AI News, page 6 of 6

AI and software engineering, as it happens.

GitHub's monthly commits went from 1.4 billion to 2.9 billion in four months, and the platform fell over

GitHub's CTO reported a 7 hour 47 minute outage on 17 August and gave the reason: monthly commits doubled since April. GitHub added 3 million CPU cores. The number nobody has added is review capacity.

Productivity

OpenAI is testing pricing where some customers pay only when the AI finishes the job

The Information reports that OpenAI has begun offering some large customers the option to pay only when its AI completes a task, rather than paying for every call.

Go-to-market

The newest npm worm did not forge a signature. It used a real one.

ChainDrop compromised more than 400 npm packages in under four hours on 4 August by riding a legitimate signed release pipeline, so every poisoned version carried a valid SLSA provenance attestation.

Infrastructure

GLM-5.3 went open weight and dropped MIT: hosts above $10 billion in revenue now need a security review

Z.ai put GLM-5.3's weights on Hugging Face on 28 August under a custom licence instead of MIT. Individuals are unaffected. Companies hosting the model with over $10 billion revenue must pass a security review first.

Models & agents

LM Studio's command reviewer kept approving risky commands because they looked necessary

LM Studio parses shell commands into syntax trees before its agent runs them, and says that clears as many as 82 percent without a model call. The model reviewing the rest had to be redesigned after it started approving risky commands.

Models & agents

Your tools are billing you for the word "severity" a few hundred times

When a tool hands an agent 500 records of the same shape, JSON repeats every field name 500 times. One measured comparison of a 25-issue list found a schema-first format used 49 percent fewer characters than pretty-printed JSON.

Productivity

Nvidia is reportedly buying Hugging Face for $12.9 billion, and neutrality is most of what it is buying

The Information reported that Nvidia agreed to buy Hugging Face for $12.9 billion. At roughly $150 million in annualised revenue, that is a multiple of about 86, so the price is for position rather than earnings.

Infrastructure

Someone actually tested Anthropic's Files API against pasting, and it billed slightly more

Anthropic's Files API left beta on 19 August. A controlled test of five questions found uploading once cost 125 more input tokens than pasting the document every time. Prompt caching cut billed input to roughly a third.

Productivity

Google DeepMind ran an evaluation where it never saw the questions and the evaluators never saw the weights

Model weights and benchmark questions met inside a hardware-encrypted enclave, so neither side saw the other's data. Google's report cites earlier research finding signs of benchmark leakage in about half of 31 models tested.

Models & agents

A computer agent hit 73 percent on OSWorld 2.0 by writing code instead of clicking

Simular says its Sai agent reached 73 percent on the 108-task OSWorld 2.0 benchmark at about two thirds the cost of the alternatives, using roughly 1.5 times fewer model calls by planning in code.

Models & agents

Researchers registered packages that companies' own agent files told agents to install, and got code running inside a Fortune 500 in under four minutes

A scan of 8,565 llms.txt files across 6,214 live domains found agent instruction files naming packages nobody had registered. The researchers registered some. First callback from a Fortune 500 environment came in under four minutes.

Infrastructure

A vendor-commissioned eval scored 0.00 percent prompt injection success. A targeted attack chain got 80 percent.

Johann Rehberger got code execution in Claude Code's Auto Mode from a single "summarize this website" request, at 60 to 80 percent success across small samples. Anthropic closed the report as working as designed.

Models & agents

Agent memory as a zip file of Markdown pages, not a pipeline with a graph database in it

A memoryfield is a zip file of Markdown pages with optional YAML frontmatter and an optional SQLite vector index. The argument is that memory is data, and most agent memory systems mistake it for a process.

Models & agents

ChatGPT Work is two different products with the same name, and only one runs code with internet access

Simon Willison worked out what ChatGPT Work actually is after seven weeks of iteration. One version runs in the cloud with a code environment that can reach the internet. The other is Codex re-skinned.

Dev tools

The question stopped being "can we build this" and became "do we want to own this"

Marty Lamb argues that writing code always came bundled with understanding it, and agents have separated the two. You still own everything you ship, including the parts nobody on the team has a mental model of.

Productivity

An agent deleted a researcher's inbox because context compaction dropped the instruction not to

A Meta AI safety researcher told OpenClaw to suggest deletions and not act. It worked on a small inbox. Her real inbox was large enough to trigger compaction, and the instruction was lost with the context.

Models & agents

Claude Code's weekly limits go up 25 percent on 14 September, which is a 17 percent cut from today

Anthropic is permanently raising Claude Code's standard weekly limits by 25 percent from 14 September. A temporary 50 percent boost runs until 13 September, so the practical change is a 17 percent reduction.

Dev tools

AWS open sourced the agent workspace it built internally, after 39,000 Amazon developers picked it up without a mandate

Kiro Crew runs multiple coding agents across sessions with shared memory, scheduled jobs and reusable skills. Built inside Amazon as MeshClaw, it is now open source and runs locally or on your own infrastructure.

Dev tools

DoorDash moved its agents off laptops and ran 130,000 engineering tasks in a month

DoorDash's Flux platform automated 130,000 engineering tasks in one month, including more than 25,000 automated code reviews a week, using Firecracker microVMs with a 95th percentile sandbox setup under five seconds.

Infrastructure

FreeToken ran a 35B model at about 39 tokens a second on an 8GB laptop GPU

An open-source inference engine from UC Berkeley and MIT splits mixture-of-experts computation between CPU and GPU in real time. Its paper reports 3 to 4 times faster decode than Ollama and llama.cpp on equivalent models.

Infrastructure

Debian voted to allow AI-written contributions, and put the responsibility on the contributor

Debian's voting developers adopted a policy saying generative AI is neither exempt from nor subject to special rules. Disclosure is encouraged and not required. The contributor remains responsible for everything they submit.

Open source

Cloudflare AI Search builds a retrieval pipeline from one command, and no longer needs a sitemap

Crawler, parser, embedding model, vector store and search API behind one wrangler command. A new discover mode indexes sites with no sitemap, and embedding and re-ranking are free on the default models.

Infrastructure

Three open-weight acquisitions in a month, in a sector built on giving things away

Nvidia reportedly bidding about $13 billion for Hugging Face, $6 billion to Poolside, and Stripe paying more than $7 billion for OpenRouter. Meanwhile only 6 percent of companies use open-weight models, by one survey.

Models & agents

The Information reports Salesforce is letting customers pay for AI based on revenue it grows or costs it cuts

The Information reports Salesforce is starting to let businesses choose how they pay for Agentforce, including custom contracts priced on deals closed or service interactions automated.

Go-to-market

restoredrill restores your Postgres backup into a throwaway container and writes down that it worked

restoredrill fetches your latest PostgreSQL backup, restores it into a disposable container, runs checks you define, and writes a JSON report with a real timestamp and the restore time. MIT, written in Go.

Infrastructure

RealDiff runs your tests on both sides of a pull request and diffs what the code actually did

RealDiff builds both branches with runtime instrumentation, runs the same test suite on each, records every method call's arguments and return values, and diffs the two traces instead of reading the source diff.

Dev tools

IndexFlow is search indexing infrastructure as Rust crates you run yourself

Sitemap processing, technical validation, IndexNow submission and multi-site scheduling, published as Rust crates under MIT or Apache 2.0 with a rolling quota circuit breaker.

Open source

oMLX writes the KV cache to SSD, so a coding agent on a Mac stops recomputing the whole context

A local inference server for Apple Silicon that persists KV cache blocks across an in-memory tier and an SSD tier, so a shifting prompt prefix does not force a full recomputation. 21,152 stars, Apache 2.0.

Infrastructure

Superagent gives every chat its own git checkout, and lets the agent drive a browser you can watch

A macOS desktop app for Claude Code where every conversation gets a private branch and checkout, the agent drives a visible browser on your own logins, and an iOS Simulator streams into the window.

Dev tools

Archive

179 items published so far, by month.

All months