AI Coding Live News

LiteLLM, a widely deployed unified proxy gateway powering millions of LLM and autonomous agent pipelines worldwide (including LangChain and OpenHands), suffered a critical supply-chain compromise. Attackers breached its automated CI/CD release pipeline, pushing a poisoned v1.107.0 release to PyPI and Docker Hub tags ('latest' and 'main-stable') equipped with a credential-harvesting payload targeting system environment variables and cloud API keys. Coordinated with security firms including SlowMist, the maintainers quickly contained the incident, yanked v1.107.0, restored PyPI to 1.106.2, and urged all operators to pin dependency versions and rotate API credentials immediately.

Zoom

At GTC Berlin, NVIDIA unveiled the OpenShell Reference Architecture alongside the Agent Knowledge Foundation within its Agent Toolkit. Addressing critical enterprise vulnerabilities where autonomous tool-using agents succumb to prompt injections, hallucinated destructive commands, or unauthorized data exfiltration, OpenShell establishes hardware-isolated runtime boundaries. Operating through hardware roots of trust, OpenShell dynamically intercepts out-of-boundary tool calls and file access in real time with sub-microsecond latency, establishing an authoritative blueprint for secure, auditable enterprise agent deployments.

Zoom

Researchers introduced MemT-1.0 (arXiv:2610.26825), a groundbreaking architecture internalizing memory as an intrinsic component of foundation model computation. Moving beyond exploding KV caches and lossy Vector RAG pipelines, MemT-1.0 employs Gated DeltaNet-2 with stable within-turn token-level updates alongside a novel Mixture-of-Storage mechanism. Trained across a two-stage 34B-token pipeline, the released MemT-1.0-Nano model achieves a 1.86x end-to-end inference speedup and a staggering 66x reduction in persistent storage at 128K tokens relative to full-context KV caching, dramatically elevating procedural task execution in autonomous agents.

Zoom

Meta AI published the technical report for Muse Glimmer 30B (arXiv:2610.24628), an open-source 30-billion parameter causal language model with an integrated perception encoder designed for on-device autonomous agents. Quantized to approximately 4 bits, Muse Glimmer operates inside 32GB of VRAM on a single consumer GPU (such as an RTX 5090) without cloud reliance. On rigorous agentic evaluations, Muse Glimmer sets new records for its size class: achieving 75.5 on MCPAtlas (surpassing Gemma4-31B at 54.2 and Qwen3.6-27B at 62.5) and 51.2 on SWE-Bench Pro, released fully under the Apache 2.0 license.

Zoom

Researchers introduced MemPilot (arXiv:2610.06830), an on-demand multimodal memory curation framework for LLM agents. Resolving the chronic context explosion and cross-session forgetting that plague autonomous agents handling mixed text, screenshots, and action traces, MemPilot introduces an adaptive policy controlling memory retention, semantic clustering, and targeted retrieval. Across extensive long-horizon multi-modal agent benchmarks, MemPilot cuts active memory footprint by over 60% while substantially improving cross-session task completion.

Zoom

Researchers from UC San Diego and Georgia Tech introduced ACT3D (arXiv:2610.21783), an autonomous agent for active exploration and reasoning in 3D environments. Rather than relying on heavy multi-view image suites, video streams, or 3D point cloud encoders, ACT3D preserves native monocular VLM encoding (processing a single first-person frame at a time like humans) while treating 3D space as an interactive environment. Optimized via outcome-driven RL without trajectory supervision, ACT3D achieves 53.2% average accuracy across six 3D benchmarks (+22.0% over base Qwen), outperforming proprietary Gemini 3.6 Flash while using 50%-70% fewer input frames.

Zoom

In production agentic loops, fast single-pass 'System 1' models are favored for latency-sensitive tool selection and interface actions. When these models fail, engineers cannot easily diagnose whether the agent misperceived environmental observations or misjudged its subsequent action. Researchers from Carnegie Mellon University (CMU) introduced a behavioral diagnostic benchmark across 17 fast models and frontier reasoning baselines, pairing next-action queries with independent factual probes about the state. The results expose a striking systemic pattern: the vast majority of erroneous actions follow completely accurate perception, with error concentration increasing in more accurate models. The true failure mode lies not in reading facts, but in synthesizing them into the next programmatic sub-goal.

Zoom

While LLM agents are rapidly deployed into sandbox workspaces with direct shell and filesystem access, post-training methods remain predominantly one-shot and bound by external teacher models. ClawLoop introduces a self-improving, harness-native training loop that operates without external teachers. Through a self-sustaining cycle of task synthesis with difficulty growth, SFT/RL training, and automated behavioral diagnosis, ClawLoop demonstrates consistent empirical gains across SkillsBench, Claw-Eval-Live, and ClawGym-Bench on Qwen3.6-27B, while successfully transferring data to 4B and 9B models.

Zoom

Salesforce AI Research has introduced Prospective Hindsight (PH), a self-calibrating training framework for long-horizon autonomous agents. Addressing the fundamental limitation of standard RL where credit assignment occurs strictly after environmental feedback, PH exploits the gap between the agent's pre-action prospective prediction and post-action retrospective evaluation. By weighting gradients with this surprise residual, PH eliminates overconfident failures in single-turn tasks and underconfident successes in multi-turn interactions across GRPO and on-policy distillation.

Zoom

Whether LLM-based autonomous agents truly learn from interactive experience or merely regurgitate memorized knowledge remains a fundamental question in AI research. Most conventional agent benchmarks evaluate tasks (such as writing standard Python or navigating operating systems) heavily represented in pretraining corpora, creating severe data contamination that obscures whether agents are synthesizing new concepts or retrieving memorized patterns. Researchers introduce Learn2Play-Bench (arXiv:2610.08215, code: github.com/liushiliushi/Learn2Play-Bench, site: liushiliushi.github.io/learn2play-bench-website), a novel open-source benchmark constructed around text-based environments with entirely unfamiliar and counterintuitive mechanics. Agents must discover game physics and causal dependencies purely through trial-and-error interactions. The benchmark reveals two critical insights: retaining uncompressed, verbatim interaction logs decisively outperforms LLM-generated rule summaries, and the agent harness scaffolding (managing tool loops, memory, and reflection) exerts a larger impact on final performance than the choice of underlying foundation model.

Zoom