Lilith · selected stories
What is actually happening in AI. Selected stories, context and opinion without the promotional noise.
Atom feed ↗Simon Willison highlighted Boris Mann's point that saying "11 AI agents" is meaningless by itself. It says about as much as counting spreadsheets or browser tabs. The useful questions are outcomes, responsibility boundaries, workflow, handoff, observability, failure handling, permissions and human review.
OpenAI says Gartner named Codex a Leader in enterprise AI coding agents. For companies, this is mainly a procurement and governance signal, not proof of technical superiority.
OpenAI, Thrive Holdings and Crete built Tax AI for more than 30 accounting firms. The pilot processed 7,000 returns, saves about one third of practitioner time and improved sharply within six weeks through a feedback loop powered by Codex.
Warp is positioning the terminal as an agentic development environment rather than a command line wrapper. By open sourcing its client with OpenAI as a founding sponsor and leaning on GPT-5.5, it wants developers to set objectives and review outcomes while agents plan, code, test and open pull requests.
PromptArmor researchers demonstrated an attack chain in which Microsoft Copilot Cowork can help exfiltrate Microsoft 365 files through prompt injection. This is not only a product bug, but a warning for any agentic system with delegated permissions.
OpenAI and Dell want to bring Codex closer to enterprise data, hybrid infrastructure, and on-prem environments. Less flashy than a demo, much more important for enterprise adoption.
OpenAI is moving Education for Countries toward national AI education programs. This is not only about ChatGPT access, but about shaping infrastructure, training, and operating habits around AI in the public sector.
OpenAI published lessons from Parameter Golf: more than 1,000 participants, over 2,000 submissions, a 16 MB artifact limit, and 10 minutes of training on 8x H100. The important part is not only model compression. AI coding agents changed the tempo of research iteration.
AgentMail provides real email inbox infrastructure for AI agents: inbox creation, sending, receiving, threads, attachments, webhooks, WebSockets, search, custom domains and MCP integration. The company announced a 6M USD seed round led by General Catalyst with Y Combinator participation.
Simon Willison tested Claude Code for web: Anthropic wrapped the local Claude Code experience in a hosted sandbox and made it usable from web and mobile. The important shift is not a more capable model, but a workflow change: coding agents become more valuable when they can run asynchronously and safely away from your laptop.
DeepMind introduced AlphaEvolve as a Gemini-powered evolutionary loop that automatically discovers better algorithms. Concrete production results: 30 % fewer errors in genomics, 20 % lower write amplification for Spanner, Klarna doubled transformer training speed.
OpenAI details how Codex runs in isolated environments: per-repo sandboxes, network restrictions, approval gates, and agent-native telemetry for safe enterprise adoption.
Cisco and OpenAI describe deploying Codex as an agent in enterprise engineering workflows: build automation, defect fixes, and a shift toward agent-native development.
The GPT-5.1-Codex-Max system card describes two safety layers: model-level safety training and prompt injection protection, and product-level sandboxing with configurable network access.
Google DeepMind released Gemini 2.5 Computer Use in preview: a specialized model for agents that drive user interfaces. Unlike general-purpose Gemini 2.5 Pro, this model was trained specifically for screen interaction, not just reasoning about it.
IBM Research published VAKRA: an agent benchmark with 8,000+ real APIs across 62 domains. It evaluates full execution trajectories, not just final answers. Results show where systems break: tool selection, argument specification, and multi-source queries with policy constraints.
James Shore states the uncomfortable math of coding agents: if an agent doubles output but maintenance costs stay flat, the team did not gain speed, it doubled its technical debt burden.
Latent Space AINews observes a shift they call "breaking containment": coding agents like Codex and Claude are no longer just tools for writing code but are expanding into knowledge work and creative workflows broadly.
Simon Willison highlighted two new papers on agent prompt injection. Meta's Rule of Two states that a system is safe only when it has at most two of three properties simultaneously: accepting untrusted input, accessing sensitive data, and changing state or communicating externally. A second paper from researchers at OpenAI, Anthropic, and DeepMind showed that 12 published defenses were bypassed by adaptive attacks with over 90 % success rate.
Simon Willison describes a fire-and-forget workflow with Claude Code, Codex and other coding agents: pose a research question, the agent works on a server and files a pull request. Code is proof of feasibility, not just text.
