Two weeks after Moonshot released Kimi K3's weights, the conversation moved entirely to whether you can actually run the 2.8T-parameter model — and increasingly, you can. Unsloth's 1-bit dynamic quant keeps ~78.9% accuracy while shrinking it from 1.56TB to 594GB (2-bit reaches ~90%), enough for a Mac Studio or DGX Station.

one tester ran the full 1.6TB build on a 128GB laptop, vLLM clocked 464 tok/s single-stream, and the capability flex of the day was Cline letting K3 recursively improve its own agent harness from 77.5% to 88.8% in 17 hours. The business news matched the momentum: Moonshot raised $3.5B at a $35B valuation.

The open-weights fight stopped being about a signed letter and started showing up in products. Perplexity's Aravind Srinivas tied it to the Hugging Face breach — closed models refused to help with live forensics, so responders fell back on open weights.

Replit put open-weight support into its product, Cline signed the letter, and the recurring argument was a security one: with open weights, the defender has the same model as the attacker. The backdrop pressure was financial too, with claims Anthropic's implied valuation has softened since K3 shipped.

Computer-use agents shifted from party trick to daily driver, anchored by Microsoft open-sourcing Fara 1.5 on Hugging Face — a family of 4B/9B/27B computer-use models that actually drive a real browser.

Around it, practitioners posted workflow proof rather than demos: Codex computer-use compressing hours of clicking into a day, Hermes agent desktop as a genuinely usable agentic app, and browser agents baked into testing tools like Pest v5. The through-line: "the agent uses your computer" is becoming something people leave running, not something they screenshot.

The security feed was unusually actionable. A public PoC landed for CVE-2026-42533, chaining an nginx memory leak and heap overflow to bypass ASLR and reach RCE.

A fresh Gitea RCE and a critical Rails RCE via Active Storage followed. The agent-era items were just as concrete: a claim that Opus 5 jailbreaks trivially, ProPublica reporting Mythos finds bugs faster than vendors patch, and AgentHound, an offensive framework aimed at AI-agent infrastructure.

If last month's Claude Code talking point was "skills," this week's was "graph engineering": modeling an agent's work as a dependency graph of sub-tasks instead of one linear loop. The framing came straight out of Anthropic's own cookbook.

Two Anthropic engineers extended Karpathy's canonical agent loop, with practitioners claiming graph-structured workflows let Claude Code chew through days of work in an hour. It rhymed with Andrew Ng's note that an older model in a good agentic workflow beats a newer model answering in one shot — the harness, again, mattering more than the weights.

One standalone item worth flagging: OpenAI released the Codex Security CLI as open source (Hacker News found it before the announcement) — a command-line tool to scan repositories for vulnerabilities and verify that security fixes actually hold. Notable both as a free standalone tool and as OpenAI shipping defensive tooling right as the Hugging Face fallout dominates the security conversation.