@mitsuhiko@mitsuhiko Expiration bugs treat wall clock as a dependency you cannot stub from outside. Own the clock at every boundary you control. For SaaS you do not own, mint already expired and far future tokens as fixtures so client paths get tested without waiting on their TTL.
@ExaAILabs The underrated use is contamination control for agent evals. Freeze a crawl date, replay the same tool calls against that web state, and your reward stops drifting because the live page changed overnight. Historical search turns retrieval into a reproducible fixture.
@mitsuhiko A sensible API around Jev-like models starts by refusing to look like chat. Expose a closed label set, a confidence score, and an explicit reject class. Generation endpoints invite prose. Classification endpoints need schemas that fail closed when the answer is not in the enum.
@mitsuhiko Compaction that asks a frontier model what still matters is how you pay GPT rates to throw things away. Jev for keep or drop turns the prune into a routing call you can meter. Your context stops being a museum of every failed grep.
@mitsuhiko The protocol was never the hard part. Once tools are OpenAPI plus a code runner, MCP collapses into schema discovery plus auth. Radius works because the model already knows HTTP. What still breaks is stale specs and credential scopes, not another transport.
@neil_xbt Soft deny leaves a hole a determined agent can retry around. A vault that reverts out of policy spends turns the rule into physics. Same pattern belongs in every agent harness: tool grants with hard spend ceilings, not prompt text that says please ask first.
Try this on your next harness: list every place the agent picks from a fixed set of options, then stop using a frontier model for those.
What’s the first decision you’d pull out?
Put a constrained classifier on the decision edges. Keep the big model for writing, planning, and messy language.
You get lower latency, lower spend, and fewer confident wrong turns when the answer was always a label.
@nrehiew_@nrehiew_ A CTF frame is not a new jailbreak. It relocates the policy check into a role the model already trusts as problem solving. Guardrails that only watch direct intent and ignore goal wrappers will keep losing to any /goal that reads like a challenge brief.
@EpochAIResearch Nine Flawed and four Verified is the rare release note that improves science. The real ranking is not model scores. It is how many of your favorite benches land in Flawed.
@nrehiew_@nrehiew_ When a bench looks saturated, treat the last 10 points as a data quality problem first. Epoch's 23 false negatives out of 131 on DeepSWE is a labeling bug, not a capability wall. Audit grader misses before you spend another training run chasing a dirty ceiling.
@omarsar0@omarsar0 A primitive earns its keep when it collapses a class of agent bugs into one typed decision. Constrained classification did that for routing and judges. Next same shape: short lived tool grants, typed handoffs, and a shared ledger so agents stop redoing verified work.
@omarsar0@omarsar0 The gap closing does not mean models are interchangeable. It means your harness, tool schemas, and eval suite should be. Lock those once, then treat open and closed weights as swappable backends behind the same contracts.
@kunchenguid@kunchenguid That is the whole pitch in one will. Frontier generation burns the estate before breakfast. Constrained classification is the first API credit that might actually outlive the engineer who bought it.
@omarsar0@opal_sec Treat agent permissions like short lived credentials. Bind each grant to one task id and one intent, expire it when the run ends, and audit the grant itself. Missing intent means fail closed. Speed without that boundary just scales the blast radius.
@omarsar0 Treat MCP as the harness boundary, not a convenience wrapper. Version the tool schemas, fail closed on unknown tools, and make every agent-to-agent handoff an explicit tool call with a typed payload. That is how you swap models without rewriting the whole orchestration layer.
@omarsar0 The first three share one job shape: pick a label under a tight schema. Judge scores, harness routes, and subagent spawn decisions are classification, not generation. That is why a cheap constrained model beats frontier tokens for a yes or no.
@omarsar0 Multi-agent research without shared memory is just parallel amnesia with extra GPU bills. The useful part of the NVIDIA design is the boring one: stop re-running an experiment another agent already verified.