctly identified high-risk areas, yet generated invalid inputs, proved irrelevant properties, or encoded incorrect outputs into tests.
代理工具
The new release streamlines multi-provider model and transport settings and provides a reproducible Ollama/Qwen tool-calling smoke test. The diagnostic script independently verifies file side effects, reducing false positives when an agent merely claims in its response that it completed the work.
推論系統
A new open-source plugin supports multiple language and vision models on Tenstorrent hardware through the same OpenAI-compatible API, without forking the vLLM core. It also exposes current limitations: prefill and decode cannot be mixed in the same step, while LoRA, speculative decoding, and multi-host serving are not yet supported.
AI 安全
The official Python SDK now follows redirects only within an endpoint’s trust boundary and expands OAuth issuer validation. Legacy Streamable HTTP sessions expire after 30 minutes of inactivity by default, with each server retaining no more than 10,000 sessions.
電腦視覺
Alaya Lab and the University of Tokyo have introduced WorldSculpt, which generates each object in multi-view images as a complete, independently editable mesh before assembling the scene through rigid transformations. Although the model is fine-tuned only on single-object data, it can handle test environments containing 93 to 701 objects; however, it still requires reliable instance masks, 3D bounding boxes, and camera poses as input.
AI 安全
New security records for knowns, an AI project memory tool, show that older versions bound an unauthenticated administrative API to all network interfaces by default and contained path traversal, command injection, and MCP authorization bypass vulnerabilities. Most issues were fixed in version 0.30.0, but the model testing endpoint in version 0.33.0 can still send requests to arbitrary addresses, with no confirmed patched release available.
代理工具
AG2 1.0.4 adds ACP `session/load`, MCP tool namespaces, and configurable subagent fan-out limits, making long-running agents easier to resume while keeping resource usage under control. The release also brings tool blocklists, argument validation, and structured tool results into governance and tracing paths, although session state may still be distributed across external agent processes.
代理工具
Ripwire uses tree-sitter, a symbol relationship graph, and Personalized PageRank to generate reproducible file rankings and change-impact scopes for coding agents. First-party tests show better localization rates than five comparison tools, but an independent review found that compressing context may still degrade answer quality and increase overall agent costs.