AI for Science in 2026: One Phase III Trial, Two Operational Weather Models, and Erdős Proofs Nobody Wants to Read
What has actually been validated outside the lab that made the claim: rentosertib's Phase III start, ECMWF and NOAA running AI forecasts operationally, Evo 2's viable phage genomes, the Erdős-problem scoreboard and its rediscovery problem, the GNoME and MatterGen materials that turned out not to be new, and the licence and pip-install status of every open model an engineer can run this week.
16 minSep 9, 2026Agent-to-Agent Protocols in 2026: A2A Reached 1.0, Three ACPs Died or Merged, and MCP Learned to Do Most of the Same Job
What Google's Agent2Agent protocol actually specifies at v1.0, what changed when it moved into the Agentic AI Foundation in August, which vendors have shipped it versus announced it, how MCP's July 2026 revision reproduced A2A's task lifecycle almost state for state, the first real CVE on an A2A surface, what the production data says about how rare multi-hop agent systems are, and a working server and client on the 1.1 SDK with the breaking changes listed.
14 minSep 8, 2026Robot Foundation Models in 2026: 500,000 Hours of Human Video, 50-Step Action Chunks, and a Winning Score of 0.26
What vision-language-action models actually do, from π0's flow-matching action head to Gemini Robotics 2 and GR00T N1.7; who shipped humanoids (Unitree 5,500, AgiBot 15,000) and who didn't (Tesla, zero); the teleoperation behind the demos; and the benchmark numbers that say a home robot is not close. With a LeRobot dataset I loaded this morning.
14 minSep 8, 2026AI Found the Bugs: 23,000 Findings in a Month, a 3-Day Patch Mandate, and the End of curl's Bounty
From AIxCC's 18 real bugs in August 2025 to Project Glasswing's 23,019 findings by May 2026 and the first AI-written zero-day exploited in the wild. What the cyber reasoning systems, Big Sleep, Codex Security and Mythos Preview actually did, why bug bounties are drowning, why CISA now wants federal patches in three days, and a workflow for a small team that keeps the humans looking only at validated findings.
13 minSep 8, 2026Agent Observability in 2026: The Spans Are Standard, the Standard Isn't Stable, and Nobody Reads the Logs
OpenTelemetry's GenAI conventions moved to their own repo in June and still carry the Development badge; every vendor from Datadog to Grafana ingests them anyway. I instrumented an agent loop with the official Python library, show the exact spans it emits, and go through what the 2026 eval papers say actually catches failures: pass^k, log inspection, and a step budget.
13 minSep 7, 2026Stablecoins in 2026: $300B in Supply, 1% Real Payments, and Rails Being Rebuilt for Agents
GENIUS Act rules are still proposals, Visa settles $7B a year in USDC, Stripe launched its own chain, and x402 has 165 million transactions worth about $50 million. An infrastructure engineer separates the settlement layer that is real from the agent-payments layer that is mostly still a demo.
16 minSep 7, 2026No-Code Didn't Die. It Sold for 2.7x ARR While Its Replacement Raised at 27x
Airtable sold to Bending Spoons for about a quarter of its 2021 valuation on $480M of growing revenue. Lovable raised at $13.3B on $500M. Flowise archived itself and said why. What the 2026 numbers say about visual builders, prompt-to-app tools and agentic automation, and where every generated app still breaks.
13 minSep 7, 2026Who Is This Agent? Non-Human Identity in 2026, From the RFCs to the Breaches
Machines outnumber humans 109 to 1 in the enterprise directory, the OAuth working group has 70 drafts in flight, MCP just deprecated dynamic registration, and an agent with an over-scoped token deleted a production database in nine seconds. What actually standardised this year, what shipped, and the delegation chain I would build.
16 minSep 6, 2026Seats Are Dying. What the 2026 SaaS Repricing Looks Like From the Compute Layer
A one-day 18% drop in Thomson Reuters, $1.50 per resolution at Zendesk, $15 per human at Microsoft, and a vibe-coding company at $500M run-rate with 200 people. The unit of software changed this year. Here is what it did to infrastructure.
13 minSep 6, 2026The Worms Learned to Use Your AI Agent: A Year of npm Supply-Chain Attacks
From s1ngularity invoking Claude Code to hunt for wallets, to Shai-Hulud self-publishing across 500 packages, to IronWorm stealing AI API keys — the twelve months that changed how I install software.
13 minSep 6, 2026MCP Security in 2026: The Protocol Got Hardened. The Ecosystem Didn't.
A year of MCP CVEs, a rewritten spec, an NSA guidance sheet and an OWASP Top 10 — what actually changed, what didn't, and the six controls I'd insist on before an MCP server touches production.
12 minSep 3, 2026Top AI Agent Sandbox Providers: An Engineer's 2026 Roundup
A working engineer's roundup of the top AI agent sandbox providers: isolation, hosting, persistence and pricing compared — including the one I built myself.
10 minSep 3, 2026AI Agent Sandboxes: What They Are and How to Choose One
What an AI agent sandbox is at the systems level, the four properties that decide one, and how 15 platforms compare — from an engineer who built one of them.
10 minSep 3, 2026AI Agent Sandbox Runtime: The Six Options and Who Uses Them
Firecracker, gVisor, Kata, containers, V8 isolates and libkrun compared — how each isolates, what it costs in memory, and which sandbox vendors run it.
10 minSep 3, 2026AI Agent Cloud: What the Term Means and Who Actually Has One
An AI agent cloud needs more than a sandbox: state, hosting, triggers, audit. I map 15 platforms against that stack and show where each one stops short.
10 min