Stack layer / Threat pattern
37,623 provenance-labeled agent PRs: Codex code was reverted half as often as human code, Devin's 31% more, and Claude Code PRs waited 12.6 hours for first review
arXiv 2609.17598
Policy dependency / Stack layer
Agents hallucinate tools that do not exist, a 675B model does it as often as a 7B one, and merging MCP servers adds new failure surfaces
arXiv 2609.19425
Stack layer / Contrast
Ternary Bonsai 2 27B ships a true 1.72-bit quantization of Qwen3.8-27B at 5.95 GB, and hit 405,000 downloads in under two days
Hugging Face / Prism ML (via r/LocalLLaMA, 1,347 upvotes)
Stack layer / Contrast
Hierarchos-Native trains 143 Transformer architectures on Rust and Vulkan with no CUDA or PyTorch
GitHub / necat101 (via r/LocalLLaMA)
Stack layer / Contrast
A Staleness Tracker Shows GPT-6 Astra Shipped More Than Four Months Behind Its Own Training Cutoff
stale.jock.pl / Hacker News (79pts, 47 comments)
Stack layer / Contrast
AFL++ fuzzed agent-written reimplementations of ten Linux utilities: fewer memory errors than the shipped versions, but more infinite loops
arXiv 2609.18298
Stack layer / Threat pattern
A Fake Security-Product Story in an Unexecuted Binary Section Flipped 30 of 35 Malware Verdicts
arXiv 2609.19722
Stack layer / Threat pattern
Five new MCP server CVEs, and four of them are the same bug: a network listener with no authentication
NVD