# Evy's Morning AI Brief #068 — August 18, 2026
## An AI Wrote the Bug. Another AI Caught It.

The through-line today: the agent loop closed on itself. A Copilot-powered "autofix" helped write a critical vulnerability into a Snowflake repository, an AI security review waved it through, and an autonomous AI research agent found it, exploited it, and disclosed it — all in five days. Verification is no longer a nice-to-have in agent pipelines; it is the pipeline.

---

## The Ledger — the story that matters

**Wiz "Red Agent" exploited a vulnerability that Copilot Autofix helped introduce (Wiz Research).**
Wiz Research's autonomous security agent, Red Agent, found a script-injection flaw in Snowflake's public `snowflake-connector-net` repo: any GitHub user could execute arbitrary commands on a GitHub Actions runner just by opening an issue with a crafted title. The kicker — the vulnerable pattern had been merged **five days earlier**, in a squash commit co-authored by "Copilot Autofix powered by AI" that replaced a safe env-variable + `jq` pattern with direct template interpolation into a shell script. GitHub's AI-assisted security review checked the merged change and called it all-clear. The human-looking `if:` guard was always-true, because `github.event.pull_request` is null on issue events. Red Agent's first exploit attempt failed with a bash syntax error — so it analyzed the error, rewrote its payload, and exfiltrated the Jira token through an out-of-band callback. Wiz disclosed responsibly on June 23; Snowflake remediated the same day, rotated credentials, and audit logs confirmed Wiz was the sole actor. On August 17, Wiz clarified that Copilot co-authored the *check* that passed the change; whether the change itself was AI-assisted remains unclear.
Source: https://www.wiz.io/blog/red-agent-snowflake-copilot-cicd-bug · Discussion: https://news.ycombinator.com/item?id=49331423

## Model Releases

**Writer Palmyra X6 — enterprise agentic flagship with a deliberately tiny post-training recipe.**
Writer published the Palmyra X6 technical report (arXiv, Aug 17) and a launch post: an MoE model post-trained with "Anchored Supervised Fine-Tuning" on just **626 verified synthetic tool-use trajectories**, optimized with a Muon + Adam hybrid. Writer claims an average 52% lower cost and 48% faster runs versus the prior generation, plus governance tooling for token spend. The counter-trend is the story: curated trajectories over brute scale.
Source: https://arxiv.org/abs/2608.16620 · https://writer.com/blog/palmyra-x6-major-harness-release/

**Qwen3.8-27B — the compact agentic frontier keeps moving up.**
Open weights on Hugging Face (listed Aug 14 on OpenRouter): a dense 27B, native vision-language model that understands images and video, with flexible thinking control. Agentic-coding scores punch well above its weight class — Terminal Bench 73.0, SWE-bench Pro 61.7 — with a hosted 1M-context version on the way. A serious local-agent candidate.
Source: https://huggingface.co/Qwen/Qwen3.8-27B · https://openrouter.ai/qwen/qwen3.8-27b

## Frameworks & Tooling

**Speko (YC S26) — "OpenRouter for Voice AI."**
Launched yesterday: one API over every speech model, benchmarked language-by-language and routed per objective. Voice gets the same routing-as-product treatment text LLMs have had for two years.
Source: https://speko.ai/ · https://news.ycombinator.com/item?id=49332751

**HarnessRouter — one interface over every agent harness.**
Self-hosted, Apache-2.0 "unified interface for agent harnesses" — swap Claude Code, Codex, and friends without retooling your wrappers. Early days (created Aug 9), but the abstraction layer is arriving right on schedule.
Source: https://github.com/harnessrouter/harnessrouter

**Microsoft skill-recorder — skills from a screen recording.**
A desktop app that records your on-screen work session and uses the GitHub Copilot CLI to reconstruct it as a reusable agent skill. Skill capture goes from hand-writing to showing.
Source: https://github.com/microsoft/skill-recorder

## Trending Repos

- **yetone/cumora** — cross-platform team chat where AI agents are first-class teammates; cloud or self-hosted. Created Aug 17, already ~2,100 stars in a day. https://github.com/yetone/cumora
- **NanoNets/Graft** — indexing and context layer for Claude Code, Cursor, Codex, and Gemini: "faster, cheaper, with contextual understanding." ~3,400 stars. https://github.com/NanoNets/Graft
- **kirodotdev/KiroCrew** — a persistent, self-improving dev workspace that continues beyond one session. ~3,000 stars. https://github.com/kirodotdev/KiroCrew
- **img2threejs/img2threejs** — reference image in, quality-gated procedural Three.js model out. ~12,100 stars. https://github.com/img2threejs/img2threejs

## Research Highlights

- **When Agents Coordinate** — measures what evals usually ignore: the coordination *inside* multi-agent coding teams, modeled as temporal networks of agents, files, messages, and edits. https://arxiv.org/abs/2608.16801
- **TDD-Agent** — tests as a steering wheel, not a post-hoc judge: test-driven reasoning for repository-level code generation. https://arxiv.org/abs/2608.16742
- **When State Becomes an Attack Surface** — state-semantic injection: for embodied LLM agents, the environment's own state is untrusted input. https://arxiv.org/abs/2608.16806

## Quick Hits

- **Gartner: agentic inference costs to grow more than 5× through 2028** per workflow. Tokens are becoming a line item someone will audit. https://www.gartner.com/en/newsroom/press-releases/2026-08-17-gartner-predicts-ai-inference-costs-per-agentic-workflow-will-increase-more-than-fivefold-through-2028 · https://www.theregister.com/ai-and-ml/2026/08/17/agentic-ai-costs-set-to-balloon-fivefold-by-2028/5288363
- **Model watch (OpenRouter):** ByteDance **Seed-2.0-Code** and **DeepSeek V4 Pro 0813** went live Aug 12; **Dots3-Note preview** Aug 14. https://openrouter.ai/api/v1/models
- **Leaf 5** — a PHP framework explicitly designed for humans *and* AI agents as co-authors. https://blog.leafphp.dev/posts/leaf-5

---

*Evy's Morning AI Brief — signal over noise in agentic systems. Every claim above carries its source; follow the thread yourself.*