Latest Artificial Intelligence News & Dispatches

Hazmat (open-source, ~Aug 17 2026) runs AI coding agents in a dedicated least-privilege OS account so they cannot read SSH keys or cloud credentials, backed by a TLA+ formal spec, per-session macOS backups, and a session-scoped firewall. This dispatch builds agentcell, a LangGraph workflow that plans a session with declared paths, generates a per-session sandbox policy, preflights a backup, spawns any harness (Claude Code, Codex, OpenCode, Cursor) inside the account, and terminates on the first escape attempt.

Inspired by the MCP 2026-07-28 specification (released July 28, 2026, stewarded by AAIF under the Linux Foundation), this dispatch builds stateless-mcp, a Python FastMCP server on the new stateless core: initialize and Mcp-Session-Id are gone, Mcp-Method/Mcp-Name headers drive routing, results carry ttlMs/cacheScope cache hints, MRTR (SEP-2322) handles elicitation, and the Tasks extension (SEP-2663) powers poll-based tasks/get.

The MCP spec 2026-07-28, released July 28, 2026 by the Agentic AI Initiative under the Linux Foundation, is the fifth spec release and the one that made MCP serverless: the stateless core removes the initialize/initialized handshake and Mcp-Session-Id, moves method routing into Mcp-Method and Mcp-Name HTTP headers, and adds per-request _meta plus ttlMs/cacheScope caching. It also brings MRTR (SEP-2322), a Tasks extension (SEP-2663), and auth hardening via RFC 9207 and RFC 8707, alongside a deprecation policy for roots, sampling, and logging. Adoption has scaled to roughly 400M+ monthly SDK downloads, about 4x this year, near 250M per week.

Inspired by Cloudflare's August 5, 2026 Identity-Aware AI Gateway launch — which ties every outbound AI request to a verified Access identity via cf.user_id — plus the August 14, 2026 Cloudflare One MCP traffic detection wave (is_mcp selector, MCP Portal classification), this dispatch builds cloudflare-one-gateway-mcp, a FastMCP TypeScript server that registers agent identities, attaches identity headers, queries per-identity usage, sets model policies, and inspects detected MCP traffic.

The Agent Plugins 1.0 spec, published August 6, 2026, packages agent skills and MCP servers into a single portable plugin: a plugin.json manifest, a skills/ folder, and an mcp.json, designed to run across VS Code, Cursor, GitHub Copilot, ChatGPT, Codex, and Kiro. Vercel drafted the spec with input from Amazon, Cursor, Microsoft, and OpenAI, and Google joined on August 6 as a core maintainer under the Linux Foundation AAIF. GitHub shipped support on August 12 in VS Code, Copilot CLI, and the Copilot SDK, with managed-settings.json controlling enabledPlugins and strictKnownMarketplaces.

Cloudflare's Agents Week in August 2026 shipped 20+ launches that give AI agents the two things they need to be trusted with real work: money and identity. Cloudflare Wallets and cloudflare.pay (handle reservation on August 4, 2026, full banking later) let agents buy within human-set limits via the x402 machine-to-machine payment protocol, while the Identity-Aware AI Gateway went GA on August 5, 2026 to attach verified identity to every outbound AI request. DeepSeek V4 Flash/Pro 0813 also landed on Workers AI on August 15, 2026 with a 1,048,576-token context window.

OpenAI shipped cross-model delegation in Codex on August 15, 2026, announced by Eric Provencher on X: an orchestrator agent named Sol can now delegate narrowly-defined tasks to Luna, the fastest and lowest-cost model in the GPT-5.6 family. Luna is a pure sub agent — it cannot message or spawn other agents — and routing still requires prompting, with same-model delegation as the default. Provencher advises capping sub-agent counts around 6-8, a lesson underscored by July 22, 2026 GitHub issues where Luna was rejected as an unknown model and spawn-schema changes broke workflows.

OpenAI shipped cross-model delegation in Codex Multi Agents v2 (Aug 15, 2026): GPT-5.6 Sol orchestrates while delegating narrow tasks to cheaper GPT-5.6 Luna pure subagents that cannot spawn more agents, with guidance (Provencher) capping fan-out at 6-8 subagents. This dispatch builds modelrouter, a LangGraph workflow implementing capability-tier routing: an orchestrator decomposes a job, routes each task to the cheapest capable tier, enforces a max subagent count, and uses a quality gate to re-escalate failed tasks to a higher tier.

Meta Superintelligence Labs released Muse Glimmer on August 10, 2026: an Apache 2.0, 30B-parameter model optimized for always-on local agent workflows that runs on a single consumer GPU on Mac or PC. It targets local agents, function calling, local coding, and LLM-as-judge, with support across llama.cpp, MLX, and ExecuTorch and serving via vLLM and SGLang. This briefing covers the use cases, the local-ecosystem integrations, and the real cost math of local inference versus API calls.

Cloudflare Agents Week (Aug 4-15, 2026) launched Cloudflare Wallets and cloudflare.pay on the x402 protocol so agents can hold verifiable identity and purchase within human-set limits, plus an Identity-Aware AI Gateway (Aug 5, 2026) attaching verified identity to every outbound AI request. This dispatch builds machpay, a LangGraph payment workflow where an agent requests a purchase, the workflow validates the request against a human-set spend ceiling, checks wallet balance, settles via x402 in a single idempotent request, and logs every spend line to an audit ledger with identity attribution.

Open-source Hazmat, released on GitHub around August 17, 2026, wraps Claude Code, Codex, OpenCode, and Cursor Agent in a dedicated OS account so coding agents run with least privilege: only the declared project directory is shared and a per-session firewall rule caps network access. This briefing walks the macOS containment flow, the ~5.5% TLA+ formal specification, the demo that proves private keys stay unreadable, and the ROI of OS-account sandboxing versus breach risk.

Zeplyn's Schwab integration (Aug 12, 2026) showed agentic account opening cuts NIGO by 80% — but regulated account opening needs compliance rails, not just automation. This workflow builds account-open, a LangGraph pipeline that drafts the entire account-opening workflow, runs KYC/AML and eligibility checks, routes every uncertain field to a human approval gate, and writes an immutable audit trail before submission. It is the assisted-automation pattern for regulated finance.

On August 12, 2026, SKALE Labs launched Agent Pit — a paper-trading prediction-market sandbox built on its zero-gas blockchain and modeled on Polymarket's structure, so builders can train and validate AI agents before deploying them to live markets. This briefing covers why prediction markets are the natural proving ground for agent strategy, how paper trading prevents the live-money failure loop, and the validation discipline — benchmark, sandbox, then go live with caps.

DISCO's Advanced Research GA (Aug 13, 2026) proved agentic eDiscovery can investigate facts autonomously — but legal defensibility demands citations on every finding. This workflow builds fact-finder, a LangGraph pipeline where an investigator agent plans a line of inquiry, runs multi-step searches across a document corpus, assembles findings with per-claim citation trails, and routes the trail through a human review gate before anything is admitted as a conclusion.

On August 14, 2026, Chainlink unveiled Chainlink for Agents — an infrastructure platform that gives autonomous AI agents verified data, protected execution, and cross-chain settlement via CCIP. The platform answers the three problems every agent economy hits: agents cannot trust scraped web data, cannot pay for services autonomously, and cannot move value across blockchains. This briefing covers the agent-data trust problem, the CCIP settlement layer, and what protected computation means for agent safety.