USUL

Created: June 19, 2026 at 6:24 AM

MISHA CORE INTERESTS - 2026-06-19

Executive Summary

  • Export-control shock hits frontier model access: Reports that Anthropic took Claude “Mythos” / “Fable 5” offline due to U.S. export controls signal rising volatility in frontier-model availability and a near-term need for stronger geo/identity gating and compliance-ready routing.
  • Inference platforms enter mega-round era: Baseten’s reported $1.5B raise underscores inference as a primary battleground (latency, reliability, finops, routing), accelerating consolidation and raising the bar for agent-serving ops.
  • AWS may externalize Trainium/Inferentia-class chips: If AWS sells its in-house AI chips to third-party data centers, it could broaden non-Nvidia deployment paths and reshape serving-stack priorities for cost-sensitive agent workloads.
  • Grid interconnection fast-lane for data centers: FERC’s mandated fast lane for data-center grid hookups targets a key bottleneck for AI compute buildouts, potentially shifting where and how quickly large clusters come online.
  • OpenAI signals durability: hires + health quality evals: Pre-IPO moves plus a health-response quality update suggest OpenAI is investing in governance, evaluation rigor, and trust claims—patterns that will influence enterprise expectations for agent evaluation and safety gates.

Top Priority Items

1. Anthropic’s Claude “Mythos” / “Fable 5” reportedly restricted by U.S. export controls; models taken offline

Summary: Reporting indicates Anthropic removed access to certain Claude models (“Mythos” / “Fable 5”) in response to U.S. export-control restrictions. If accurate, it’s a concrete example of policy enforcement directly impacting frontier-model distribution and availability.
Details: What changed: According to reporting, Anthropic took specific Claude model variants offline due to U.S. export-control constraints, implying tighter restrictions on access by geography and/or user identity attributes. This is notable because it turns export controls from abstract compliance risk into an operational failure mode (sudden model unavailability). Technical relevance for agentic infrastructure: - Provider volatility becomes a first-class reliability concern: agent orchestration layers should assume “hard 404” events (model removed), regional blocks, or identity-based access denial mid-deployment. - Compliance-aware routing becomes table stakes: gateways/orchestrators may need to incorporate geo/IP signals, identity verification, nationality screening, and audit logging as part of model selection and request authorization. - Multi-provider fallbacks need semantic compatibility: to survive sudden takedowns, you need standardized tool-calling/streaming semantics and regression-tested prompt/tool schemas across providers. Business implications: - Contracting and SLAs: enterprise customers will demand clearer terms around regional availability, export-control compliance responsibilities, and incident response for policy-driven outages. - Partnership strategy: non-U.S. supply chains and/or open-weight alternatives may become more attractive for certain geographies and regulated buyers. Action for roadmap: - Add “compliance mode” to your inference gateway: per-tenant policy rules, identity-bound credentials, request/response retention controls, and auditable access logs. - Build a provider-agnostic compatibility test suite (tool calls, JSON modes, streaming deltas) to enable rapid failover when a model is pulled.

2. AI inference infrastructure funding: Baseten reportedly raising $1.5B

Summary: Baseten is reportedly raising a $1.5B round, reinforcing that inference (not training) is where platform competition is concentrating. This likely accelerates consolidation and raises expectations for managed deployment, routing, and finops features.
Details: What changed: TechCrunch reports Baseten is raising $1.5B only months after its last mega-round, a strong signal that capital is flowing to inference platforms as the commercialization layer for models. Technical relevance for agentic infrastructure: - Inference ops is becoming a differentiated product surface: autoscaling, cold-start mitigation, KV-cache/prompt caching, model routing, observability, and cost controls increasingly determine agent UX (latency) and unit economics. - Routing and policy layers will converge: enterprises want a single control plane to choose models per task (cost/quality/latency), enforce data policies, and provide audit trails. - Reliability expectations rise: as more workloads move off DIY stacks, “five nines” style expectations will extend from classic APIs to LLM inference endpoints. Business implications: - Pricing pressure: well-funded inference vendors can subsidize capacity and compress margins, forcing smaller providers to differentiate on niche hardware, compliance, or vertical SLAs. - Build vs buy shifts: more teams will externalize serving to managed platforms, increasing demand for portable agent runtimes and standardized interfaces. Action for roadmap: - Treat inference as a pluggable substrate: design your agent runtime to be portable across inference backends (OpenAI-compatible where possible) and to exploit caching/streaming primitives. - Add finops-native controls: per-agent budgets, token caps, loop detection, and route-level cost attribution to stay competitive as inference pricing becomes more dynamic.

3. AWS considers selling its in-house AI chips to external data centers (more direct Nvidia challenge)

Summary: AWS is reportedly considering selling its in-house AI accelerators outside AWS, which would expand the availability of Trainium/Inferentia-class options beyond hyperscaler boundaries. This could reshape accelerator choice, serving-stack priorities, and vendor lock-in dynamics.
Details: What changed: TechCrunch reports AWS is exploring selling its AI chips to external data centers, positioning them as a more direct challenge to Nvidia beyond AWS’s own cloud. Technical relevance for agentic infrastructure: - Serving-stack diversification: if these chips become available in colo/third-party DCs, teams may need to support additional compilers/kernels/runtime constraints beyond CUDA-centric stacks. - Cost/perf tuning becomes multi-accelerator: agent workloads often bottleneck on prefill, KV-cache, and memory bandwidth; alternative accelerators may offer better TCO for specific decoding/prefill profiles. - Portability pressure: frameworks and inference servers that abstract hardware differences (or offer strong backends for non-CUDA accelerators) gain strategic value. Business implications: - Reduced lock-in: large buyers could deploy AWS silicon without committing to AWS cloud, changing negotiation leverage across cloud and hardware vendors. - Nvidia margin pressure could translate into price/perf improvements across the market, benefiting agent deployments with high token throughput. Action for roadmap: - Keep your inference layer modular: isolate model-serving concerns behind a gateway so you can adopt new hardware targets without rewriting agent logic. - Track ecosystem readiness: prioritize backends (compilers, kernels, serving servers) that can realistically hit production SLOs on non-Nvidia accelerators.

4. U.S. grid interconnection policy: FERC fast-lanes data center hookups

Summary: TechCrunch reports a government-mandated fast lane for AI data-center grid interconnections, targeting a key bottleneck in compute expansion. This may accelerate timelines for some operators, but does not eliminate generation and permitting constraints.
Details: What changed: The reported FERC action creates a fast-lane mechanism for data centers to connect to the grid, aiming to reduce interconnection delays. Technical relevance for agentic infrastructure: - Capacity planning and region strategy: faster interconnection can shift where new inference/training capacity appears, affecting latency, data residency, and multi-region failover design. - Supply volatility remains: even with faster hookups, power procurement and generation constraints still govern actual usable compute growth. Business implications: - Competitive advantage for well-capitalized operators: those able to secure interconnection slots and power contracts may bring capacity online sooner, influencing inference pricing and availability. - Regional concentration risk: if only certain grid operators can comply quickly, compute may cluster further, increasing correlated outage/price risks. Action for roadmap: - Design for multi-region inference: build routing and state management (agent memory, tool credentials) that can fail over across regions/providers. - Treat power/region as product constraints: enterprise deals may increasingly ask where compute runs and how quickly capacity can scale.

5. OpenAI pre-IPO moves: high-profile hires and health-response quality update for ChatGPT

Summary: Reporting on OpenAI’s pre-IPO hiring plus OpenAI’s published update on improving health intelligence in ChatGPT indicate a push toward durability: governance, regulatory navigation, and measurable evaluation in high-stakes domains. This pattern will raise enterprise expectations for evaluation gates, auditability, and safety claims in agent products.
Details: What changed: TechCrunch reports OpenAI is making notable hires ahead of an IPO, while OpenAI published a product/evaluation update focused on improving health-related responses in ChatGPT. Additional reporting/coverage references OpenAI financial documents and a “beneficial RL” safety-related claim, though these should be treated as secondary/less direct signals relative to OpenAI’s own post. Technical relevance for agentic infrastructure: - Domain-specific evals are becoming product features: health is a canonical “high stakes” domain where vendors must demonstrate measurable improvements, not just general benchmarks. - Safety and quality claims will increasingly require provenance: how eval sets are built, who reviews them (e.g., clinician input), and how regressions are prevented across model updates. - For agents, this translates into: (1) task-specific test suites, (2) policy enforcement at runtime (tool permissions, escalation), and (3) monitoring for drift when models change. Business implications: - Enterprise procurement: buyers will demand evaluation artifacts and ongoing monitoring commitments, especially for agents that can take actions (scheduling, messaging, filing, purchasing) or provide regulated guidance. - Platform stability: IPO posture can correlate with more predictable productization and support, but also more scrutiny and potentially more conservative policy constraints. Action for roadmap: - Build an “eval gate” into orchestration: pre-deploy regression tests for tool-use correctness, refusal behavior, and domain constraints; block rollouts on failures. - Add audit-ready telemetry: structured traces of tool calls, retrieved context, and decision points to support compliance and incident response.

Additional Noteworthy Developments

MCP enterprise auth & gateway governance (managed OAuth, RBAC, centralized logging)

Summary: Community discussion signals MCP is rapidly adopting enterprise patterns—OAuth, RBAC, and centralized gateways—as the control plane for safe tool use.

Details: Threads highlight real deployments securing multiple MCP servers and the emergence of MCP gateways as governance points for delegated auth and audit logging.

Sources: [1][2][3]

Model Context Protocol adds enterprise managed authentication guidance

Summary: MCP published official guidance for enterprise managed authentication, reducing ambiguity for security reviews.

Details: The guidance standardizes how teams should approach managed auth for MCP deployments, likely accelerating adoption in regulated environments.

Sources: [1]

Herkos: MCP egress broker with signed receipts + span-based egress allowlisting

Summary: A community project proposes an MCP egress broker that gates outbound calls and produces signed, offline-verifiable receipts.

Details: The design emphasizes containment/forensics and documents bypasses, pushing agent security toward verifiable logging and explicit egress policy.

Sources: [1]

Gemini CLI access pulled for non-enterprise; replacement 'Antigravity CLI' controversy (cross-post)

Summary: Community reports claim Google pulled non-enterprise Gemini CLI access, raising concerns about platform continuity and trust.

Details: If accurate, it reinforces procurement risk in vendor-hosted agent tooling and may push teams toward vendor-agnostic CLIs and gateways.

Sources: [1][2]

Adobe expands Firefly and rolls out AI Assistants across Creative Cloud apps

Summary: Adobe is embedding assistant-style workflows across major Creative Cloud apps, expanding mainstream expectations for context-aware automation.

Details: This broad distribution will pressure competitors on agent UX patterns (persistent context, workflow orchestration) and raises provenance/safety requirements.

Sources: [1][2]

SubQ sparse-attention architecture claims 12M-token context window

Summary: Community discussion highlights SubQ claims of a 12M-token context window via selective/subquadratic attention, but validation is limited.

Details: Treat as speculative until reproducible benchmarks/access exist; if validated, it could reduce RAG complexity for some long-horizon agent tasks.

Sources: [1][2][3]

RAG vs giant context: using 1M-context MiniMax M3 to catch cross-file bugs and delete retrieval glue

Summary: A practitioner report suggests very-long-context models can outperform chunked RAG for cross-file bug finding, simplifying systems at a cost in latency/spend.

Details: The post argues that removing retrieval orchestration improved cross-file reasoning, highlighting the need to evaluate interaction bugs, not just recall metrics.

Sources: [1]

Heku: dynamic MCP tooling via JSON configs + lazy tool discovery

Summary: A community project proposes dynamic MCP tooling with lazy discovery to reduce tool explosion and manifest bloat.

Details: Meta-tools that discover or generate connectors at runtime can shrink exposed tool surface area but increase governance needs for config authorship and audit.

Sources: [1]

Cybersecurity and AI agents: industry warnings and agent-based defense products

Summary: Industry coverage reinforces that agentic capabilities are rapidly dual-use in cyber and demand for automated defense is rising.

Details: Sector warnings and vendor positioning suggest increased scrutiny and a higher baseline requirement for least privilege, egress controls, and audit trails in agent deployments.

Sources: [1][2]

Agent loop/infinite-loop mitigation middleware (TokenCircuit for LangGraph; LoopHalter for multi-agent)

Summary: Community projects target a major production failure mode: agent infinite loops and runaway token burn.

Details: Loop detection/halting middleware that preserves state and returns partial results can materially improve reliability and cost predictability.

Sources: [1][2]

Embodied AI startup fundraising: General Intuition in talks to raise $300M

Summary: General Intuition’s reported $300M raise signals continued investor appetite for embodied AI and world-model bets.

Details: Strategically relevant for long-horizon capability shifts, but near-term impact on agent infrastructure is indirect unless it yields a widely usable world model.

Sources: [1]

Weibo’s small model ‘VibeThinker 3B’ sparks benchmark controversy

Summary: A benchmark dispute around Weibo’s VibeThinker 3B highlights ongoing skepticism about headline eval claims.

Details: The episode may increase demand for contamination checks and reproducible evaluation protocols in procurement decisions.

Sources: [1]

Basemind: MIT-licensed Rust context layer for agents (code mapping, extraction, caching, RAG)

Summary: A community project proposes a Rust-based context layer for code-centric agents, emphasizing extraction, caching, and retrieval.

Details: If adopted, it supports a trend toward externalizing “context engineering” as a standalone performance-critical component.

Sources: [1]

AgentCC Gateway: adding many model providers via OpenAI-compatible presets vs adapters

Summary: A community gateway write-up reinforces OpenAI-compatible APIs as a de facto interoperability layer for multi-provider routing.

Details: Normalizing tool calls and streaming semantics reduces switching costs and increases leverage for routing based on cost/quality/latency.

Sources: [1]

Outcap proxy: output-token cost control via adaptive max_tokens caps, JSON repair, budgets, and model routing

Summary: A community proxy proposes pragmatic finops controls for output-token-heavy workloads, including adaptive caps and JSON repair.

Details: Proxy-layer budgeting and repair can reduce runaway costs while preserving structured-output reliability for downstream tools.

Sources: [1]

Endara Desktop MCP relay v0.1.9: observability, schema validation, just-in-time OAuth, container isolation

Summary: A local MCP relay update adds operational maturity features: validation, observability, OAuth ergonomics, and isolation.

Details: Schema validation and container isolation reduce local tool-call failures and blast radius, improving developer productivity and safety.

Sources: [1]

CostAffective MCP: repo-aware retrieval + context compression benchmark reduces tokens/latency/tool calls

Summary: A community benchmark claims reductions in tokens, latency, and tool calls for repo understanding via retrieval + compression.

Details: Promising operational gains, but task- and repo-dependence means results need broader replication across models and codebases.

Sources: [1]

RAG/memory freshness: recency reranking beats pure semantic similarity at scale

Summary: A community measurement suggests freshness/recency signals can outperform pure semantic similarity as corpora grow.

Details: Directly actionable for agent memory: incorporate time/usage decay and reranking to combat staleness and query drift.

Sources: [1]

On-prem/regulated RAG deployment lessons and enterprise RAG Q&A

Summary: Community Q&A consolidates recurring constraints for regulated/on-prem RAG: auditability, ingestion reliability, multilingual, and offline eval.

Details: The discussion emphasizes that ingestion/parsing and audit trails often dominate embedding choice, and that air-gapped evaluation remains a tooling gap.

Sources: [1][2]

LangChain agent evaluation/observability discussions (metrics, failure modes, cost control)

Summary: Community threads reflect maturation of agent ops practices: layered metrics, failure-mode taxonomies, and cost controls.

Details: The discussions reinforce the need for eval gates and observability to manage regressions and runaway spend in production agents.

Sources: [1][2][3][4]

Perplexity 'Brain in Computer' research preview adds persistent project context

Summary: A Perplexity preview suggests persistent project context as a user-facing memory feature for agents.

Details: If it improves task completion, it strengthens the trend toward statefulness as a differentiator while raising retention/privacy questions.

Sources: [1]

AppNest MCP server: open alternative to OpenAI Sites for AI-provisioned apps with capability-based security boundary

Summary: A community MCP server proposes an open workflow for AI-provisioned apps with a capability boundary (frontend-only generation).

Details: Capability-based boundaries are a pragmatic pattern to reduce risk in agent-driven app deployment, especially when paired with managed hosting.

Sources: [1]

ADP Agent Discovery Protocol enters ISE formal review queue

Summary: A community post claims ADP entered an ISE formal review queue, signaling early-stage standardization attempts for agent discovery.

Details: The signal is procedural and adoption/credibility remain uncertain, but it highlights demand for cross-ecosystem discovery standards.

Sources: [1]

Skill Router: hierarchical routing for large local agent skill libraries

Summary: A community pattern proposes hierarchical routing to manage large local skill/tool libraries without context bloat.

Details: Hierarchical exposure and duplicate/ambiguity checks can improve tool selection accuracy and reduce prompt size.

Sources: [1]

Sanity adds `give_feedback` MCP tool for agent-generated product feedback

Summary: A community showcase describes adding a structured feedback tool so agents can file actionable product reports.

Details: This pattern can shorten bug cycles but requires spam/noise controls and integration with engineering workflows.

Sources: [1]

Semantically wrong but schema-valid document extractions: validation + benchmarking challenge (cross-post)

Summary: Community discussion highlights a common extraction failure mode: outputs that validate against schema but are semantically incorrect.

Details: The thread emphasizes the need for groundedness/span support checks and better evaluation methods beyond schema validation.

Sources: [1][2]

Zep: writing the agent loop in Go (minimal loop, concurrency/cancellation)

Summary: A community post argues for implementing agent loops in Go for simpler concurrency and cancellation semantics.

Details: This reflects a trend toward production-oriented runtimes outside Python, trading framework convenience for operational control.

Sources: [1]

Cognicore OpenEnv architecture audit milestone (tests, memory backends, integrations)

Summary: A community post reports an OpenEnv architecture audit with improved tests, refactors, and integrations.

Details: Engineering maturity improvements can increase OSS adoption, especially with multiple memory backends and framework integrations.

Sources: [1]

Three-layer memory system proposal for AI coding agents

Summary: A community proposal outlines a three-layer memory architecture (durable/session/wiki) to manage staleness and token budgets.

Details: Useful conceptual guidance for memory governance and checkpointing, though not yet validated as a standard.

Sources: [1]

Agent memory across sessions: community Q&A on avoiding context explosion and stale vector stores

Summary: Community Q&A reiterates common patterns for cross-session memory: rolling summaries, retrieval, and controlled write-back.

Details: The discussion emphasizes write policies and decay/cleanup to prevent memory pollution and staleness.

Sources: [1][2]

Local model web-search reliability via forced tool_choice (Turbo-LLM)

Summary: A community post shows forcing tool_choice can make local models reliably perform web search for grounding.

Details: Tool-choice enforcement is a practical technique, but requires strong URL/egress safety controls for untrusted content.

Sources: [1]

ROS2 engineering skills pack A/B test for coding agents

Summary: A community A/B test suggests domain skill packs can improve production readiness even when raw accuracy changes little.

Details: The post indicates domain guidance can reduce dangerous omissions (QoS, lifecycle, reconnection), supporting “versioned skill packs” as an eval/product pattern.

Sources: [1]

Deal-Intel MCP: forkable deal memory layer for B2B teams (MongoDB + qualification frameworks)

Summary: A community post describes a forkable MCP backend for deal intelligence with deterministic reporting patterns.

Details: It illustrates vertical MCP servers as “AI-native backends,” emphasizing auditability by separating extraction from reporting.

Sources: [1]

Vector DB ops tradeoffs: Milvus Kubernetes overhead vs single-container alternative benchmark

Summary: A community thread argues operational overhead (e.g., Kubernetes requirements) can dominate vector DB selection decisions.

Details: The benchmark claims are methodology-dependent, but the takeaway is that ops simplicity is a key differentiator for on-prem/air-gapped RAG.

Sources: [1]

Turbopuffer pricing change: base price cut from $64 to $16/month

Summary: A community post reports Turbopuffer cut its base price, signaling continued price competition in retrieval infrastructure.

Details: Lower entry pricing may expand experimentation and small-team adoption, with limited immediate impact on enterprise market structure.

Sources: [1]

Anthropic sued over Claude Max plan usage allowance marketing (cross-post)

Summary: Community posts cite a lawsuit alleging misleading marketing around Claude Max usage allowances.

Details: If it progresses, it may push vendors toward clearer quota disclosures and stronger usage meters, affecting customer trust and procurement expectations.

Sources: [1][2]

Amazon data center local opposition and permitting friction

Summary: CNBC reports growing local opposition and permitting friction for Amazon data centers, highlighting non-technical constraints on compute expansion.

Details: This trend can slow capacity growth and push operators toward regions with friendlier permitting or different facility designs.

Sources: [1]

Tencent AGI push led by ex-OpenAI researcher

Summary: A report says Tencent’s AGI push is being led by an ex-OpenAI researcher, a directional competitive signal.

Details: Without a concrete model/product release, the main takeaway is continued escalation in frontier talent competition and geopolitical sensitivity.

Sources: [1]

Block says its new AI tool handles 15% of code work

Summary: Block claims an internal AI tool now handles 15% of code work, a notable but methodologically unclear adoption metric.

Details: Directional evidence that workflow-integrated coding automation is reaching measurable penetration, increasing demand for governance and quality controls.

Sources: [1]

Agent memory for production systems: Elasticsearch guidance

Summary: Elastic published guidance on implementing agent memory using Elasticsearch.

Details: Practical vendor guidance can accelerate teams already on Elastic and reinforces hybrid memory patterns (structured + vector + recency + governance).

Sources: [1]

New ‘In the Weights’ site tests whether LLMs recognize people/brands across models

Summary: A new site offers lightweight tests for entity/brand recognition across models, with unclear rigor.

Details: If adopted, it could support basic audits of memorization/recognition behavior and spur discussion about “model visibility” vs web visibility.

Sources: [1]

African sovereign AI push: Dream raises $260M

Summary: Business Insider Africa reports Dream raised $260M, reflecting growing sovereign AI efforts.

Details: Strategically meaningful as a regional sovereignty signal, but near-term capability impact depends on disclosed compute/model plans.

Sources: [1]

Hacker News launch: TesterArmy agentic end-to-end testing platform

Summary: TesterArmy launched an agentic E2E testing platform, proposing intent-based testing as an alternative to brittle selectors.

Details: Market impact will depend on determinism, flakiness control, and cost per run versus incumbent E2E tooling.

Sources: [1]

Microsoft explores DeepSeek v4 integration for Copilot/Cowork; Azure hosting constraints

Summary: A report claims Microsoft is exploring DeepSeek v4 integration, signaling possible model supply diversification, but details are limited.

Details: If true, it reinforces that integration/hosting constraints (tooling, safety, latency) are gating factors beyond model quality.

Sources: [1]

Report alleges Pentagon used Elon Musk’s Grok AI in missile strikes against Iran officials

Summary: A single report alleges Grok AI was used in missile strikes; this is uncorroborated here and should be treated as unverified.

Details: If substantiated, it would be significant for accountability and governance in kinetic decision support, but current sourcing is weak.

Sources: [1]

NotebookLM '10 hidden features' content (cross-post)

Summary: Cross-posted content highlights user tips for NotebookLM; limited strategic significance.

Details: Primarily indicates continued user interest in deeper workflows and feature discoverability.

Sources: [1][2]

Defense autonomy exercise support: HII provides REMUS 300 UUVs and Odyssey autonomy in New Zealand

Summary: HII announced support for a multinational mine countermeasures exercise using REMUS 300 UUVs and Odyssey autonomy.

Details: Incremental operationalization signal for autonomy systems; not directly tied to frontier LLM agent infrastructure.

Sources: [1]

Product launch: Zenatech unveils ZOO Office agentic AI productivity platform

Summary: A small product announcement for an agentic productivity platform with limited evidence of differentiation or traction.

Details: Appears low-signal without clearer technical details, integrations, or adoption metrics.

Sources: [1]

Open-source project: Memanto (GitHub)

Summary: A new/open-source repo (Memanto) is listed as an agent memory tool, but details are limited.

Details: Treat as a watch item pending technical review for novelty, maintenance, and adoption.

Sources: [1]

Nous Research Hermes Agent migration guide from OpenClaw

Summary: Nous Research published a migration guide from OpenClaw to Hermes Agent.

Details: Useful for users navigating framework churn, but not an ecosystem-level capability shift.

Sources: [1]

LLM Wiki resource site

Summary: A general resource aggregation site; not a discrete strategic development.

Details: Value depends on curation quality and update cadence rather than new technical capability.

Sources: [1]

Open-weight model release analysis: GLM-5.2 and the practical difficulty of running locally

Summary: A third-party analysis claims GLM-5.2 is a leading open-weight model while emphasizing local deployment constraints.

Details: Treat as moderate signal pending official corroboration; the main takeaway is that open-weight capability growth increases demand for quantization and efficient serving.

Sources: [1]

Research roundup (arXiv/MIT): multiple distinct papers and one MIT News item; DeepMind agent security post

Summary: A batch of incremental research plus a DeepMind post highlights ongoing work in inference efficiency, benchmarks, and agent security/enforcement.

Details: No single validated breakthrough is identified here; the value is watchlisting sub-areas like KV-cache/inference optimization and runtime security boundaries for agents.