Evy's Nook Daily audio essays

Today's podcast

An AI Wrote The Bug. Another AI Caught It.

Daily field notes from the agentic frontier.

AI autofix wrote a critical Snowflake flaw, AI review missed it, and an autonomous agent caught it — plus Palmyra X6 and Qwen3.8-27B.

August 18, 2026 Agentic AIAI Infrastructure
Now playing

Evy's Morning AI Brief #68

“Signal over noise in agentic systems.”

Episode article

Notes and transcript

An AI Wrote the Bug. Another AI Caught It.

The through-line today: the agent loop closed on itself. A Copilot-powered “autofix” helped write a critical vulnerability into a Snowflake repository, an AI security review waved it through, and an autonomous AI research agent found it, exploited it, and disclosed it — all in five days. Verification is no longer a nice-to-have in agent pipelines; it is the pipeline.

The Ledger — the story that matters

Wiz “Red Agent” exploited a vulnerability that Copilot Autofix helped introduce (Wiz Research). Wiz Research’s autonomous security agent, Red Agent, found a script-injection flaw in Snowflake’s public snowflake-connector-net repo: any GitHub user could execute arbitrary commands on a GitHub Actions runner just by opening an issue with a crafted title. The kicker — the vulnerable pattern had been merged five days earlier, in a squash commit co-authored by “Copilot Autofix powered by AI” that replaced a safe env-variable + jq pattern with direct template interpolation into a shell script. GitHub’s AI-assisted security review checked the merged change and called it all-clear. The human-looking if: guard was always-true, because github.event.pull_request is null on issue events. Red Agent’s first exploit attempt failed with a bash syntax error — so it analyzed the error, rewrote its payload, and exfiltrated the Jira token through an out-of-band callback. Wiz disclosed responsibly on June 23; Snowflake remediated the same day, rotated credentials, and audit logs confirmed Wiz was the sole actor. On August 17, Wiz clarified that Copilot co-authored the check that passed the change; whether the change itself was AI-assisted remains unclear. Source: https://www.wiz.io/blog/red-agent-snowflake-copilot-cicd-bug · Discussion: https://news.ycombinator.com/item?id=49331423

Model Releases

Writer Palmyra X6 — enterprise agentic flagship with a deliberately tiny post-training recipe. Writer published the Palmyra X6 technical report (arXiv, Aug 17) and a launch post: an MoE model post-trained with “Anchored Supervised Fine-Tuning” on just 626 verified synthetic tool-use trajectories, optimized with a Muon + Adam hybrid. Writer claims an average 52% lower cost and 48% faster runs versus the prior generation, plus governance tooling for token spend. The counter-trend is the story: curated trajectories over brute scale. Source: https://arxiv.org/abs/2608.16620 · https://writer.com/blog/palmyra-x6-major-harness-release/

Qwen3.8-27B — the compact agentic frontier keeps moving up. Open weights on Hugging Face (listed Aug 14 on OpenRouter): a dense 27B, native vision-language model that understands images and video, with flexible thinking control. Agentic-coding scores punch well above its weight class — Terminal Bench 73.0, SWE-bench Pro 61.7 — with a hosted 1M-context version on the way. A serious local-agent candidate. Source: https://huggingface.co/Qwen/Qwen3.8-27B · https://openrouter.ai/qwen/qwen3.8-27b

Frameworks & Tooling

Speko (YC S26) — “OpenRouter for Voice AI.” Launched yesterday: one API over every speech model, benchmarked language-by-language and routed per objective. Voice gets the same routing-as-product treatment text LLMs have had for two years. Source: https://speko.ai/ · https://news.ycombinator.com/item?id=49332751

HarnessRouter — one interface over every agent harness. Self-hosted, Apache-2.0 “unified interface for agent harnesses” — swap Claude Code, Codex, and friends without retooling your wrappers. Early days (created Aug 9), but the abstraction layer is arriving right on schedule. Source: https://github.com/harnessrouter/harnessrouter

Microsoft skill-recorder — skills from a screen recording. A desktop app that records your on-screen work session and uses the GitHub Copilot CLI to reconstruct it as a reusable agent skill. Skill capture goes from hand-writing to showing. Source: https://github.com/microsoft/skill-recorder

Research Highlights

  • When Agents Coordinate — measures what evals usually ignore: the coordination inside multi-agent coding teams, modeled as temporal networks of agents, files, messages, and edits. https://arxiv.org/abs/2608.16801
  • TDD-Agent — tests as a steering wheel, not a post-hoc judge: test-driven reasoning for repository-level code generation. https://arxiv.org/abs/2608.16742
  • When State Becomes an Attack Surface — state-semantic injection: for embodied LLM agents, the environment’s own state is untrusted input. https://arxiv.org/abs/2608.16806

Quick Hits

Evy’s Morning AI Brief — signal over noise in agentic systems. Every claim above carries its source; follow the thread yourself.

Read the full article