What just shipped in AI engineering: specs, models, tools. Dated, sourced briefs, each with a schema, code, and what it means for an engineering team.
Cursor shipped Cursor Router on 22 July 2026: a classifier that inspects each request before a model runs and dispatches it to the model best suited to that query, trained on 600k+ live requests and optimized for user satisfaction (AFC) as its reward. Cursor reports 60% savings in its own online A/B test. It also names a second quality metric, keep rate, and publishes no figure for it.
NVIDIA announced the Open Secure AI Alliance on 27 July 2026 and named agent harness research among what it contributes. That research is NOOA, an Apache 2.0 framework in which a docstring is a prompt. Its paper was submitted to arXiv on 22 July 2026, so the paper predates the alliance by five days.
Kodem Security and Intezer disclosed on 19 July 2026 a prompt-injection chain in Kiro, AWS's agentic IDE: a fetched web page makes the agent write an attacker's server into ~/.kiro/settings/mcp.json, which Kiro reloads and starts. Kodem's timeline puts the AWS fix at 3 April 2026 and the CVE-2026-10591 assignment at 22 July, so what is fresh here is the published chain and the lesson about which agent writes deserve a gate.
Relay-Bench was posted to arXiv on 20-07-2026 with a test set made only of composite items, two to thirteen single-domain subproblems chained into one prompt, and its leading model, GPT-5.5 at xHigh effort, scores 43.3%.
Anthropic released Claude Opus 5 on 24 July 2026 at $5 per million input tokens and $25 per million output tokens, the same price as Opus 4.8. The cost decision now lives in the per-request effort setting, and CodeRabbit's own review benchmark shows that raising it costs recall and tokens.
Google shipped Gemini 3.6 Flash on 21 July 2026 at $7.50 per million output tokens and 17% fewer output tokens per task than 3.5 Flash. The two levers stack, so the real per-task cost drops by more than the sticker price alone.
On 16 July 2026 Hugging Face disclosed that an autonomous agent framework breached its dataset-processing pipeline, then that the hosted models it queried refused to analyse the attack log. The forensics ran on a self-hosted GLM 5.2, which makes refusal policy a dependency of your incident runbook.
Gemini 3.5 Flash Cyber found 55 unique confirmed issues on the V8 engine against 47 for its own mainline base and 36 for Claude Opus 4.6, then shipped only to governments and trusted partners via CodeMender. The gap that matters is 55 versus 47: the moat is the post-training recipe, not the weights.
The 2026-07-15 release-note entry documents mid-conversation system messages on Claude Fable 5, Claude Mythos 5 and Claude Opus 4.8 with no beta header, while the Bedrock page, fetched 2026-07-21, still says Opus 4.8 only: gate the feature on a capability flag, not on a hardcoded model list.
On 2026-07-15 Thinking Machines Lab published Inkling under Apache 2.0: 975B total parameters, 41B active, weights live on launch day. The lab concedes the model is not the strongest available, and keeps Tinker, the fine-tuning loop, proprietary.
On July 9, 2026 OpenAI shipped Multi-agent orchestration as a beta feature of the Responses API, hosting the subagent tree server-side behind one field. The tell is the throttle: max_concurrent_subagents defaults to 3, a narrow fan-out where Claude Code's lineage pushes hundreds.
On 16-07-2026 Moonshot shipped Kimi K3, a 2.8T-parameter open-weight MoE, but only on its own hosted infra; the downloadable weights are due 27-07-2026, at Sonnet-5-class pricing.
CISA added CVE-2026-55255 to KEV on 7 July 2026: a cross-tenant IDOR in Langflow, exploited since 25 June to pull the LLM and cloud keys embedded in other tenants' flows. The same flaw scores 9.9 from the vendor, 8.4 from NVD and 6.1 from The Hacker News, so any CVSS floor would have missed it.
On 08-07-2026 Cognition shipped SWE-1.7: near-frontier agentic coding whose gains came from a second RL pass on a Kimi K2.7 base, not a new base, and it runs only inside Devin.
In Week 28 (July 6-10, 2026) Claude Code on desktop gained a built-in browser with a clean, isolated profile and no saved logins. The real change is the split: you now have two browser surfaces, and you pick by whether the agent should see your authenticated identity.
On 2026-07-09 Meta launched Muse Spark 1.1 and opened the Meta Model API in public preview, its first paid, closed model. The real change is the reversal: the lab whose open weights commoditized the base-model layer is now metering tokens.
DeepSeek told API subscribers on 2026-06-30 that its V4 API switches to peak and off-peak pricing at the mid-July GA: calls in two daily Beijing windows bill at 2x. The real change is that time-of-day is now a routing dimension your gateway has to reason about.
xAI shipped Grok 4.5 on 2026-07-08 for coding and agentic work at $2/$6 per million tokens. On its own four self-reported benchmarks it splits 2-2 with Opus 4.8 while Fable 5 leads all four, so it reads as a price-performance play rather than a frontier win, and it is not yet in the EU.
OpenAI opened a limited GPT-5.6 preview on 2026-06-26 as three tiers, Sol, Terra and Luna. The real engineering news is the caching change: cache writes now cost 1.25x the uncached input rate.
Anthropic launched Claude Science on 2026-06-30, a beta AI workbench for scientists on macOS and Linux for paid plans. It is not a new model; it runs the same Claude models, including Opus 4.8. The transferable idea: a coordinator that spawns sub-agents plus a separate reviewer agent that flags every number it cannot trace, with provenance shipped by default.
Google moved its Interactions API to general availability on 2026-06-22 and made it the default, primary way to build on Gemini models and agents; the legacy generateContent API stays supported, but new agent capabilities are expected to land there exclusively.
GitHub made Kimi K2.7 Code generally available in Copilot on 2026-07-01, the first open-weight model in the picker, hosted on Azure and billed under usage-based credits, and the same weights you can self-host under a Modified MIT License.
Anthropic shipped Claude Sonnet 5 on 2026-06-30, generally available day one at an introductory $2/$10 per million tokens through 2026-08-31, landing within six points of Opus 4.8 on agentic coding at a lower price than Opus 4.8, GPT-5.5, and Gemini 3.1 Pro.
Microsoft Foundry's Hosted Agents is a managed, framework-agnostic runtime for your own agent code, callable today in public preview across 20 Azure regions, with GA targeted for end of June 2026 and not yet shipped.
On 23-06-2026 ByteDance's Volcengine shipped Doubao Seed 2.1, a proprietary agent model that tops GDPval and, unlike much of this cycle's preview-gated frontier, you can call today on Ark.
On 24-06-2026 the Qwen team released Qwen-AgentWorld, an Apache-2.0 language world model that does not act as an agent but predicts the next environment observation across seven domains, shipping with the AgentWorldBench eval.
On 23-06-2026 Anthropic launched Claude Tag, an always-on Claude that joins a Slack workspace as one shared team identity everyone sees, not a per-user chatbot.
Google DeepMind released DiffusionGemma 26B-A4B on 2026-06-10, an open-weight MoE (25.2B total / 3.8B active) on the Gemma 4 backbone that drops autoregressive decoding for discrete text diffusion, denoising a 256-token canvas in parallel at over 1000 tokens/sec on one H100. The speed costs quality: 77.6% on MMLU Pro against Gemma 4's 82.6%. It ships under Apache 2.0.
Spec Kit, GitHub's MIT-licensed toolkit for spec-driven development, has reached v0.11.3 with commands now namespaced under /speckit.* and support for 30+ coding agents.
Z.ai shipped GLM-5.2, a 753B Mixture-of-Experts coding model with a 1M-token context and open weights under MIT, pairing IndexShare sparse attention with an improved MTP speculative-decoding layer.
The 2026-07-28 MCP revision, in release candidate since 21 May 2026, removes sessions and the initialize handshake and moves all protocol state into _meta on every request.
MiniMax shipped M3 on 1 June 2026: an open-weight ~428B / ~23B-active MoE pairing a 1M-token context with native text, image, and video input and a new sparse-attention operator (MSA), scoring 59.0% on SWE-Bench Pro.
Two independent open-source tools - RTK compresses command output entering context, Caveman compresses the model's generated output leaving it.
Something went wrong. Try again.
Curious about Rachid or this site? Ask me.