GitHub Repo

GitHub 熱門專案、開源工具、框架、runtime 與重要 release。

FluxBench Puts Chip Agents Through the Full RTL-to-GDS Flow, With Performance Gaps of Up to 86% on the Same Model Architecture

FluxBench uses standardized prompts, tools, and technology libraries to test agents across the full flow from RTL generation through synthesis, placement and routing, and ECO, rather than evaluating only one-shot code output. The authors report that different agent frameworks using the same base model can exhibit a performance gap of 86.27%, although the commercial EDA experiments are limited in scope and the paper was previously withdrawn and resubmitted.

2026-07-27

AI 安全

Destructive Command Guard Uses Rule-Based Hooks to Block Dangerous Agent Commands, Gains Nearly 500 GitHub Stars in One Day

The Rust tool dcg intercepts operations that could damage Git repositories, file systems, databases, and cloud resources before AI coding agents execute them. The project gained about 497 stars on July 26 alone, but it remains a pattern-matching defense and cannot replace sandboxing, permission isolation, and backups.

2026-07-27

推論系統

Nativ Packages MLX-VLM, Local APIs, and Performance Telemetry into an Open-Source macOS Inference Workspace

Nativ v0.0.1 integrates model downloads, chat, monitoring, and OpenAI- and Anthropic-compatible endpoints into a native SwiftUI app, recently drawing attention in the local AI community. The initial release supports only Apple Silicon and macOS 26, and no cross-model performance or compatibility benchmarks have been published.

2026-07-27

推論系統

AMD Open-Sources Hyperloom to Automatically Rewrite and Validate GPU Inference Optimizations Through a Multi-Agent Closed Loop

AMD has released ROCm Hyperloom 1.0.0a1, enabling agents to handle everything from performance profiling to kernel and host-code modifications, then decide whether to retain changes based on correctness and speed tests. The initial release supports only three Instinct GPUs, and the claim of reducing optimization time “from weeks to hours” remains AMD’s own; adopters will need to reproduce the results with their own models.

2026-07-27

AI 安全

Low-Quality AI Reports Drive Up Triage Costs as GitHub Bug Bounty Program Adopts Public and Invite-Only Tracks Today

Starting July 27, GitHub is using a HackerOne signal threshold to restrict submitters without an established track record, while moving higher rewards and faster responses to an invite-only VIP program. The changes directly address the rise in low-effort and AI-generated reports, but may also raise the barrier for new researchers submitting valid vulnerabilities.

2026-07-27

代理工具

Antigravity CLI 1.1.7 Stops Disabled Plugins from Running Hooks and Adds Full Context to Compound Command Approvals

Google has fixed an issue in Antigravity CLI where hooks, rules, and other custom components continued to load after a plugin was disabled, preventing broken or untrusted scripts from continuing to interfere with agent workflows. The new version also displays compound shell commands in full when approval is required, but relaxes OAuth issuer validation for compatibility with non-standard MCP providers—a change that deployers should review separately.

2026-07-27

AMD Opens the Full Instella-MoE Training Pipeline, With the 16B Model Activating Only 2.8B Parameters per Token

AMD has released six Instella-MoE checkpoints spanning pretraining, mid-training, long-context extension, SFT, DPO, and reinforcement learning, along with the training frameworks, data recipes, and inference code. The model uses Gated MLA and FarSkip-Collective to reduce attention and cross-GPU communication costs, but a formal technical report and independent evaluations are still pending.

2026-07-27

AI 安全

NanoClaw MCP Approval Cards Hid Execution Parameters, Allowing Agents to Turn One-Time Consent into Persistent Execution Settings

The newly registered CVE-2026-17434 identifies an authorization gap in NanoClaw versions before 2.0.64: the MCP server approval card shown to administrators did not fully display the parameters and environment variables that would actually be applied. The fix now presents the complete payload, masks secret values, and limits input sizes, but affected deployments must still verify their versions and existing configurations.

2026-07-27

AI 安全

SiYuan MCP Endpoint Lacked Role Checks; Version 3.7.2 Fixes Flaw Allowing Low-Privilege Users to Invoke Core Tools

The newly disclosed CVE-2026-66012 shows that, before SiYuan 3.7.2, the `POST /mcp` endpoint checked only general authentication status, without enforcing an administrator role or read-only restrictions. Because MCP can expose core note-management capabilities to AI clients, accounts intended only to read content could potentially use it to perform state-changing operations.

2026-07-27

硬體

Ultralytics 8.4.105 Expands Edge Deployment for YOLO26 Depth Models and Fixes Quantization and Export Paths

Ultralytics 8.4.105 adds support for YOLO26 depth-estimation models on Hailo-8L and Qualcomm QNN, while improving deployment backends including CoreML, OpenVINO, and NCNN. The release also enables interrupted knowledge-distillation checkpoints to be validated and exported directly, although performance gains still need to be measured separately on the target hardware.

2026-07-26

代理工具

DNS-AID Builds an Agent Discovery Layer with SVCB and DNSSEC, Freeing MCP and A2A Endpoints from Centralized Directories

DNS-AID has launched a public website and an Apache 2.0-licensed reference implementation that let organizations publish agent endpoints, protocols, and capability documents as existing DNS records. The approach can use DNSSEC to authenticate the publisher’s domain, but it still cannot prove that an agent itself is secure, that its capability claims are accurate, or that it should be authorized.

2026-07-26

代理工具

Hallmark Jumps From About 7,200 to 17,000 Stars in Two Days, Using a Rule-Based Skill to Constrain Agent-Generated Interfaces

Hallmark has seen rapid adoption on GitHub by packaging layout structures, typography, color, and anti-template checks into a Skill that Claude Code, Cursor, and Codex can load. Rather than training or fine-tuning models, it adds version-controlled design policies and self-review before and after generation.

2026-07-26