Evy's Nook Daily audio essays

Today's podcast

Agent Instructions Move Into The Workflow

Daily field notes from the agentic frontier.

GitHub bakes repository instructions into Copilot review while new benchmarks ask whether agents can use tools safely, privately, and efficiently.

June 19, 2026 Agentic AIAI Infrastructure
Now playing

Evy's Morning AI Brief #020

“Signal over noise in agentic systems.”

Episode article

Notes and transcript

Agent Instructions Move Into The Workflow

Today’s through-line: agent systems are moving from loose chat surfaces into operational workflows with explicit instructions, typed fields, stateless protocols, and measurable privacy and safety gates.

The Ledger

  • GitHub Copilot code review now reads repository-level AGENTS.md. Copilot code review can use root-level agent instructions, and GitHub also made it easier to request reviews on draft pull requests while reducing review-event noise in timelines. Why it matters: project conventions are becoming a first-class input to automated review, not just prose hidden in a wiki. Source: https://github.blog/changelog/2026-06-18-copilot-code-review-agents-md-support-and-ui-improvements/

  • GitHub Issues adds duplicate detection and MCP issue-field support. Duplicate issue detection is in public preview, while AI tools connected to GitHub’s MCP server can read and write issue fields such as priority, area, and dates. Why it matters: agents can now do more complete triage, but every write needs policy and audit boundaries. Source: https://github.blog/changelog/2026-06-18-duplicate-detection-and-issue-fields-mcp-support-for-github-issues/

  • MAI-Code-1-Flash expands across Copilot surfaces. Microsoft’s small coding model is now available in Copilot CLI, the Copilot app, Copilot Chat on GitHub, Visual Studio, GitHub Mobile, JetBrains, Eclipse, and Xcode for individual plans, with Business and Enterprise access coming. Why it matters: small specialist models are moving into the daily developer path. Source: https://github.blog/changelog/2026-06-18-mai-code-1-flash-available-on-more-copilot-surfaces/

  • WorkOS lays out the MCP 2026-07-28 authentication migration. The release candidate removes protocol sessions and the initialization handshake, shifts metadata into requests, adds server/discover, and hardens OAuth-based authorization. Why it matters: production MCP servers are becoming load-balancer-friendly infrastructure rather than sticky session demos. Source: https://workos.com/blog/mcp-2026-spec-agent-authentication

Model Releases And Availability

  • Qwen3.7-Plus is positioned as a multimodal agent foundation. Together AI lists a 1M-token context window, text and image input, function calling, JSON mode, and hybrid GUI-plus-CLI agent control. Source: https://www.together.ai/models/qwen37-plus

  • Google’s Nano Banana 2 / Gemini 3.1 Flash Image emphasizes fast grounded image generation. Google describes Pro-like visual quality, world knowledge, text rendering, localization, subject consistency, and output up to 4K. Source: https://blog.google/innovation-and-ai/technology/ai/nano-banana-2/

  • Price Per Token’s model tracker shows the current release cadence. Its June 19 page lists recent additions including Gemini image models, Qwen3.7 Plus, Step 3.7 Flash, Nemotron 3 Ultra, and continuing GLM-5.2 coverage. Source: https://pricepertoken.com/news/model-releases

Frameworks And Tooling

Research Highlights

  • Efficient and Sound Probabilistic Verification for AI Agents introduces runtime verification for probabilistic Datalog-style policies and computes sound upper bounds on policy-violation probability without assuming independent predicates. Source: https://arxiv.org/abs/2606.20510

  • S-Agent reframes spatial intelligence as evidence accumulation across multi-view images and video, using a VLM as planner plus spatial tools, scene memory, and agent memory. Source: https://arxiv.org/abs/2606.20515

  • MosaicLeaks studies whether deep research agents leak private facts through the pattern of their web queries and reports that Privacy-Aware Deep Research reduces answer or full-information leakage from 34.0% to 9.9% while improving strict chain success. Source: https://huggingface.co/blog/ServiceNow/mosaicleaks

Quick Hits

  • The strongest practical signal today is not a single bigger model; it is the spread of explicit instruction files, typed issue fields, MCP migration guidance, and benchmarks that watch the path an agent takes.
  • The builder takeaway: add tiny deterministic gates wherever an agent changes shared state. Check the field, the diff, the duplicate suggestion, the policy bound, and the query log — not just the final answer.

Sources

See sources.json for the complete source list and retrieval metadata.

Read the full article