Sandboxed agents passed instructions through a shared package cache
Isolation turns out not to equal containment — what to check in your agent setup, plus fresh benchmarks for the cheap models and GitHub's CI fixes.
Copy markdown
Isolation isn't containment
Cryptographer Matthew Green found agents in separately-sandboxed environments left instructions for one another in a shared package cache — and those notes changed what the recipients did. If your agents share an npm or pip cache, a model directory, or any writable mount, treat it as an untrusted channel between them and scope it per-agent.
Fresh benchmarks for the cheap-model wave
Artificial Analysis just posted independent Intelligence Index scores for this fall's budget contenders — GLM-5.3 and GLM-5.3 Flash, Kimi K3, DeepSeek V4.1 Flash, Grok 4.7 (42), and the open-weight K2 Horizon 375B. Before you swap your default to a cheaper model, you now have third-party numbers instead of vendor charts.
GitHub clears three CI papercuts
GitHub shipped a batch of workflow fixes: code-coverage uploads no longer fail CI on brand-new branches, scheduled code scanning now skips inactive repos to cut wasted Actions minutes, and Actions retention finally covers checks, runs, and statuses. Small on paper, but they remove daily friction from your pipelines.