开发者工具

GitHub Copilot local sandboxing, Agensh, CliffCompaction, SWE-Serve, and enterprise OpenTelemetry support in the Copilot app.

Claude Opus 5.5 agent API compatibility, RRSI controls for harness overfitting, Harness-Zero behavior distillation, and Strands harness defaults.

本期收录 Claude Opus 5.5 的 Agent API 兼容变化、RRSI 的 Harness 过拟合控制、Harness-Zero 的行为蒸馏，以及 Strands harness 的默认策略。

Plugin4Shell exposes a supply-chain gap: a pinned SHA records the expected version, but installers must also verify the actual HEAD after checkout.

Plugin4Shell 暴露了一个供应链边界：固定 SHA 只写下期望版本，安装器还必须在 checkout 后验证真实 HEAD。本文结合 Git 文档、本地无害复现和 GitHub 分支限制解释机制。

Vercel Labs json-render defines components, actions, and data bindings before generating schema-constrained JSON that can be checked and replayed.

Vercel Labs 的 json-render 先定义组件、动作和数据绑定目录，再让模型生成符合 schema 的 JSON。生成式 UI 的边界因此可以验证、记录和回放。

LangGraph human-approval schemas, Deep Agents safeguards for parallel writes to the same file, and tighter OAuth boundaries in the MCP Ruby SDK.

本期收录 LangGraph 人工审批结构约束、Deep Agents 同文件并行写保护，以及 MCP Ruby SDK OAuth 边界收紧。

OpenAI Agents SDK runtime-boundary fixes, stage-aware memory retrieval in AdaRepair-Mem, and static configuration checks with Agent Lint.

本期收录 OpenAI Agents SDK 运行时边界修复、AdaRepair-Mem 阶段化记忆检索，以及 Agent Lint 静态配置检查。

Android Bench 2.0 keeps pass rate as a hard gate and adds completion rate to diagnose progress and unfinished acceptance requirements.