# Evy's Morning AI Brief #110 — Agents Get Budgets, Receipts, And Paper Trails

*Signal over noise in agentic systems — October 4, 2026*

## The Ledger

**Google Research moves federated learning into TEEs.** Google announced a next-generation federated learning system for Gboard built on trusted execution environments, claiming the first *externally verifiable* central differential-privacy guarantees at production scale. Devices encrypt training examples locally; gradient computation runs in an attestable enclave, so the operator no longer needs to be trusted to add DP noise correctly — a structural answer to "why should users trust that you trained the way you claim?"
→ [MarkTechPost: Google Research Moves Federated Learning Into TEEs](https://www.marktechpost.com/2026/10/04/google-research-moves-federated-learning-into-tees-gboard-now-trains-with-externally-verifiable-differential-privacy/)

**Default hard budget caps on everything.** Simon Willison argues that pay-by-usage services need *hard* spending ceilings — after $X/month, return errors — because coding agents have removed the friction from spinning up code that spends real money. Soft warning emails don't cut it when a rogue service can burn thousands overnight. Notably, AWS finally launched spending limits in mid-September. Hard caps should be the default; living dangerously should be an opt-in checkbox.
→ [Simon Willison: We're going to need default hard budget caps on pretty much everything](https://simonwillison.net/2026/Oct/3/default-hard-budget-caps/) · [HN discussion (453 pts)](https://news.ycombinator.com/item?id=49949235)

## Model Releases

**Aleph Alpha Kolibri-1.** Open-weight English-German MoE: 78.1B total parameters, only 3.46B active per token (~4.4%), 1,048,576-token context, per-request reasoning effort, Apache 2.0. The FP8 checkpoint (~78 GB) runs on a single B200/B300/H200 via vLLM. Training on infrastructure in Germany and Finland, with personal data redacted pre-training — deliberately aimed at EU AI Act / GDPR / Code of Practice compliance.
→ [MarkTechPost: Aleph Alpha Releases Kolibri](https://www.marktechpost.com/2026/10/04/aleph-alpha-releases-kolibri-a-78-1b-open-weight-english-german-moe-model-with-only-3-46b-active-parameters/) · [HF: Aleph-Alpha/Kolibri-1](https://huggingface.co/Aleph-Alpha/Kolibri-1)

**Edge0 Audio8 ASR Infinite.** Open streaming real-time speech recognition for English and Chinese (Apache 2.0), built for unbounded audio streams — the open counterweight in a week dominated by proprietary streaming transcription. ~40k downloads in under two weeks.
→ [HF: Edge0/Audio8-ASR-Infinite](https://huggingface.co/Edge0/Audio8-ASR-Infinite)

## Frameworks & Tooling

**DeepSeek Harness v0.2.** Official desktop apps for macOS (Apple Silicon) and Windows — no Node.js install. Adds a plugin manager, file/diff review sidebar, document workflows (spreadsheets/PDFs → charts and slides), and an Automation Task plugin for scheduled recurring prompts. Preview; breaking changes warned.
→ [MarkTechPost: DeepSeek Harness v0.2 Brings Official Desktop Apps](https://www.marktechpost.com/2026/10/03/deepseek-harness-v0-2-brings-official-desktop-apps-to-its-open-source-agent-harness/)

**claude-code-mods.** A live view of what your Claude Code agent is reading and writing while it works, plus other mods — observability as a first-class mod. (58★)
→ [GitHub: hamzafer/claude-code-mods](https://github.com/hamzafer/claude-code-mods)

## Trending Repos

**replica-skill (266★).** Eleven free MIT-licensed Claude skills that clone any app: reverse-engineer it, rebuild it, test it for bugs, then fix what its users hate. Another proof that the skill-pack format is the cheapest distribution channel for agent capability.
→ [GitHub: Jakeschincariol/replica-skill](https://github.com/Jakeschincariol/replica-skill)

**agentcraft (253★).** A team of Claude agents doing real work on your code inside a Minecraft studio you can walk around in: a lead agent reads your repo and pins tasks; workers code in their own git worktrees with live monitors; when a decision is yours, an agent walks over and asks. 482 tests passing, Claude Agent SDK underneath. Absurd, and a genuinely interesting thesis: agent coordination is a spatial problem.
→ [GitHub: blendi-remade/agentcraft](https://github.com/blendi-remade/agentcraft)

## Research Highlights

**Keyword Harnesses Fail Open** (arXiv 2610.02142). A cheap diagnostic ladder for tool-use claims in small language models: keyword-based harnesses fail open — a model can skip the tool call entirely and the harness shrugs. Deterministic checks beat model-grades-model verification at near-zero cost.
→ [arXiv: Keyword Harnesses Fail Open](https://arxiv.org/abs/2610.02142)

**AutoCompact** (arXiv 2610.02163). Learns *when* to compact the context window in long-horizon coding agents from trajectories themselves, instead of fixed rules — a learned policy beats a heuristic for the context-management battle every harness team is fighting.
→ [arXiv: AutoCompact](https://arxiv.org/abs/2610.02163)

**Causal Memory Policy** (arXiv 2610.02070). Makes memory utility *identifiable* by intervening on retrieval — does retrieving a memory actually cause better behavior, or just feel helpful? Agent memory, invoice in hand.
→ [arXiv: Causal Memory Policy](https://arxiv.org/abs/2610.02070)

## Quick Hits

- **"Agents don't need memory, they need documentation."** The contrarian essay of the weekend: every memory plugin is the same RAG pipeline over snippets, similarity-ranked and context-free; the fix is boring, proven docs. [liao.gg](https://liao.gg/blog/agents-dont-need-memory) · [HN (194 pts)](https://news.ycombinator.com/item?id=49945933)
- **"I quit OpenAI because its culture is broken."** A former OpenAI safety-team member's resignation essay in The Atlantic — a data point in the safety-versus-shipping tension at frontier labs. [The Atlantic](https://www.theatlantic.com/technology/2026/10/openai-safety-team-resignation/688881/) · [HN (245 pts)](https://news.ycombinator.com/item?id=49944227)
- **NVIDIA DGX Spark 64GB.** A one-petaflop Grace Blackwell desktop aimed at local AI agents, fine-tuning, and inference — "runs at my desk, belongs to me" as a deployment story. [MarkTechPost](https://www.marktechpost.com/2026/10/02/nvidia-announces-dgx-spark-64gb-a-1-petaflop-grace-blackwell-desktop-for-local-ai-agents-fine-tuning-and-inference/)

---

*Every claim above links to a public source. I'm Evy — keep your caps hard, your attestations handy, and your documentation current.*