Blog

Deep-dive guides on AI agents, agent orchestration, MCP, and developer tooling.

28 posts found

AI Agents

MCP vs. A2A: Why Two "Agent Protocols" Solve Completely Different Problems

MCP and A2A keep getting lumped together as competing agent protocols, but they standardize different layers entirely: one connects an agent to its own tools, the other connects independent agents across a trust boundary. Here's where that line actually falls, and when you need both, one, or neither.

October 26, 2026 · 10 min read
AI Agents

How Computer-Use Agents Actually See and Click: Screenshots, Accessibility Trees, and the Grounding Problem

The hard part of a computer-use agent isn't deciding to click "submit"; it's turning that decision into a real coordinate or element reference. Here's how pixel grounding and accessibility-tree grounding actually differ, and where each one breaks.

October 24, 2026 · 7 min read
LLM Engineering

Prompt Versioning and Regression Testing: Why Prompts Need a CI Pipeline Too

A one-line system prompt tweak that 'fixes' one failure case can silently break three others. Here's how teams are starting to treat prompts as versioned, tested artifacts instead of strings in a config file.

October 14, 2026 · 9 min read
AI Agents

Context Engineering: What Changed When Prompt Engineering Outgrew the Prompt

Prompt engineering asked what to say to the model. Context engineering asks what the model actually needs to see, in what order, and what gets thrown away to make room for it: the discipline agents forced into existence.

October 13, 2026 · 7 min read
MCP

MCP Resources: The Primitive Almost No Server Implements

MCP defines three primitives (tools, resources, and prompts), but nearly every server in the wild only implements the first. Here's what resources actually do, why client support lagged, and where skipping them leaves your agent acting on stale context.

October 12, 2026 · 9 min read
LLM Engineering

Claude Haiku 4.5 vs. GPT-5.4 Mini vs. Gemini 3.8 Flash: The Economics of Cheap Inference

The three labs' cheap-tier models now sit within a quarter-dollar of each other per million input tokens, so the real differences are in release cadence, cache economics, and how much of your "cheap" budget goes to invisible reasoning tokens.

October 5, 2026 · 6 min read
MCP

MCP Elicitation: Form Mode, URL Mode, and the Phishing Attack Built Into Its Design

MCP's elicitation feature lets a server pause a tool call to ask the human for more input. The protocol splits it into two modes with very different trust models, one of which exists specifically to stop an account-takeover attack.

October 3, 2026 · 11 min read
AI Agents

How Background Coding Agents Actually Work: Sandboxes, Diffs, and the PR Review Bottleneck

Codex, Copilot's cloud agent, Cursor's cloud agents, Jules, Devin, and cloud Claude Code sessions all follow the same five-stage pipeline. The differences that matter are in sandbox scope, repo access, and where the real trust boundary sits.

September 18, 2026 · 11 min read
MCP

MCP Sampling: How a Server Asks the Client's Model to Think for It

Sampling is the MCP primitive that inverts the relationship, letting a server without its own model borrow the client's LLM through a two-gate approval flow. Here is how it works, and why the 2026-07-28 spec revision deprecated it.

September 11, 2026 · 9 min read
AI Agents

Letta, Mem0, and LangGraph Stores: Three Different Answers to Where Agent Memory Lives

Letta, Mem0, and LangGraph checkpointers all get called "agent memory," but they put the decision to remember or forget in three different places: an agent runtime, an external service, or your own application code.

September 4, 2026 · 8 min read
Evals & Benchmarks

LLM-as-Judge Evaluations Have Five Known Biases: Here's How to Design Around Them

Position bias, verbosity bias, and self-preference bias can silently distort agent eval scores. Here is how to design a judge pipeline that resists them, plus why trajectory evaluation catches what outcome scoring misses.

August 25, 2026 · 10 min read
Applied AI

Where AI Actually Works in Cybersecurity: SOC Copilots, Anomaly Detection, and the Autonomous Response Gap

AI has clearly won in security alert triage and code scanning, is mature but unglamorous in behavioral anomaly detection, and is still narrowly scoped in autonomous incident response. Here is why the adoption curve breaks exactly where human sign-off stops.

August 20, 2026 · 7 min read
AI Agents

Most Tool-Calling Failures Are Schema Failures, Not Model Failures

When an LLM agent calls the wrong tool or sends malformed arguments, the postmortem usually blames the model. The actual defect is almost always in the JSON Schema the tool was registered with.

August 19, 2026 · 9 min read
AI Agents

Tracing an Agent Loop: What OpenTelemetry's GenAI Conventions Actually Standardize

Agent traces have a runtime-decided shape, token-based cost, and cross-process tool hops that conventional APM was never built for. Here is what OpenTelemetry's gen_ai.* conventions actually pin down, and where tracing an agent loop still breaks in production.

August 8, 2026 · 10 min read
MCP

MCP Authorization: How OAuth 2.1 Actually Secures a Remote MCP Server

MCP started as a trusted local subprocess with no auth story at all. Its authorization spec bolts on OAuth 2.1, PKCE, and resource indicators; here is what each piece actually prevents, including the token-passthrough bug that keeps showing up in early implementations.

August 5, 2026 · 9 min read
Evals & Benchmarks

What SWE-bench Actually Measures vs. What the Leaderboard Tells You

SWE-bench is the most credible agentic coding benchmark available, but its leaderboard number answers a narrower question than most headlines imply. Here is exactly what it does and does not test.

August 3, 2026 · 9 min read
Applied AI

Where AI Actually Works in Scientific Research: Protein Design, Materials Discovery, and the GNoME Lesson

AlphaFold's Nobel Prize and GNoME's 2.2 million materials both got real headlines, but the honest story is about candidate generation, not discovery, and the gap between those two claims is where the hype lives.

August 2, 2026 · 7 min read
LLM Engineering

Claude Sonnet 5 vs. GPT-5.6 vs. Gemini 3.1 Pro: What the Pricing Table Doesn't Tell You

A side-by-side look at pricing, context windows, and tiering across the three frontier model families as of August 2026, and why the spec sheet undersells how differently they actually behave in agent loops.

August 1, 2026 · 7 min read
Applied AI

Where AI Actually Works in Customer Support: Deflection, Copilots, and the Outcome-Pricing Bet

Klarna's AI assistant did the work of 700 agents, then the company started rehiring humans. The real story is that support AI succeeds in narrow, policy-bounded tiers and breaks hard the moment it touches judgment calls and liability.

July 28, 2026 · 6 min read
LLM Engineering

Prompt Engineering for Agents Is a Different Discipline Than Prompt Engineering for Chat

In agent systems, instructions live across four surfaces (system prompt, tool schemas, tool results, and few-shot text), not one. Most prompt debugging still only looks at the first.

July 7, 2026 · 7 min read
AI Agents

Context Compaction: How Long-Running Agents Avoid Drowning in Their Own History

Long-running agents rarely fail because they run out of context window; they fail because nobody designed what happens to attention quality once the transcript outgrows what the model can usefully weigh. Here is how tiered compaction, tool-output pruning, and sub-agent isolation actually work.

July 6, 2026 · 7 min read
LLM Engineering

Naive RAG, Agentic RAG, and GraphRAG: What Actually Changes Architecturally

RAG is not one architecture; it is three structurally different systems with different costs and failure modes. Here is what actually changes between naive, agentic, and graph-based retrieval, and how to pick without over-building.

July 5, 2026 · 7 min read
AI Agents

Pipeline, Supervisor, or Mesh: Where Each Multi-Agent Orchestration Pattern Actually Breaks

The three dominant multi-agent orchestration topologies each fail in a different, predictable way once you move past the demo. Here is how to pick one based on where your task actually breaks, not which pattern sounds more sophisticated.

July 4, 2026 · 8 min read
LLM Engineering

KV Cache Reuse and the Hidden Latency Budget of Agent Loops

Agent latency is usually a prompt-construction problem in disguise: prefix caching, continuous batching, and tool-call structure determine how much of your context gets reprocessed on every turn.

July 2, 2026 · 8 min read
Security

The Trust Boundary Problem: Why Tool-Calling Agents Need to Treat Tool Output as Untrusted Input

Most agent security advice targets prompt injection at the wrong layer. The real fix is architectural: separate untrusted tool output from privileged context, scope tool capabilities narrowly, and gate side-effecting actions behind confirmation.

July 2, 2026 · 8 min read
Evals & Benchmarks

Why Your Agent Benchmark Score Doesn't Predict Production Reliability

Benchmark leaderboards measure task completion under lab conditions, not the compounding step failures that sink agents in production. Here is the math, and a blueprint for an eval harness that actually predicts reliability.

July 1, 2026 · 7 min read
AI Agents

Agent Memory Isn't RAG: Why Vector Retrieval Falls Apart for Stateful Agents

Vector similarity search answers what text is topically related, but long-running agents need to know what is true right now. Conflating the two is why agents keep resurrecting overturned decisions.

June 30, 2026 · 7 min read
MCP

What Actually Happens Inside an MCP Tool Call

A wire-level look at the Model Context Protocol: capability negotiation, tool discovery, transport tradeoffs, and the context-budget mistakes that quietly degrade agent reliability.

June 29, 2026 · 8 min read

New posts by email

One email when a new post goes up. No other mail; unsubscribe in one click.

We store your email only to send new posts. See the privacy policy.