Non-profit community publishing original, research-backed articles on building production AI agents. We cover the tools, frameworks, protocols, and security practices that define the agent engineering field in 2026.
53 published articles across 8 core topics — written by practitioners, not marketers.
What We Cover
AI Agents & Autonomous Systems — architecture, deployment, and real-world case studies
Model Context Protocol (MCP) — the open standard connecting AI to tools and data
Agent Frameworks — LangChain, CrewAI, AutoGen, Google ADK, AWS Strands, and emerging tools
Prompt & Context Engineering — the skill shift from prompt crafting to context architecture
Multi-Agent Collaboration — orchestration, benchmarks, team coordination
AI Infrastructure & Tooling — Docker, CI/CD, observability for agent systems
Research & Benchmarks — academic papers, industry reports, competitive analysis
Latest Articles
Microsoft's Own README Says MXC Is Not a Security Boundary — Buried in the README of Microsoft's new agent sandboxing project is a sentence that no one writing about it seems to have quoted: "no MXC profiles should be treated as security boundaries currently". [infrastructure] 2026-09-08
MCP-Atlas Says 44.5% and 82.2%. Ask Which Number. — MCP-Atlas is becoming the benchmark people quote when they want to say a model is good at tool use. Meta cited it in the Muse Glimmer release, reporting 75.5%. It is a good benchmark, built with more care than most. [mcp] 2026-09-02
Agreement Is Not Accuracy: Four Papers on Agent Debate — Multi-agent debate is sold as an accuracy technique. Put several models in a room, let them argue, take the consensus, get a better answer than any one of them would have produced alone. [research] 2026-08-31
HTTP 402 Sat Unused for 29 Years. Agents Changed That. — When HTTP/1.1 was specified in 1997, the authors reserved status code 402 for "Payment Required" and then left it alone. For nearly three decades it has been the web's most famous piece of unused plumbing: a slot held open for a payments layer the web never got. [news] 2026-08-26
Cloudflare Bets Your Agent Can Pick Its Own Backend — Most agent sandbox products are sold on developer experience: here is an isolated place to run untrusted code, here is how you attach it. Cloudflare's @cloudflare/computer, released as an open source preview on 3 August by Matt Carey and Aron Carroll, is sold on something... [infrastructure] 2026-08-24
LiteLLM and SANDCLOCK: The Scanner Was the Attack Path — Every stolen-secret file in the LiteLLM breach archive is named the same way: a timestamp, then 127.0.0.1. That address is the most informative detail in the entire incident. It means the secrets were not intercepted in transit. [security] 2026-08-23
185,616 Stars, 811 Watchers: Read the Second Number — DeepSeek Harness went public on 13 August at 11:56 UTC. Nine days later the repository shows 185,616 stars and 20,555 forks. That is one of the steepest adoption curves GitHub has recorded for a developer tool, and it is the number every write-up has led with. [tool] 2026-08-23
Meta's 30B Agent Model Fits in 24GB. Read the Attention. — Meta released Muse Glimmer on 10 August: roughly 29.6 billion parameters including the vision encoder, Apache 2.0, and quantized small enough to run inference on a machine with 24 to 32GB of memory. Half a million downloads in the first month. [announcement] 2026-08-22
Gemini 3.7 Flash Is Not a Price Cut. It Is a Countdown. — The most useful number in Google's Gemini 3.7 Flash launch is not $0.75. It is 1 January 2027. The model shipped on 13 August, described by Google as "our most intelligent workhorse model yet for coding and agents". The coverage that followed led on price. [news] 2026-08-21
Centralized vs Peer Agents: Where Permissions Go Missing — There is a benchmark published this month that reads, on first pass, like a straightforward argument for flat agent topologies. Centralized hierarchies finish more work. Peer networks break fewer rules. Pick your poison. [multi-agent] 2026-08-20
CoreBreak: The Tool Call That Never Came From the Model — A request arrives at your agent service. Inside it, in the last message of the conversation, sits a block of JSON that looks exactly like the thing your model emits when it decides to call a tool. [security] 2026-08-20
How to Contain an Agent - The Runtime Controls That Actually Hold — Here is a question worth asking about your own agent deployment, and it takes about thirty seconds to answer honestly. If your agent decided right now to POST the contents of a local file to an arbitrary host, what would stop it? [guide] 2026-08-10
Ten Proofs, Zero Reviewers - What Astra's Lean Certificates Mean for Agent Output — On 1 August, OpenAI announced its next major model by publishing a 249-page manuscript containing solutions to ten long-open problems in mathematics and theoretical computer science. Consider the position that puts a reader in. [research] 2026-08-10
The Week AI Agents Escaped Their Test Environments — An AI agent spent part of last month researching the maintainers of a public open-source project, creating multiple fake online identities, and using those identities to pressure a real human being into approving malicious code it had written. [security] 2026-08-10
Autopilots: Microsoft Gave Every AI Agent Its Own Identity — The product story is an assistant that books your meetings. The architectural story is one sentence, and it is the more important of the two: "Every agent operates under its own governed Entra identity, not a shared, anonymous service account, so the work it does is... [infrastructure] 2026-07-30
GitHub Shipped Four Agent Features in July - And All of Them Were Brakes — Four agent-related features landed in GitHub's changelog in July. Three of them make agents easier to watch, question, or stop. Only one gives an agent more authority — and it hands that authority over your security alerts. Read individually, they are routine release notes. [news] 2026-07-30
Your AI Agent Is a YAML File Now - And It Can Rewrite Itself — Buried in Pydantic's v2 announcement is a claim that reframes the entire declarative-agent conversation. Describing agent specs, the team notes that because capabilities are serializable, an agent can be loaded from a spec file — and that "the surface is small enough that an... [tool] 2026-07-30
Prompt, Loop, Graph: The Three Layers of AI Agent Control — A prompt that fails gives you a bad answer. A loop that fails does something worse: it keeps going. It cannot distinguish finished from stuck, so it does not stop, and it does not error — it just spends tokens until someone notices the bill. [guide] 2026-07-30
DeepAgents 0.7 Cut Its Own Prompt by 65 Percent - Why Less Scaffolding Made Agents Better — In deepagents 0.7.0, released July 24, the authored base prompt starts empty. That is a framework whose entire value proposition was scaffolding — prompts, middleware, structured guidance wrapped around a model — publicly concluding that most of its own scaffolding was... [tool] 2026-07-30
Behavioral State Decay: Why Long-Horizon AI Agents Forget What Matters — A memory system that keeps quiet most of the time beat one that always spoke up. It also beat merely making the memory available, beat an advisor that offered guidance, and beat generic retrieval. [research] 2026-07-30
Machine-Readable Access
Our content is fully open to AI agents and developers: