After a week of Kimi K3 benchmark wins and open-weight momentum, Anthropic blinked: an official post said Fable 5 will be folded into every Max and Team Premium plan from July 20 (at 50% of limits), with Pro and Team Standard keeping it via usage credits. The timing wasn't lost on anyone — the reply guys read it as a direct response to competitive pressure.

The receipts piled up: Artificial Analysis put K3 at #5 on the Coding Agent Index, ahead of Opus 4.8 and in the cheap “most attractive” quadrant, while K3 topped SpreadsheetBench 2 over every closed model. One widely-shared line called it Kimi forcing Anthropic's hand, tinygrad's account called K3 “Fable tier”, Bilawal Sidhu did the limit math, and a louder faction openly priced out cancelling Claude for Kimi.

The most convincing agent demos of the day weren't benchmarks — they were people handing Codex their actual computer. Rhys Sullivan gave it a one-line goal to migrate every 2FA seed out of Google Authenticator into 1Password as passkeys, and it just did it.

Ethan Mollick had it install Blender from scratch and model a 3D otter, Peter Steinberger watched it wrangle the macOS file picker to upload a PR image, and Steve Ruiz found it strong on real codebases. With OpenAI's Tibo calling GPT-5.6 Sol “extremely good” and resetting Codex limits the same day, browser-and-desktop control has crossed from party trick into delegated work.

A pre-authentication RCE in WordPress Core lit up security Twitter. Searchlight Cyber and Assetnote disclosed the “wp2shell” chain (CVE-2026-63030, plus an author__not_in SQLi, CVE-2026-60137) affecting stock WordPress 6.9.0–6.9.4 and 7.0.0–7.0.1 — no plugins, no auth, no preconditions, exploitable by an anonymous visitor, which is roughly the worst case for the internet's most-deployed CMS.

Within hours there were public PoC repos and a non-destructive detector with a Docker lab, while Assetnote said they're holding the full RCE writeup until there's proof of in-the-wild exploitation. The AI-offense detail: one researcher had GLM-5.2 build a working RCE exploit in about twenty minutes. If you run WordPress, patch now.

With open coding models suddenly competitive, the harness — the loop that wraps a model with planning, tools, memory and safety — became the thing people wanted to own. Akshay Pachaar shipped a fully open-source Claude Code-style harness and walked through why the model only needs to pick the next step.

Open Interpreter reimplemented Kimi K3's harness in Rust and briefly topped GitHub's Rust trending, an “agentos” project gave each agent its own in-process OS kernel, Fusion shipped a phone-friendly multi-agent orchestrator, and someone rebuilt the Claude Code / Codex / Grok UIs as ShadCN components. The center of gravity is shifting from “which model” to “which harness.”

Gemma 4 launched to a lukewarm local reception a couple of weeks ago; this week it quietly became something people actually run. One tester fit the updated Gemma 4 31B dense model onto a single RTX 4090 with a 190,000-token context at 33 tokens/second — the kind of spec that used to need a multi-GPU rig.

Google pushed tool-calling and reliability fixes, Unsloth immediately recompiled its GGUF/MLX/NVFP4 quants, and Ollama 0.32.1 made its tool calls reliable enough for coding agents. Amid a week dominated by trillion-parameter cloud models, a genuinely good ~30B that fits on one consumer card is the more useful trend for a lot of people.

AI video had a real capability day rather than another highlight reel. Kling 3 dropped and drew “biggest leap I've seen” reactions for its physics, camera movement and shot-to-shot consistency.

Meanwhile Runway published a human eval putting Runway Agent first across all three pillars, the workflow layer kept opening up as Higgsfield open-sourced the recipes behind its best productions, and practitioners shared cheap, character-consistent Seedance 2.0 pipelines. The gains now are in controllable, repeatable production, not one-off clips.

OpenShip launched as an open-source platform for building, deploying, operating and scaling applications on your own infrastructure — a single stack meant to replace managed deploy services and infrastructure workflows. It struck a nerve with the self-hosting crowd, and pairs naturally with today's Sandboxd and Wardnet as part of a “run it yourself” wave.

NVIDIA released SkillSpector, an open-source scanner that checks AI “skills” for credential theft, data leaks, prompt injection and vulnerable dependencies before you install them — and it scans Claude Code, Codex and Gemini skills. As skills become a real install-and-run ecosystem, it's a timely reminder that they're also an attack surface.