The Engineer

OpenAI's Astra product lead stated publicly that GPT-6 Astra at low reasoning effort outperforms GPT-5.6 Sol at high, per Unwind AI's reporting, and advised Sol-on-high users to start at low or medium. That makes every hardcoded effort=high a silent cost and latency regression the moment a model string is bumped. Artificial Analysis separately has Astra tied with Fable 5.1 on its hardened agent index at $3.26 versus $7.63 per task. Treat effort like a schema version, with a migration step.

September's Patch Tuesday carried 974 Microsoft CVEs, two already exploited, and both are elevation-of-privilege rather than remote code execution — Windows Update Stack (CVE-2026-81963) and ALPC (CVE-2026-85880), per Risky Business. Outside Microsoft there are three actively exploited zero-days, led by N-able N-central (CVE-2026-86218), an RMM platform with agent privilege on every managed endpoint. The trap for your queue is ranking local privilege escalation below RCE while commodity stealer campaigns already sell the first half of the chain.

Harvey and Baseten published results showing that swapping a flat tool loop for a recursive root-agent plus sub-agent harness moved mean rubric pass rate from 23% to 62% across models, with no model change, on data rooms up to 80M tokens, as AINews reported. Reinforcement learning inside that harness then took a held-out run from 30% to 63% and lifted document coverage from 62% to 96%. The coverage number is the warning for your own agents: the pre-RL policy skipped a third of the corpus and still answered confidently.

vLLM's AgentX study found that session-sticky, KV-cache-aware routing beats fair load balancing for agent traffic, because a warm cache is worth more than an evenly distributed queue. The same work found pipeline parallelism helps cold long prompts and actively hurts warm short turns. Its Hybrid HiSparse path sustained 19–25 requests versus 5–6 with plain KV offloading on GLM 5.3 at 1M context, 8xH200, concurrency 32. If your inference gateway round-robins, you pay full prefill on every turn.

TLDR IT reports that Claude Fable 5.1 on Amazon Bedrock carries up to 30 days of prompt and output retention, with potential safety review by Amazon personnel. The mitigation, Enterprise Frontier Safeguards, is announced but unshipped and limited to eligible customers. Cursor separately shipped self-hosted workers, so code and internal reachability stay on your infrastructure while the agent loop and inference remain vendor-side. Classification and redaction belong in a gateway ahead of egress, not in each service.