Agent Tooling Gets Its Receipts

Today’s brief is about agent infrastructure becoming more concrete: repository skills, MCP support, token-saving context gates, speculative decoding, and research that treats evidence as a first-class runtime object.

The Ledger

• GitHub made Copilot code review support for agent skills and MCP generally available. That matters because review behavior can now be shaped by versioned project skills and external context, rather than a single loose prompt. Source: https://github.blog/changelog/2026-07-29-copilot-code-review-agent-skills-and-mcp-now-generally-available
• GitHub also added publish-time malware scanning for npm and workflow holds for potentially malicious GitHub Actions. Those are relevant to agent builders because autonomous coding systems increasingly touch package publishing and CI. Sources: https://github.blog/changelog/2026-07-28-npm-publish-time-malware-scanning-and-dual-use-metadata and https://github.blog/changelog/2026-07-28-github-actions-holds-potentially-malicious-workflows-for-approval

Model Releases And Availability

• Grok 4.5 is now available in GitHub Copilot. The fresh development is distribution into a mainstream coding workflow, not a brand-new model-family announcement. Source: https://github.blog/changelog/2026-07-28-grok-4-5-is-now-available-in-github-copilot
• QVAC published VisionPsy-Nano, an on-device vision-language model family. For agents, the notable point is small local perception that can run close to user data and devices. Source: https://huggingface.co/blog/qvac/visionpsy
• LettucePrevent focuses on real-time factual-hallucination prevention for RAG. It is a guard/verifier-style release, useful because agent systems need small claim-boundary checks, not only larger generators. Source: https://huggingface.co/blog/lebe1/lettuceprevent-blogpost

Frameworks And Tooling

• Tencent open-sourced AngelSpec, a framework for multi-token prediction and block-parallel speculative decoding on Hy3 models. Long-running agents are latency machines; serving improvements become agent-throughput improvements. Sources: https://www.marktechpost.com/2026/07/30/tencent-open-sources-angelspec-a-unified-training-framework-for-mtp-and-block-parallel-speculative-decoding-on-hy3-models/ and https://github.com/Tencent/AngelSpec
• Token Saver is an open-source MCP extension using local hybrid RAG to reduce Claude PDF token costs. The interesting design is local filtering before context injection. Sources: https://www.marktechpost.com/2026/07/30/token-saver-an-open-source-mcp-extension-using-local-hybrid-rag/ and https://github.com/Marktechpost/Token-Saver
• The official MCP SDKs continued hardening: Python SDK v2.0.0 and TypeScript server packages v2.0.0 shipped this week. Sources: https://github.com/modelcontextprotocol/python-sdk/releases/tag/v2.0.0 and https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/%40modelcontextprotocol/server%402.0.0

Trending Repos

• OpenAI Codex shipped a new 0.147 alpha after 0.146.0, showing coding-agent CLIs moving at normal developer-tool cadence. Source: https://github.com/openai/codex/releases/tag/rust-v0.147.0-alpha.2
• Alibaba open-code-review released v1.8.1. Review agents are a strong verification surface because outputs can be tied to comments, policy checks, and patch evidence. Source: https://github.com/alibaba/open-code-review/releases/tag/v1.8.1
• Composio shipped fresh core/slim/integration packages, keeping the tool-connector layer moving. Source: https://github.com/ComposioHQ/composio/releases/tag/%40composio/core%400.14.1
• Community HN signals included Peri, a Rust coding agent compatible with Claude Code plugins/skills; a local merge queue for parallel Claude Code agents; and OpenLore, a deterministic local-first memory and guardrails project. Sources: https://github.com/KonghaYao/peri , https://github.com/funador/claude-code-merge-queue , https://github.com/clay-good/OpenLore

Research Highlights

• Evidence-Ledger Adjudication for Claim-Evidence Traceability proposes explicit claim-evidence ledgers. Source: https://arxiv.org/abs/2607.26512v1
• SecRespond benchmarks agents for real-world post-compromise incident response. Source: https://arxiv.org/abs/2607.26791v1
• VITAL-RAG studies context allocation for coding agents. Source: https://arxiv.org/abs/2607.26937v1
• Scores Are Not Decisions studies cost-aware stopping rules for tool acquisition. Source: https://arxiv.org/abs/2607.27083v1

Quick Hits

• HN surfaced a local merge queue for parallel Claude Code agents, a practical sign that branch isolation and merge policy are becoming agent infrastructure. Source: https://news.ycombinator.com/item?id=49104640
• HN also highlighted new MCP protocol support in Claude, reinforcing that protocol compatibility now needs mature permissioning. Source: https://news.ycombinator.com/item?id=49106074
• Kuna’s decompiler-development writeup shows coding agents in a domain with hard artifacts: binaries, traces, and recovered semantics. Source: https://noelo.org/blog/kuna-release/
• Hugging Face covered running ECMWF’s open-source AI forecasting model, a useful reminder that open models become operational only when they are runnable. Source: https://huggingface.co/blog/hugging-science/run-aifs-yourself