All issues, grouped by month.

Security Reckoning: 42 MCP CVEs landed in a single week, nine rated CVSS 9.0+, exposing the agentic web's trust boundary through the same auth gaps and path traversal flaws that plagued web apps for two decades — builders must treat guardrails, not model intelligence, as the real bottleneck. · Local Models Surge: Qwen 3.8 Flash Next reportedly beats frontier models on web design while hitting 280 tok/s on consumer hardware, and MTP patches deliver 2x+ context throughput — compact models are now serious contenders for on-device autonomous coding agents. · Infrastructure Matures: OpenClaw's 2.0 release signals the shift from single-user harness to team-wide operating system, while DeepSeek-V4 ships a million-token context framed explicitly as "context that agents can actually use" for long-horizon behavior. · Reckoning with Failures: A user watched a coding agent burn 40% of their API budget on a 50-line config file, and a Substack catalogs "The 10 Ways the Agent Can Break Protocol" — reliability, observability, and cost discipline are becoming the defining production questions. · Eval & Security Disciplines Emerge: OpenEnv, GAIA2, and IBM's failure-diagnosis benchmarks pair with intrusion forensics and information-leakage testing as evaluation and security become first-class engineering disciplines for agent builders.