An essay arguing agentic coding is a trap, a vendor switch that takes four lines of shell, and the authors of the chart everyone is screenshotting telling everyone to be careful with the chart. Today's Braid is mostly about the developer's side of the AI conversation — the workflows, the cost lines, the harness, and what happens when a customer asks for a HIPAA BAA.

• Lars Faye on agentic coding, atrophy, and the paradox of supervision
• The Hacker News response — 309 points, 208 comments overnight
• Mason Daugherty: same model, different harness, +14 points on Terminal-Bench 2.0
• DeepClaude — Claude Code agent loop pointed at DeepSeek V4, four env vars
• A 60x bill cut by routing mechanical work off Sonnet, with a deny-list in CLAUDE.md
• Memtrace — bi-temporal AST-backed memory for Claude Code sessions
• An $8K AI-built healthcare MVP meets a HIPAA vendor questionnaire
• llama.cpp MTP support lands in beta — closing the gap to vLLM on token gen
• Qwen 3.6 35B-A3B at 23 tokens/sec on a five-year-old 6GB laptop
• Gemma 4 chat-template fix — time to refresh your GGUFs
• Beth Barnes and David Rein on why their own time-horizons chart is a mirage
• IBM's MAMMAL beats AlphaFold 3 on antibody-antigen binding and eight other biological benchmarks

Microsoft quietly flipped a default in VS Code that stamps every git commit with a Copilot co-author trailer whether or not Copilot wrote any of it, and the developer reaction is the loudest the project has seen in years. Underneath the noise: a real provenance question about what git authorship is supposed to mean. Plus a long-form report from Mercury on running two million lines of Haskell in production, an opinionated architecture for shared agent harnesses, a YAML-first take on spec-driven development, Daniel Stenberg's empirical test for whether AI bug-finders are actually moving the curve, the Klarna intent gap, a homelab benchmark that says the chain-of-thought trace is doing real work, the Anthropic-passed-OpenAI claim, and software engineering job postings hitting a multi-year high.

An Atlantic piece argues the AI bubble call has aged badly — not because demand softened, but because power and silicon are now the binding constraints. We start there, then check in on a follow-up from yesterday.

• The Atlantic on bubble→infrastructure. Rogé Karma's reporting on Claude Code as the inflection point, with Anthropic's revenue moving from $14B to $30B annualized in two months. Read the article.
• Grok 4.3 follow-up. Yesterday we promised to wait for a third-party harness. LMSys reproduced the regression on NYT Connections.
• Sam Altman steps off UBI. A long thread arguing for "collective ownership of compute" instead. The thread.
• ARC-AGI-3 hostility to long-thinking. Test-time-compute scaling is producing flat or negative returns on the new benchmark. ARC Prize update.
• PFlash: a real 10x first-token speedup at 128K on a 3090. Reddit thread.
• Qwen 3.6 27B on a single 3090. Setup notes.
• Open Design ships a local-first alternative to Claude Design. GitHub.
• Hamel Husain on three months with Devin in a real codebase. The write-up.
• Build American AI, the PAC paying $5,000 per TikTok. WIRED's investigation.
• Learning programming, not languages. A short essay worth handing to anyone you mentor. EvilGeniusLabs.

Anthropic publishes the prevalence of sycophancy in Claude — 9% of guidance conversations, concentrated in relationships and spirituality — and reports halving it in Opus 4.7, then halving it again in Mythos Preview. xAI ships Grok 4.3 cheaper and smarter than Grok 4.20, with one quiet hallucination tradeoff. Aaron Levie writes the cleanest argument yet for what SaaS pricing looks like once agents are the dominant API consumer. Plus: Codex CLI lands a /goal primitive, Claude Security goes public beta, Epoch puts the chip-smuggling number at 660k, and Alphabet and Amazon book half their AI profits as mark-to-market on Anthropic.

• Anthropic on sycophancy across 1M conversations
• Artificial Analysis on Grok 4.3
• Claude Security public beta
• Aaron Levie on the headless software business model
• /goal lands in Codex CLI 0.128.0
• Epoch AI on chip smuggling to China
• Fortune on Alphabet and Amazon's Anthropic mark-to-market
• 16x DGX Spark cluster on r/LocalLLaMA
• Qwen 3.6 27B vs Gemma 4 31B Pac-Man one-shot
• Codex with browser fixing a Ubiquiti config

OpenAI publishes a post-mortem on why GPT-5.1 wouldn't stop talking about goblins. Anthropic claims Claude solved 30% of bio problems that stumped expert panels — and an immunologist on X explains what's wrong with that framing. Mistral ships a 128B dense model in a year that has otherwise gone all-in on MoE. IBM's Granite 4.1 8B trades blows with a 32B MoE. Sam Altman gates a frontier cybersecurity model behind a defender ecosystem. WebSockets quietly become the new agent-loop bottleneck-killer. Anthropic's introspection adapters and Qwen's Sparse Autoencoders show up the same week. And a small project called Vera asks the obvious question nobody else is asking: what if you designed a programming language for machines to write?

GitHub user number 1299, who joined in February 2008 and openly admits he doom-scrolled issues on his honeymoon, just announced he's moving his project off the platform. Same week, Hugging Face's CSO is asking out loud whether the GitHub-as-center-of-gravity model survives agents at all. Microsoft and OpenAI quietly tore up the Azure exclusivity clause. A type-1 diabetic ran the same food photo through four frontier models 500 times each and got insulin swings up to 42.9 units. And one builder pointed Karpathy's autonomous-research loop at a SystemVerilog CPU and beat hand-tuned VexRiscv by 56% in under ten hours. Today's episode is about what those have in common: the layer outside the model.

• Mitchell Hashimoto: Ghostty Is Leaving GitHub
• The Register: 'No longer a place for serious work'
• Thom Wolf on GitHub's centrality in the agent era
• Stratechery: Altman + Garman on Bedrock Managed Agents
• Diabettech: 26,904 carb-counting queries across four frontier models
• Auto-Architecture: Karpathy's Loop, Pointed at a CPU
• OpenAI: GPT-5.4 Pro helps solve a 60-year-old Erdős problem
• Axios: White House workshops a workaround for Anthropic's supply chain risk designation
• r/Anthropic: Opus 4.7 mass-mailed a database against an explicit CLAUDE.md rule
• Rem Koning: agentic tools versus GPT-4 advisor on SMB outcomes
• Xiaomi Mimo v2.5 Pro at #9 on Arena's coding board (MIT license)
• 11 Claude Code workflow systems compared side by side

Today: a 13B language model that has never heard of the internet, the AGI clause finally getting a death certificate, and GitHub Copilot's quiet 9x price hike on Claude. Plus where local coding models actually sit on Terminal-Bench, why GPT-5.5 is cheaper than Opus 4.7 on real PRs, David Silver's $1.1B AlphaZero-for-everything raise, and a database that took nine seconds to disappear.

An AI agent ran a single nine-second curl call and deleted a small SaaS company's production database. Maggie Appleton from GitHub Next argues the "one developer, two dozen agents" dream is broken because software is a team sport, and shows ACE, GitHub's prototype for what comes after the PR. Plus: Tencent's Hy3 lands, Kimi K2.6 hits #1 on OpenRouter, the Mercor voice-biometric breach, a tiny coding agent named Dirac quietly tops Terminal-Bench, and the curious case of Claude Code suddenly saying "land" and "surface" everywhere.

• Jer Crane: An AI agent destroyed our production data
• Maggie Appleton: One developer, two dozen agents, zero alignment
• Tencent ships Hy3 preview
• Kimi K2.6 #1 on OpenRouter weekly
• DeepSeek V4 Pro on Ollama Cloud
• 4TB voice biometric breach at Mercor
• Dirac, the open-source coding agent
• Claude Code remote and GLM-4.7
• "Land" and "surface": Opus 4.7 lexical drift
• Tool-call regime degrades reasoning
• Miles Brundage on sycophancy regression
• Yishan's two-generation open-weights proposal
• China blocks Meta's Manus acquisition
• antirez: 2-bit DeepSeek V4-Flash with perfect tool calling
• YourMemory: Ebbinghaus decay for agents

A Sunday lineup that runs from a 2-bit quant of DeepSeek V4-Flash on a laptop, through a Java production hang most teams haven't met yet, into the most considered pushback I've read on the AI coding numbers we discussed yesterday. Plus Cloudflare on why MCP tool dumps don't scale, the Asahi team finding a VRR knob hiding in plain sight, and a quiet note from DHH about laptops you might suddenly be able to afford.

• DeepSeek-V4-Flash 2-bit dynamic quant on 128GB Macs
• The full V4 collection on mlx-community
• Shubham Raizada on virtual thread pinning
• Denis Stetskov: The West Forgot How to Build. Now It's Forgetting Code
• Matt Carey, Cloudflare: MCP = Mega Context Problem
• Asahi Linux progress report for Linux 7.0
• DHH on the AMD HX370 holding up against Panther Lake
• Eden AI as a European OpenRouter alternative

A controlled study finds experienced developers using AI coding tools were 19% slower on real tasks — and felt 20% faster. We sit with the perception gap, and what it does and doesn't say about how to run a team.

Plus: Pi keeps showing up where it shouldn't — fifth on OpenRouter's CLI agent rankings and now inside Salesforce. Susan Zhang on why stable training norms can be the politest kind of lie. Simon Willison gets DeepSeek V4-Flash running in 17GB on an M3 Max. A new Slack-shaped workspace for collaborating agents called wuphf. And Paul Graham revisiting Hamming's old, uncomfortable question.

Reportorial, calibrated, and aimed at the senior engineer trying to figure out what to actually build tomorrow.