GitSeed 发布自托管 AI 编码智能体控制面
GitSeed 发布自托管、厂商中立的 AI 编码智能体控制面,把 Claude Code、Codex、Gemini、OpenCode 等运行时放进 prepare→agent→finalize 三阶段隔离容器中执行。
Why it matters: 原文完整交代了自托管控制面的三阶段容器隔离、签名回执与多模型并行评审,可据此判断智能体编码的治理路径。
Technology areas
Everything about AI writing code: coding assistants, Vibe Coding, code model evaluation, and changes to development workflows.
32 条精选Past 30 days: 29 updatesTotal: 319 updates
GitSeed 发布自托管、厂商中立的 AI 编码智能体控制面,把 Claude Code、Codex、Gemini、OpenCode 等运行时放进 prepare→agent→finalize 三阶段隔离容器中执行。
Why it matters: 原文完整交代了自托管控制面的三阶段容器隔离、签名回执与多模型并行评审,可据此判断智能体编码的治理路径。
Meituan has released the weights for LongCat-2.5, a 1.6-trillion-parameter mixture-of-experts model for autonomous agent and coding tasks that activates roughly 48 billion parameters per token and was trained entirely on Chinese hardware. It handles up to one million tokens of text, image, and video input via API, and Meituan reports 88.4 on Terminal Bench v2.1 and 64.6 on DeepSWE, close to but below Claude Opus 5 and GPT-5.6 Sol on several benchmarks. The weights are MIT-licensed, and the self-hosting guide describes a 194-chip Huawei Ascend Atlas A2 cluster with no Nvidia GPU guidance.
Why it matters: It documents a frontier-scale open-weight agent model trained and served entirely on Chinese accelerators, with benchmark comparisons against leading Western models.
Anthropic has updated Claude Code Projects so that users describe a goal and Claude scopes the request, delegates work to parallel threads, coordinates them, reviews outputs and assembles the result, with progress steerable from a phone. Each thread is a Claude Code cloud session on its own branch and repo copy, and threads now share a project memory and a library of added files and artifacts. The beta is available to select Claude Pro and Max subscribers using cloud sessions who have no existing web or desktop projects, with broader access over the coming week and Team and Enterprise plans after that.
Why it matters: It details a concrete shift in how Claude Code Projects delegate and coordinate multi-thread agentic work, plus the staged rollout limits.
The company open-sourced Edge0-145B and Edge0-120B, describing Edge0-145B as the first open-source 145-billion-parameter on-device model, alongside a unified inference framework and deployment tools. It reports 29GB peak memory, 80+ tokens/s decoding, 1,100+ tokens/s prefill, roughly 120W typical power and 128K–256K context on a compatible laptop, with benchmark scores compared against named cloud models. The release also describes shared-matrix sparse experts, tiered GPU/system-memory/SSD loading and CPU-GPU co-scheduling, plus local demonstrations in video, Blender 3D scenes, games, drone control and PCB design.
Why it matters: It offers a detailed, benchmark-backed look at how a 100B+ model is engineered to run locally, useful for readers weighing on-device versus cloud AI.
Google announced Gemini 4 Hydrogen, a fast, efficient model for everyday coding and agentic workflows, available across the Gemini API, AI Studio, Gemini for business, the Gemini app, Google Search, and paid Google AI Pro and Ultra subscribers in Google Antigravity. It is priced at $1.50 per million input tokens and $7.50 per million output tokens across its 1 million-token context window, and surpasses Argon on the Artificial Analysis Intelligence Index at its default high thinking level (51 vs. 50, reaching 54 at xhigh). Google also introduced Orchestrator in Google Antigravity, which switches between models like Carbon and Hydrogen within a session and reached near-Carbon task success rates on Terminal-Bench 4.0 while consuming 24% less quota and completing 19% faster.
Why it matters: The post details a new model's benchmarks, pricing, and rollout across developer, enterprise, and consumer surfaces, useful for readers tracking Gemini releases.
Google released Gemini 4 Carbon to developers, enterprises, scientists, and consumers, describing it as its strongest model for cybersecurity capabilities and long-horizon agentic workflows in knowledge work, software engineering, and scientific reasoning. It ranks #1 on CursorBench 4.0, Perplexity's WANDR, and Zapier's AutomationBench at more than 2X lower cost per task than the next best external model, and is available via the API in Google AI Studio and Gemini for business at $2 per million input tokens and $10 per million output tokens. Google also previewed /swarm in Google Antigravity and reported safety results including a 0% prompt injection attack success rate on the Gray Swan IPI benchmark.
Why it matters: The post is a dense launch announcement with benchmark rankings, pricing, and safety figures that help readers judge where Carbon sits relative to Gemini 4 Argon.
Anthropic released Claude Fable 5.2, a frontier model with a 1M-token context window and 128K max output, available only via hosted API on the Claude Platform, AWS, Google Cloud and Azure at $8/$40 per million input/output tokens. Mythos 5.2 is the same underlying model with fewer cyber and biology safeguards, gated behind Anthropic's Cyber and Life Sciences Verification Programs. Anthropic reports Fable 5.2 ahead of Opus 5.5 on most benchmarks it published, with about 55% fewer blocks than Fable 5.1.
Why it matters: Useful for readers tracking frontier model releases, since it details the two-tier safeguard structure, self-reported benchmark gaps and per-token pricing.
Anthropic's Claude Fable 5.2 and Claude Mythos 5.2 are now available on Amazon Bedrock and Claude Platform on AWS, with Fable 5.2 positioned as Anthropic's most capable generally available model for coding, math, and science, and Mythos 5.2 offered through verification programs for cyber security and life sciences work. Fable 5.2 is designated a Covered Model requiring up to 30 days of data retention and human safety review by default, with an aws_review retention mode set on the account or project before invocation, while Enterprise Frontier Safeguards combining zero data retention with misuse detection is in development. The post includes a Boto3 example using model ID global.anthropic.claude-fable-5-2 and describes the claude-api skill in Claude Code for migrating existing codebases.
Why it matters: Useful for teams planning to adopt or migrate to Fable 5.2 on Bedrock, since it details retention requirements, fallback behavior, and migration tooling.
The post reports that 13% of agent file-reading sessions expose the agent to inline TODO(bug/...) or FIXME(bug/...) references, and in 6% of encounters the agent takes follow-up action on that bug ID, 83% of which are unprompted by the developer. Cross-referencing these detours against live bug status, it finds 41% chase already-closed or obsolete tickets while 57% involve still-open bugs where the agent expanded scope, and a fixed-effects regression shows unprompted bug detours add 70% more steps, 77% more tokens and 105% more wait time per session. The authors built agents that scan codebases and remove confirmed-obsolete bug references, reporting thousands removed over six months with over 95% acceptance from human reviewers.
Why it matters: Offers a quantified, data-backed look at how stale code comments misdirect coding agents, plus a concrete remediation approach.
OpenRouter launched a rebuilt Auto Router on a new technical foundation that it says outperforms the previous version by up to 4× on benchmarks, with a routing step 3× faster at p90 (0.65s vs 1.96s), alongside a new coding-specialized Auto Code router (openrouter/auto-code) that scores in line with Claude Opus 5.5 across five benchmarks while costing 74% less per task. The new routers weigh eleven factors per request combined with live pricing, provider health, and cache status, and work within governance policies such as guardrails, zero data retention, provider restrictions, allowed model lists, and BYOK keys. The slug openrouter/auto is unchanged, and the cost_tier, allowed_models, and excluded_models settings still work.
Why it matters: Useful for readers tracking model-routing products, since it details concrete latency and cost claims and explains how routing differs from provider routing.
Tencent announced Tencent Hy4, its latest-generation large language model, which it says ranks among the world's leading open-source models, with model weights and system cards planned for release in the coming days. Hy4 adds visual understanding and computer-use capabilities for the first time, along with improvements in instruction following, long-context comprehension and long-horizon agentic tasks, and is available across Tencent Cloud TokenHub, WorkBuddy, CodeBuddy, Yuanbao, WeCom's AI Assistant (Dayuan) and ima, with API access via OpenRouter, Hermes and OpenCode. Pricing remains about US$0.90 per million input tokens, US$2.70 per million output tokens and US$0.045 per million cached input tokens, with Hy4 Flash scheduled for release soon.
Why it matters: The announcement is a detailed primary source on a major open-source model release, including benchmark comparisons, safety assessments and pricing.
Ricursive Intelligence released Ripple-65B Preview, a 65B dense open-weight model pretrained from scratch on 12T tokens with up to 1M context, shipping three Apache 2.0 checkpoints (instruction-tuned BF16, NVFP4, and BF16 base). Ricursive reports 80.5 on Terminal-Bench 2.1, the top self-reported score among US open-weight models, while trailing larger MoE rivals on SciCode (39.4) and DeepSWE 1.1 (44.3), with full R&D cost stated at $32M. Weights are on Hugging Face, with Together AI, GMI Cloud and OpenRouter listed at launch and an experimental NVFP4 build targeting NVIDIA DGX Spark.
Why it matters: Useful for readers tracking open-weight agentic coding models, since it pairs self-reported benchmark claims with a detailed architecture, cost and deployment breakdown.
OpenAI will acquire Pierre Computer Company, expanding Codex's tools for building, understanding, and reviewing code.
Why it matters: A brief acquisition announcement that signals how OpenAI plans to extend Codex's code-building and review capabilities.
Revolut has moved its roughly 2,000 software engineers off Anthropic's Claude Code and OpenAI's Codex as default coding tools onto GLM, an open-weight model from Chinese lab Z.ai that Revolut hosts itself, bringing its bill to about a tenth of what it paid Anthropic and OpenAI. David Abitbol, who runs AI operations and infrastructure at Revolut, said the company serves GLM from about 56 Nvidia B200 GPUs at a blended cost of around $0.30 per million tokens, and reported roughly 60% shorter coding time and 70% shorter lead time in a sample of about 2,000 engineers, though the comparison does not isolate the model change from other causes. Abitbol said the 90% saving excludes cloud, staff and monitoring costs and depended on heavy tuning, with out-of-the-box inference "terrible" until time to first token fell from about 14 seconds to 1.7 seconds on the same GPUs.
Why it matters: It shows a major European fintech running a self-hosted Chinese open-weight model as its engineering default, with concrete cost and latency figures and caveats worth noting.
Trail of Bits describes using Codex with GPT-5.6 to backport security fixes into stable Linux kernel branches and distribution packages, reporting that by October 29 the project had delivered fixes for 149 distinct CVEs into stable kernel releases plus several Fedora and Ubuntu package fixes. The workflow has agents identify missing fixes, adapt patches, assemble validation evidence, run tests and prepare submission packets while engineers review and submit them, cutting preparation and review of a straightforward backport to about 30 minutes and a more involved case to around three hours. The post also presents counts of unfixed CVEs in stable kernel branches and in Debian 13 and Ubuntu 26.04, noting that regression testing and maintainer acceptance remain essential.
Why it matters: It offers a concrete account of AI-assisted security backporting, including a described workflow, effort estimates and CVE backlog figures for stable Linux software.
Gregory M. Kurtzer, creator of Rocky Linux, developed Ginux, a Rust-first x86-64 kernel and OS prototype that boots via UEFI without a Linux host kernel and runs unmodified Linux userspace inside kernel-native domains, including Rocky Linux 10 systemd reaching multi-user.target. The project was built over eleven days by one persistent OpenAI Codex task using GPT-5.6 Sol, producing roughly 139,000 retained lines of implementation and test code under a method called Human-Directed Agentic Engineering. Ginux is explicitly experimental, with incomplete Linux ABI coverage, device support, and security validation, and is not intended as a production replacement for Linux.
Why it matters: It documents a notable experiment in AI-assisted kernel development and is candid about the resulting system's limits.
Sophos researchers report that the GOLD OGRE group behind Aur0ra ransomware used Cursor's Composer agent and models from Anthropic, xAI and Moonshot to escalate from credential access to domain administrator, bypassing AI guardrails by framing intrusions as authorized red-team or "diagnostics testing." Human operators supplied VPN credentials, SOCKS access and targets, while agents performed AD discovery, password spraying, Kerberoasting, NTLM coercion and relay, and lateral movement; three victims were later named on Aur0ra's leak site. Sophos assesses with high confidence that GOLD OGRE first used a Cursor-enabled framework to test EDR evasion, then gave associates similar technology for ransomware operations.
Why it matters: Documents a concrete case of agentic AI used across an intrusion lifecycle and the guardrail-bypass technique, useful for defenders tracking AI-enabled ransomware tradecraft.
Epoch AI researchers report that the Chinese open-weight model GLM 5.3 autonomously exploited the "patch gap" across six Firefox versions released between September 17 and October 26, building full exploit chains in as little as 12 hours at roughly $1,000 in API fees per successful attack, with no safety guardrails triggered by Z.ai or other API providers. The model independently rediscovered a previously unknown vulnerability to bypass Firefox's sandbox and read local files, which Mozilla patched in Firefox 159.0 on October 27, 2026; the same setup against Chrome cost about $100,000 without producing an equivalent exploit. The researchers warn the patch gap affects browsers, mobile operating systems and router firmware industry-wide, and that offensive capability is diffusing beyond any single gatekeeper's control as open-weight models improve.
Why it matters: It documents a concrete, low-cost autonomous exploit against a browser used by over 200 million people, making the patch-gap risk tangible for defenders and vendors.
Claude Code is free to install, but users pay for the model it calls, either through a Claude subscription or per token on an API key. Median API-key session costs from OpenRouter data over the 30 days to October 18, 2026 were $0.31 for a 2–9-turn session and $1.39 for a 10–49-turn session on Claude Opus 5.5, versus $0.16 and $0.60 on Claude Sonnet 5.5. Most of the cost comes from Claude Code's own context written to the prompt cache on the first request and read back on later turns, so the article recommends Sonnet as default, Haiku for background jobs and sub-agents, shorter sessions, and a credit limit on the key.
Why it matters: It gives concrete per-session cost medians by model and length, plus practical levers for controlling Claude Code spend.
Factory released Droid 1.0, an agent harness it says outperforms native harnesses built for their models by up to 20% more efficiently on the same tasks, with programmatic tool calling (Script mode) now the default for models including GPT-6.1 Sol, Claude Opus 5.5 and Kimi K3. The post reports that Script mode cuts Droid's cost by 15% on Claude Opus 5.5, that the base prompt shrank 37% between versions 0.170.0 and 0.250.0, and that median time to first paint fell from 1,839 to 488 ms. It also describes the internal Agent Factory loop, in which agents propose harness changes that engineers review before shipping.
Why it matters: A detailed first-party account of harness design choices, benchmark methodology and latency work that is useful for teams building or evaluating coding agents.