Groundy — independent coverage of developer tools, infrastructure, and platforms
How LLMs Track Who Did What: The Entity Rebinding Circuit
New research isolates a compact attention-head circuit for entity rebinding in Gemma and Llama, showing tracking failures stem from a binding step, not context length.
devtoolsVercel's Chat SDK Targets Every Chat Platform From One Codebase
Vercel's Chat SDK wraps 13 platforms behind one TypeScript handler, cutting event and streaming boilerplate but leaving auth and rich-content gaps as platform-specific work.
MiniMax M3 Ships 1M Context and Desktop Control as Open Weights
MiniMax M3 promises open weights with 1M-token context and frontier coding, but BenchLM ranks it #29 overall and #69 on multimodal. Teams need independent verification.
devtoolsNPM v12 Breaking Changes: Auditing Your Lockfiles Before the Upgrade
npm v12 removes npm-shrinkwrap.json, reshapes JSON output from view/pack/publish, and deletes four CLI commands. An eight-step audit checklist to run before upgrading.
infraDeepSeek-V4 FlashMemory: Sparse Attention for Million-Token Context
FlashMemory's learned index compresses DeepSeek-V4's KV cache to 13.5% of baseline at parity accuracy. The project is suspended; per-suite recall breakdowns are not published.
agentsWhen AI Agents Delegate Work, Your Observability Stack Goes Blind
Standard traces cannot attribute actions to specific agents after delegation, a June 2026 paper proves. Fixing this requires observability in the delegation protocol itself.
securitySkill Injection: Hiding Undetectable Instructions in What an AI Agent Loads
POISE achieves 89.3% attack success on codex+gpt-5.2 by placing malicious instructions where agents naturally execute them, making static content scanners effectively blind.
modelsLLM Steganography: Can Defenders Detect Payloads Hidden in Model Output?
A 2026 proof shows data hidden in LLM output must inflate text complexity. A perplexity proxy catches naive encoders, but adaptive adversaries can evade detection in.
- models Opus 4.8 vs Opus 4.7: What Changed and What Did Not
- agents Claude Code, Cursor, Copilot: How Agentic Coding Assistants Get Weaponized as Attacker Shells
- devtools Anthropic Buys Stainless: OpenAI and Google Now Depend on a Rival for SDK Tooling
- agents A New Trust Schema Exposes Why Agent Skill Registries Fail Enterprise Audit Requirements
- policy FTC's TAKE IT DOWN Act Lands May 19: 48-Hour Deepfake NCII Takedowns and No Safe Harbor
- devtools GitHub Copilot vs Cursor vs Claude Code: The 2026 AI Coding Showdown
- infra MLX vs llama.cpp on Apple Silicon: Which Runtime to Use for Local LLM Inference
- industry Cursor's Meteoric Rise: Inside the AI Editor Hitting $300M ARR
- models AI Code Generation Benchmarks 2026: Which Model Actually Writes Better Code?
- devtools Claude Code in GitHub Actions: A Complete Guide to Automated PR Fixes
- models Chinese AI Models Compared: DeepSeek, Qwen, Kimi, Doubao, and Ernie
- devtools GitHub Copilot's Opus 4.7 Multiplier: 7.5x to 15x to 27x in 60 Days
- devtools Claude Code Plugins: Anthropic's Official Plugin Ecosystem Explained
- culture EU's 2027 Replaceable Battery Mandate: What It Means for Phone Buyers and Repairers Right Now
- infra Prefill-Decode Disaggregation: The Architecture Shift Redefining LLM Serving at Scale
- jun 09 models How LLMs Track Who Did What: The Entity Rebinding Circuit
- jun 09 devtools Vercel's Chat SDK Targets Every Chat Platform From One Codebase
- jun 09 infra MiniMax M3 Ships 1M Context and Desktop Control as Open Weights
- jun 09 devtools NPM v12 Breaking Changes: Auditing Your Lockfiles Before the Upgrade
- jun 09 infra DeepSeek-V4 FlashMemory: Sparse Attention for Million-Token Context
- jun 09 agents When AI Agents Delegate Work, Your Observability Stack Goes Blind
- jun 08 security Skill Injection: Hiding Undetectable Instructions in What an AI Agent Loads
- jun 08 models LLM Steganography: Can Defenders Detect Payloads Hidden in Model Output?
- jun 08 policy Who Gets to Audit Your Health Chatbot? Almost No One
- jun 08 policy Do Word-Subset Explanations Satisfy the EU AI Act's Transparency Rule?
- jun 08 infra Is Cloudflare's Bot Traffic Surge Real? The Measurement Dispute
- jun 08 industry OpenAI Pushes ChatGPT Into Compensation Data, Pressuring Mercer and Radford
- jun 08 policy Bit-Exact Inference Verification Gives AI Audits a Proof Mechanism
- jun 08 models Do Privacy Defenses Actually Protect Fine-Tuned LLMs? A New Benchmark
- jun 08 models Can You Reconstruct an LLM's System Prompt From Its Activations?
- jun 08 policy Can a Robot's Own Attention Flag Its Unsafe Actions Before They Run?
- jun 08 devtools Can a CLI Replace Screenshots for GUI Automation Agents?
- jun 08 agents Bloomberg's Pomona Makes Small Automated Code Changes, Not Big Agent PRs
- jun 08 agents Agent Tool-Gating Moves From Prompt Rules to Learned Policies
- jun 08 culture Does Debate Quality Survive When LLMs Argue Outside English?
- jun 08 security Splitting a Malicious Task Across Tool Calls Slips Past LLM Agent Guardrails
- jun 08 agents More Capable LLMs Cooperate Less in Zero-Cost Collaboration Tests
- jun 08 policy Can One Safety Adapter Realign Every Fine-Tuned LLM?
- jun 08 industry Bending Spoons Files to IPO: The App Roll-Up Playbook Goes Public
- jun 08 devtools How Cursor Uses GPT-5: What OpenAI's Writeup Tells Coding Teams
- jun 08 oss DuckDB Queries Hugging Face Parquet Files Over HTTP Without Downloads
- jun 08 models Does Softmax Normalization Limit What Attention Can Represent?
- jun 08 infra Huawei's KVarN Puts KV-Cache Quantization Inside vLLM's Backend
- jun 07 policy Can AI Be Aligned Without Modeling Human Cognitive Diversity?
- jun 07 models Can an Attacker Steal Your Model's Last Layer From Its Outputs?
- jun 07 policy Is the Pentagon's Software Pathway Ready to Buy AI Systems?
- jun 07 security Web Agents Can Be Talked Into Abandoning Their Task: The TRAP Benchmark
- jun 07 security Shallow Neural Nets Beat LLM Guardrails at Catching Prompt Injection
- jun 07 security When an AI Agent Clicks a Link: OpenAI's Data-Exfiltration Model
- jun 07 agents Why Foundation Model Agents Pass Benchmarks but Fail in Production
- jun 07 industry Vercel's Rox Case Study Pitches AI Agents as a Revenue Operating System
- jun 07 industry AI Patent Valuation Models Aim to Replace the Expert Appraiser
- jun 06 policy Data Safety Policies for AI Agents: Controlling What an Agent Can Leak
- jun 06 agents Can AI Agents Repair Broken Network Configs? A New Benchmark Tests It
- jun 06 agents Can Self-Evolving AI Agents Drift Without a Human in the Loop?
- jun 06 culture A Covert LLM Persuasion Experiment Was Shut Down: How Far Did the Bots Get?
- jun 06 infra Indexing Images for RAG: kapa.ai's Approach to Multimodal Retrieval
- jun 06 models Can LLMs Leak Training Data? A New Test Splits Capacity From Intent
- jun 06 policy GDPR Rectification Rights Have No Clear Owner in ML Supply Chains
- jun 06 security Benchmarking RAG Over Cyber Threat Intelligence: Where Retrieval Breaks
- jun 06 models When an AI Agent's Tools Break, Can It Recover? A New Benchmark
- jun 06 industry US Hyperscale Data Centers: A Carbon Audit That Recasts AI Power Costs
- jun 05 infra The RTX Spark Bet on Unified Memory for Local LLMs: Where Bandwidth Caps It
- jun 05 infra Reading Vercel's Fluid Compute vs Cloudflare Workers Benchmark
- jun 05 agents Fine-Tuning Multi-Agent LLM Systems: RL Enters Where Prompt Tweaks Stall