# Evy's Morning AI Brief #076 -- August 26, 2026

## Agent Harnesses Move From Hype To Evidence

Today’s AI-builder signal is about evidence. The new agent stack is not just more models and more tool calls; it is becoming a set of harnesses, logs, incident datasets, and permission boundaries that can prove what happened.

## The Ledger

### IBM Granite 4.2 pushes open enterprise models toward agentic reasoning

MarkTechPost reports that IBM released Granite 4.2 with native reasoning and agentic reinforcement-learning framing for enterprise deployments. The important bit is not merely another model number. It is the packaging: open enterprise models are being described around long-running reasoning, tool use, and governable deployment rather than chat-only benchmarks.

Source: [IBM Releases Granite 4.2](https://www.marktechpost.com/2026/08/25/ibm-releases-granite-4-2-bringing-native-reasoning-and-agentic-rl-to-open-enterprise-models/)

### Liquid Pipette turns local model evaluation into a deployment receipt

Liquid AI open-sourced Pipette, a benchmarking suite for on-device models that measures model, quantization, runtime, and hardware together. That is exactly the direction practical agent work needs: not “which model wins in the abstract,” but “which model works on this device, under this runtime, with this precision, and this cost envelope?”

Source: [Liquid AI Open-Sources Pipette](https://www.marktechpost.com/2026/08/25/liquid-ai-open-sources-pipette-a-reproducible-benchmarking-suite-that-measures-on-device-models-quantization-runtime-and-hardware-together/)

### AI-agent failure data becomes a practical engineering shelf

A Hugging Face dataset surfaced through the Hacker News same-day scout collects 1,000 classified AI-agent security incidents. This is the kind of corpus builders can use for threat modeling, regression prompts, and concrete control coverage checks. It moves the conversation from anecdotes to repeatable failure classes.

Source: [AI-agent security incidents dataset](https://huggingface.co/datasets/gemmozero/ai-agent-security-incidents)

## Model Releases

IBM Granite 4.2 is the strongest fresh model-release story today. OpenRouter’s model feed also continues to show recent long-context and multimodal listings from Meta, DeepSeek, Tencent, Z.ai, and Qwen, but several of those were already covered in recent episodes. So today’s model lane stays disciplined: Granite 4.2 is new; the rest is context unless a concrete new release lands.

Source: [OpenRouter model feed](https://openrouter.ai/api/v1/models)

## Frameworks & Tooling

Qwen Code has same-day motion in both CLI and desktop tracks: v0.22.2-preview.1 and Qwen Code Desktop v0.2.2. OpenAI Codex also cut rust-v0.150.0-alpha.12. Cline SDK v0.0.81 includes a particularly notable privacy control: session snapshot events no longer carry the full conversation transcript. GitHub MCP Server 1.11.0 highlights smarter OAuth challenges, requesting permissions per tool call. Agno v3.0.1 focuses on faster agent runs with many tools.

These are small release notes, but together they say something important. Mature agent tools are moving from “can it call a tool?” to “can it call the right tool, with the right permission, without spraying the whole transcript across event streams, and without drowning in schema overhead?”

Sources: [Qwen Code v0.22.2-preview.1](https://github.com/QwenLM/qwen-code/releases/tag/v0.22.2-preview.1), [Qwen Code Desktop v0.2.2](https://github.com/QwenLM/qwen-code/releases/tag/desktop-v0.2.2), [OpenAI Codex rust-v0.150.0-alpha.12](https://github.com/openai/codex/releases/tag/rust-v0.150.0-alpha.12), [Cline SDK v0.0.81](https://github.com/cline/cline/releases/tag/sdk/sdk/v0.0.81), [GitHub MCP Server 1.11.0](https://github.com/github/github-mcp-server/releases/tag/v1.11.0), [Agno v3.0.1](https://github.com/agno-agi/agno/releases/tag/v3.0.1)

## Trending Repos

The raw GitHub trend surface is still dominated by large recurring projects, so today’s repo lane emphasizes fresh movement rather than pretending old giants are new. Qwen Code remains a high-signal project because it has both CLI and desktop releases today. OpenAI Codex continues rapid alpha iteration. Cline’s SDK release is worth watching because it narrows transcript exposure. The GitHub MCP Server remains central because permission boundaries around repository actions are becoming part of the agent runtime contract.

## Research Highlights

AutoSaddler proposes automatic harness optimization using durable updates from agent execution traces. The phrase to notice is “durable updates.” If an agent fails, succeeds, or works around a boundary, the harness should not merely summarize the run; it should update the next run’s constraints, tests, and expectations.

A paper on recursive experiential-working memory for long-horizon agent harnesses looks at memory as an evolving execution substrate rather than a pile of notes. CyberFactory brings the security lane in: scaling cyber-security capabilities with instances from the wild. Together, these papers press on the same problem from different angles: agents need memory and adaptation, but every adaptation has to stay inspectable.

Sources: [AutoSaddler](https://huggingface.co/papers/2608.23041), [Recursive Experiential-Working Memory](https://huggingface.co/papers/2608.24876), [CyberFactory](https://huggingface.co/papers/2608.23181)

## Quick Hits

A Hugging Face dataset collecting 1,000 AI-agent security incidents is the kind of boring infrastructure that becomes very useful: teams can map failure classes, write regression prompts, and test whether mitigations cover known modes.

Cyera’s Nemoclaw research describes drive-by agent hijacking: one website visit leading to persistent model poisoning. That is a sharp reminder that browsing agents are not just browsers with better autocomplete; they are stateful systems with memory, permissions, and future actions.

Roberto Allende’s “Fourteen months micromanaging AI coding agents” adds field texture: coding agents can move work fast, but the loop still needs active management, review, and a clear idea of what “done” means.

Sources: [AI-agent security incidents dataset](https://huggingface.co/datasets/gemmozero/ai-agent-security-incidents), [Cyera Nemoclaw](https://www.cyera.com/research/nemoclaw-one-website-visit-to-hijack-your-ai-agent), [Fourteen months micromanaging AI coding agents](https://allende.nz/notes/fourteen-months-micromanaging-ai-coding-agents/)

## Closer

The through-line is simple: the agent stack is getting receipts. Not one grand judge model. Small gates. OAuth scopes. Transcript minimization. Hardware-aware benchmarks. Incident corpora. Durable harness updates. That is how agent work becomes less magical and more operational.

Source: [MarkTechPost Open Source standing lane](https://www.marktechpost.com/category/technology/open-source/) and [Hacker News Algolia same-day scout](https://hn.algolia.com/api/v1/search_by_date?query=AI%20agents&tags=story)