OSSstepfun-ai/Step-3.5-Flash — Open-Source 196B MoE Model (11B Active)GitHub·high signalXBlueskyLinkedInCopy linkStepFun sparse MoE: 196B total, 11B active per token. 74.4% SWE-bench, 97.3% AIME 2025, 100-300 tok/s. Apache 2.0. INT4 GGUF for local inference. 1.4K stars, trending on HN with 224 points.SourceSource pageGitHub↳ Follow the threadStack layer / Threat patternHeadroom 0.36.4 Fixes an Upstream-Validation Hole in Its Agent ProxyGitHubStack layer / Threat patterngoose v1.47.0 is mostly a resource-bounding security pass, and quietly stops paying the prompt-cache write premium on one-shot fast-model callsGitHubStack layer / Threat patternSimon Willison ships llm-openrouter 0.7 with three server-side tools: Shell, WebFetch and WebSearchGitHub (simonw/llm-openrouter)Stack layer / Threat patternHydra's instantiate() gets a CVE for code execution from untrusted configGitHub Security AdvisoriesPolicy dependency / Stack layerFreeToken Serves 290B+ Parameter MoE Models on RTX 30/40/50 Consumer Cards Using CPU-GPU Co-ExecutionGitHub / Hacker NewsStack layer / Threat patternGoose 1.47.0 extracts the agent loop into a goose-agent crate as an unrolled state machineGitHub (block/goose)Stack layer / Threat patternAnthropic's community plugin marketplace goes live as a nightly-synced read-only mirror you add with one claude commandGitHubPolicy dependency / Stack layerMasterAgent builds agents that run entirely on-device with sub-100ms latency on Qualcomm NPUsGitHub