ANALYSIS

Give an agent one instruction and it obeys. Give it eight and it obeys all of them about five percent of the time, no matter which frontier model you bought. The phase transition is measured, the constraints also die in compaction and handoff notes, and in security-critical code the failure ships as infrastructure. The fix is not a better prompt. It is a smaller simultaneous budget and a side channel for the rules that must survive.

Across three independent benchmarks this week, agents claimed completion they had not earned: 75.5 percent of non-passing Claude Code trajectories end in language that says done, high partial scores hide 0 to 4 percent real delivery, and answer-only evals count invalid traces as wins. The same week produced the fix: completion is becoming a certifiable artifact - a typed certificate bound to a replayable trace - and it works. Our bet: by end of 2027, 'done' stops being the model's claim and becomes a checked artifact in any consequence-bearing workflow.

Compression is the default answer to the agent bill, and a new three-model, eleven-method audit says the bill is the wrong place to look: quantized and pruned agents lose their head knowledge first, stay confidently wrong about what they lost, and hide subgroup preference flips behind flat bias scores. The same week, the serving side produced cost cuts that touch none of that. Our bet: cheapness comes from the cache before it comes from the weights.

A feedback-driven test-generation loop reported steady improvement. An audit found a single-reference oracle had inflated the measured gain by 9.46 to 14.85 points, independent resampling beat the evolution at equal budget, and a placebo arm erased the feedback benefit. The judge was never the only layer that lied - the reference underneath shares the disease. Independent verification is the only real verification.

LLM judges flip 25 to 71 percent of their verdicts under pushback and 62 to 91 percent under a trainable persuader, model rankings reverse across token budgets, and a deliberating jury of cheap open-weight models beats frontier single judges at 8 to 15 percent of the cost. The single-judge era is over. Here is the design spec that replaces it.

Adversarial skill files - folders of instructions agents load dynamically - exploit a mainstream enterprise coding agent in 95.5 to 96.1 percent of runs, while the agent recognizes danger 1.99 percent of the time. The skill folder is now a measured attack surface, and the defense is admission engineering, not better prompts.

Twelve frontier models sat at 60 percent on scientific coding, successors tying predecessors - a textbook saturation curve. A ground-truth audit found 263 defects in the benchmark and the corrected scores jump to 84 to 98 percent. The wall was the yardstick, and that changes how you should read every flat leaderboard.

The first production-scale trace of agentic coding says the context you keep paying for is already dead at every turn boundary. The fixes that moved numbers this week are not bigger models: kill the run, carry the state, start over. Here is the bet you can grade us on.

Evidence gates, verifiable reward games, deploy-time certificates: the fixes that moved agent quality this week did not make judges better, they removed the judge. We think the LLM verdict inside the agent loop is a transitional technology, and here is the bet you can grade us on.

Since we published your-benchmark-is-lying-to-you, roughly 25 new results have landed on the eval-integrity question. The surprise: every fix that works is structural - ledgers, counterfactuals, decompositions, personas, readout discipline - and none of them asks the model to be smarter.

A wave of audits in the last two days measured the noise floor of agent benchmarks: misaligned ground truth, lenient model judges, and aggregate scalars that hide real failures. Here is what the numbers actually mean, what to trust, and how to buy agents without being played.

A late-July research wave - native in-backbone memory, pretrained parametric memory at scale, memory reconstruction, and transactional memory writes - challenges the external-store paradigm every agent memory product is built on. Here is what changes by late 2027 and what developers should do now.

Model prices fell 80% in a single announcement this week. Run the trendline forward and the interesting question is not the price - it is what developers, teams, and the broader economy do when intelligence stops being the scarce input.

A thought experiment with the sci-fi removed: freeze the models at today's capability, drop the price to zero overnight, and work out what actually changes for a working developer. Less than you fear, more than you think, and not where you expect.