Archive
Agent、MCP、coding agent、工作流自動化與評測。
AI 安全
The AAIF open-source agent Goose 1.49 allows `PreToolUse` policies to reject tool calls when execution fails, preventing operations from continuing after security checks break down. The new release also adds a stable `tool_call_id` and result events, but remains fail-open by default, requiring administrators to explicitly change the configuration.
最新模型
Google has moved Gemini 3.8 Flash into production, offering a 1 million-token context window, three thinking levels, and built-in tools, while making it the default model for Antigravity managed agents. Coding benchmark results have improved, but most figures still come from Google, and the model card also reveals a relative decline in non-English safety evaluations.
AI 安全
Cloudflare’s early-preview service combines source code analysis results with actual routes, traffic, WAF status, and attack events, then uses GPT-5.6 Cyber to validate vulnerabilities and proposed fixes. The model does not directly modify the environment, but data is sent to OpenAI for inference, and Cloudflare has not disclosed false-positive or remediation success rates.
AI 基礎設施
HyperPod InstantStart orchestrates EKS, GPU capacity, training, inference, and storage operations as retryable, stateful workflows, then exposes them to agents through MCP tools. Agents do not operate the AWS CLI directly, but deployers remain responsible for IAM, Kubernetes, networking, and cross-service cost management.
代理工具
Agno 3.0.6 introduces stateless MCP transport, allowing any replica to handle requests without session affinity. The framework also adds protocol version negotiation and a Server Card, but retains the legacy session-based mode as the default for compatibility with existing deployments.
最新模型
Zhipu AI has unveiled GLM-5.3-Flash, a native multimodal model with 320B total parameters and 18B active parameters per token, releasing its weights under the MIT License. The new architecture is claimed to require three times less attention computation and 4.4 times less KV cache than GLM-5.3, but “Flash” does not mean it can be easily deployed on a typical workstation.
GitHub Repo
The new release adds Parity-aware BPE, enabling tokenizers to prioritize improving the language with the worst compression at each merge instead of merely pursuing the highest overall frequency. The feature can be used to train new vocabularies, but it does not automatically reduce Chinese token costs in existing models.
最新模型
GWM Worlds 2 combines autoregressive diffusion, a causal video decoder, and the structured WorldPrompt format to enable real-time control of persistent worlds through text-based actions and camera signals. The system remains a closed research preview, with fast camera movement, long-term consistency, and reproducible evaluation among its clear shortcomings.
AI 安全
Researchers collected 7,534 citations across 760 Sonar queries, finding that long-tail websites frequently appeared in the retrieval evidence used by recommendation systems. Three sites suspected of sharing the same operator accounted for just 2.4% of all citations, and the study did not establish that these pages actually changed the recommendations.
代理工具
New research turns source code, documentation, and tests into operational knowledge that can be loaded on demand, delivering gains across four research benchmarks with the same underlying model and agent framework. Skill-building costs are accounted for separately, however, and the results remain the authors’ own evaluation, so they should not be treated as evidence that skills can replace model training at low cost.
代理工具
The Claude Platform CLI adds `ant apply`, which synchronizes managed agent resources from Markdown, YAML, or JSON files in a repository. It provides previews, dependency ordering, and drift detection, but its state file still contains organization identifiers, and it currently manages only the Anthropic platform.
AI 安全
The open-source AI penetration testing tool Shannon 3.0 adds multi-stage code analysis, candidate vulnerability reconciliation, and native SARIF support. The new version triggers pipeline gates only for successfully reproduced vulnerabilities, but it can modify the target’s state, and 2.x workspaces cannot be resumed.