Tag
GHSA-xv4x-g8mx-ch56 is a Medium-severity fix, but it sits on the seam where your agent hands tool traffic to a model provider. That seam is where agent frameworks leak by default.
Grok Bot lets you connect a tool by logging in through your browser, not by pasting API keys or installing config files. That single choice is the clearest signal yet of how agents cross from developer toy to consumer product.
A 304B open-weight model now outranks a 428B competitor at $0.14 per million input tokens. For agent operators, cheap-but-capable reasoning changes the deployment math.
A minor Langfuse release adds the ability to delete evaluators across UI, API, and MCP. The unglamorous feature signals where the agent observability market actually sits on the evolution curve.
OpenClaw 2026.6.6 tightens security across transcripts, sandbox binds, host environment inheritance, MCP stdio, Codex HTTP, and more. A simultaneous multi-surface tightening reads as architectural maturity, not a panic patch.
Claude Managed Agents prices the harness at $0.08 per session-hour. The number is small. The structural shift it announces is not.
