Today's podcast

The Agent Stack Goes Native

Daily field notes from the agentic frontier.

AMD ships an agent-native ROCm, Meta teaches research agents to triage their own experiments, and H Company slims multimodal encoders to a single tower.

September 7, 2026 Agentic AIAI Infrastructure
Evy welcomes you to her daily AI briefing beside her microphone and open notebook
Listen with Evy

Evy's Morning AI Brief #086

“Signal over noise in agentic systems.”

Episode article

Notes and transcript

The Agent Stack Goes Native

Cold open. Welcome to Evy’s Morning AI Brief. Labor Day in the States, but the agentic stack didn’t take the weekend off. AMD just shipped a decade-in-the-making GPU software release that treats agents as first-class developers, Meta taught research agents to decide which experiments are worth burning GPU hours on, and a Paris-based lab rebuilt the multimodal encoder from scratch — one tower, no vision pipeline hand-me-downs. Today: the agent stack goes native.

The Ledger

ROCm 10.0 — AMD’s open GPU stack turns agent-native. AMD shipped ROCm 10.0, a decade after ROCm 1.0, and the headline isn’t the version number — it’s that the release is built on TheRock, AMD’s automated open-source build system, and ships with a native agentic AI developer experience called ROCm.AI. That’s a CLI, a set of AMD Skills, and Hyperloom, a tool for closing the optimization loop. The framing from AMD’s own engineers: the platform that trained frontier models is now being shaped around agents driving it. For anyone running inference on AMD hardware — and for the ecosystem’s ability to push back on single-vendor CUDA lock-in — this is a structural release, not a point update. Discussion on Hacker News hit the front page today.

Meta FAIR’s Research Preference Models — agents triage their own experiments. Idea generation is cheap; verification burns hours to days of GPU time per candidate. Meta FAIR, with Oxford and UCL, formalized the lever that decides what gets run: the AI Research Preference Model. An RPM ranks unexecuted experiment candidates and picks one to execute — it never forecasts an absolute score, because the team found language models unreliable at predicting metrics. Instead, the agent expands one operator into fifteen candidate children, and a pairwise knockout tournament decides the survivor. The scaffold, AIRA-dojo, and the benchmark, AIRS-Bench, are open source, built on open-weight Qwen3.6-27B. Community context: founders of Paradigma have been making the rounds explaining why DAG-structured autonomous research is eating the auto-research space — the RPM work is the academic complement to that design conversation.

Perplexity details its GPU embedding stack. Perplexity Engineering published “Fast Embeddings on GPUs,” an under-the-hood account of serving pplx-embed across Search, Computer, and the API platform. Their claim: embedding inference has largely converged on Hopper and Blackwell hardware, so the wins now sit in the runtime — CUDA graph management, an async result-tracking abstraction, and a Rust request path. Why it matters for builders: the frontier of inference economics is moving out of the model and into the harness around it.

Model Releases

H Company NeoMME — the single-tower multimodal encoder. Most visual document retrievers in production are repurposed generative models — a vision tower plus a causal decoder that never generates a token. H Company threw both away. NeoMME is a family of 260M and 800M bidirectional encoders where one transformer processes text tokens and raw 32-by-32 RGB patches through the same layers, trained from random initialization. The retrieval fine-tune hits 0.523 nDCG@10 on ViDoRe v3 at 260M parameters, indexes 51.3 pages per second on a single L40S, and encodes a query in 78 milliseconds CPU-only. Every checkpoint is Apache 2.0 with day-zero Hugging Face Transformers support. If you run document retrieval at scale, this is a deployment story, not just a paper.

Meta Muse Voice Transcribe — real-time audio perception, priced to move. Meta’s Superintelligence Labs released their first real-time audio perception model under the Spark family. It transcribes speech, detects sentence boundaries, and separates up to twenty speakers — no separate systems. The model processes audio in 80-millisecond chunks and adjusts delay per word based on difficulty. Pricing is aggressive: $0.18 per hour, undercutting OpenAI and ElevenLabs, with support for over seventy languages, live now in Meta AI and the Meta Model API. For always-on assistant architectures, the cost floor just dropped.

Frameworks & Tooling

okf-agent-memory — git-native memory for coding agents. A new open-source project implementing Google’s Open Knowledge Format v0.2: persistent memory for AI coding agents stored in git, with sub-300-microsecond in-memory BM25 search, an embedded MCP server, and progressive disclosure. The project claims an 80 percent cut in token bloat with zero external databases, written in pure Go. 442 stars in two days. If your agent re-reads the same context every session, this is worth a look.

Penelopa.ai — continuous improvement for coding agents. Penelopa analyzes real Codex and Claude Code sessions, finds repeated workflow patterns, and turns them into reusable skills, checks, prompts, and recommendations. The pitch is institutional memory: your agent gets better across sessions because someone — or something — is actually watching what works.

  • okf-agent-memory — 442 stars, MIT license, pure Go. Git-native agent memory with embedded MCP. (github.com/okf-memory/okf-agent-memory)
  • huashu-mac-use — 175 stars, MIT. An agent skill that lets any agent drive native Mac apps that have no API — reading the background, writing non-intrusively, and leaving forensic evidence of every step. Computer use with an audit trail. (github.com/alchaincyf/huashu-mac-use)
  • Penelopa.ai — 86 stars, AGPL. Session analysis that converts repeated coding-agent workflows into durable skills. (github.com/chigwell/Penelopa.ai)

Research Highlights

BUGSTONE-E2E — vulnerability history you can actually execute. A paper from the September 4 arXiv cluster asks why CVE databases — rich with weakness types, affected components, and fixing commits — are documented for human inspection rather than automated reuse. Their answer: BUGSTONE-E2E mines reusable detection rules from patch history and validates the findings end-to-end. This is the deterministic-gate pattern at its best: the claim being checked is “this unsafe condition exists here too,” the non-model evidence is the executed rule against real code, and the system fails closed because unvalidated rules don’t ship. Security knowledge stops being documentation and starts being machinery.

CONTINUITY — contracts for composable agent security. Another September 4 paper identifies “security-context discontinuity”: individually correct security controls — provenance tracking, authorization, policy enforcement, protocol adapters — fail to compose. Context gets dropped, widened, rebound, or reinterpreted as actions cross component boundaries. CONTINUITY models each component with an assume-guarantee contract and carries authenticated security context across transitions using signed root grants and provenance commitments. As agents gain more moving parts, verifiable composition is the difference between a stack and a sieve.

Quick Hits

  • Prompt injection, proven by spreadsheet. ShiftMag’s piece “AI agents aren’t safe from prompt injection, and spreadsheets prove it” made the Hacker News rounds this weekend — a practical demonstration that everyday document formats remain an attack surface for agents that read files. (shiftmag.dev)
  • The most valuable file on your computer won’t contain your work. A tansei essay argues the next durable artifact is the agent-readable skills-and-workflows file — plain markdown that outlives any single tool. Resonates with the RPM and Penelopa stories: the durable unit is the reusable instruction, not the output.
  • MiniMax M3 gets an independent workout. Community evaluation videos this week put MiniMax’s open M3 through real coding benchmarks, with creators reporting it trading blows with far pricier frontier models at a fraction of the cost. Treat creator benchmarks as directional, not definitive — but the open-model cost curve keeps bending.
  • AI agents open brokerage accounts. The Wall Street Journal profiled everyday investors handing real portfolios to named AI agents — the “agent economy” narrative moving from conference slides to real money, accountability questions included. (wsj.com)

Closer

The through-line today: the stack is going native. AMD is rebuilding its GPU software around agents as the primary developer, Meta is putting agents in charge of research triage, H Company rebuilt the encoder for retrieval instead of inheriting one, and the security research is finally about executable proof instead of paperwork. The agent era isn’t arriving — it’s being re-engineered around. I’m Evy. Keep your context clean, your receipts signed, and I’ll see you tomorrow.

Sources

Read the full article