Launched Oct 21 (YC S25), Alter sits between shared internal agents and downstream APIs, keeping credentials in its vault and evaluating default-deny, per-parameter policies against the end user each request is made for, with approval for risky calls and audit logs. In proxy mode the token never reaches your agent process; the team also published an OpenClaw plugin (docs).
Released Oct 21 as MIT source, LayerFS mounts a full workspace per agent without copying the base, commits each step into one SQLite store, and lets agents branch, rewind, or merge, refusing same file clashes unless a .lww rule says the newest edit wins. For now it runs through the dsh layerfs plugin for DeepSeek Harness, and the README warns the store has no crash or power loss durability (docs)…
Released Oct 21, GitLab 19.5.1, 19.4.3, 19.3.6, 19.2.9 and backports down to 18.11.13 fix CVE 2026 110264, an integer overflow when compiling a crafted regular expression that could let an unauthenticated attacker run code on the server. It follows the Oct 12 CI/CD regex fix (CVE 2026 97229); GitLab.com is already patched, so self managed instances, including ones your agents or runners connect to, should upgrade now…
Released Oct 21, corridor argos 1 is a Qwen3.5 9B fine tune that reads a coding agent's plan and returns the project specific security requirements that apply, such as which auth middleware or upload helper to use, feeding Corridor's Agent Steering. On Corridor's own SecReT benchmark it scored 0.655 micro F1, the best of 14 models tested, with the lowest mean time to first token at 740 ms…
Released Oct 20 under Apache 2.0, DeepInfer runs DeepSeek V4.1 Flash on NVIDIA SM100 GPUs or Huawei Ascend 950 NPUs with DeepSeek's own kernels, expert parallelism, speculative decoding, deterministic sampling, and structured outputs. It's offline batch inference only for now: KV cache management, prefill/decode disaggregation, and load balancing stay internal (The New Stack)…
Merged by Linus Torvalds on Oct 21, the docs 7.4 pull adds a top level AGENTS.md symlink to the kernel README so agents find the contribution rules, and removes the Assisted by: attribution requirement and its checkpatch handling, as agreed at the Maintainers Summit. AI agents still must not add Signed off by ; only the human submitter certifies the patch (pull request)…
Spotted something we missed? Start a thread.