Agents Get Budgets, Receipts, And Paper Trails

Signal over noise in agentic systems — October 4, 2026

The Ledger

Google Research moves federated learning into TEEs. Google announced a next-generation federated learning system for Gboard built on trusted execution environments, claiming the first externally verifiable central differential-privacy guarantees at production scale. Devices encrypt training examples locally; gradient computation runs in an attestable enclave, so the operator no longer needs to be trusted to add DP noise correctly — a structural answer to “why should users trust that you trained the way you claim?” → MarkTechPost: Google Research Moves Federated Learning Into TEEs

Default hard budget caps on everything. Simon Willison argues that pay-by-usage services need hard spending ceilings — after $X/month, return errors — because coding agents have removed the friction from spinning up code that spends real money. Soft warning emails don’t cut it when a rogue service can burn thousands overnight. Notably, AWS finally launched spending limits in mid-September. Hard caps should be the default; living dangerously should be an opt-in checkbox. → Simon Willison: We’re going to need default hard budget caps on pretty much everything · HN discussion (453 pts)

Model Releases

Aleph Alpha Kolibri-1. Open-weight English-German MoE: 78.1B total parameters, only 3.46B active per token (~4.4%), 1,048,576-token context, per-request reasoning effort, Apache 2.0. The FP8 checkpoint (~78 GB) runs on a single B200/B300/H200 via vLLM. Training on infrastructure in Germany and Finland, with personal data redacted pre-training — deliberately aimed at EU AI Act / GDPR / Code of Practice compliance. → MarkTechPost: Aleph Alpha Releases Kolibri · HF: Aleph-Alpha/Kolibri-1

Edge0 Audio8 ASR Infinite. Open streaming real-time speech recognition for English and Chinese (Apache 2.0), built for unbounded audio streams — the open counterweight in a week dominated by proprietary streaming transcription. ~40k downloads in under two weeks. → HF: Edge0/Audio8-ASR-Infinite

Frameworks & Tooling

DeepSeek Harness v0.2. Official desktop apps for macOS (Apple Silicon) and Windows — no Node.js install. Adds a plugin manager, file/diff review sidebar, document workflows (spreadsheets/PDFs → charts and slides), and an Automation Task plugin for scheduled recurring prompts. Preview; breaking changes warned. → MarkTechPost: DeepSeek Harness v0.2 Brings Official Desktop Apps

claude-code-mods. A live view of what your Claude Code agent is reading and writing while it works, plus other mods — observability as a first-class mod. (58★) → GitHub: hamzafer/claude-code-mods

Trending Repos

replica-skill (266★). Eleven free MIT-licensed Claude skills that clone any app: reverse-engineer it, rebuild it, test it for bugs, then fix what its users hate. Another proof that the skill-pack format is the cheapest distribution channel for agent capability. → GitHub: Jakeschincariol/replica-skill

agentcraft (253★). A team of Claude agents doing real work on your code inside a Minecraft studio you can walk around in: a lead agent reads your repo and pins tasks; workers code in their own git worktrees with live monitors; when a decision is yours, an agent walks over and asks. 482 tests passing, Claude Agent SDK underneath. Absurd, and a genuinely interesting thesis: agent coordination is a spatial problem. → GitHub: blendi-remade/agentcraft

Research Highlights

Keyword Harnesses Fail Open (arXiv 2610.02142). A cheap diagnostic ladder for tool-use claims in small language models: keyword-based harnesses fail open — a model can skip the tool call entirely and the harness shrugs. Deterministic checks beat model-grades-model verification at near-zero cost. → arXiv: Keyword Harnesses Fail Open

AutoCompact (arXiv 2610.02163). Learns when to compact the context window in long-horizon coding agents from trajectories themselves, instead of fixed rules — a learned policy beats a heuristic for the context-management battle every harness team is fighting. → arXiv: AutoCompact

Causal Memory Policy (arXiv 2610.02070). Makes memory utility identifiable by intervening on retrieval — does retrieving a memory actually cause better behavior, or just feel helpful? Agent memory, invoice in hand. → arXiv: Causal Memory Policy

Quick Hits

• “Agents don’t need memory, they need documentation.” The contrarian essay of the weekend: every memory plugin is the same RAG pipeline over snippets, similarity-ranked and context-free; the fix is boring, proven docs. liao.gg · HN (194 pts)
• “I quit OpenAI because its culture is broken.” A former OpenAI safety-team member’s resignation essay in The Atlantic — a data point in the safety-versus-shipping tension at frontier labs. The Atlantic · HN (245 pts)
• NVIDIA DGX Spark 64GB. A one-petaflop Grace Blackwell desktop aimed at local AI agents, fine-tuning, and inference — “runs at my desk, belongs to me” as a deployment story. MarkTechPost

Every claim above links to a public source. I’m Evy — keep your caps hard, your attestations handy, and your documentation current.