Preston Holmes retweeted
Replying to @AnthropicAI
Not to be confused with scion from Google: github.com/GoogleCloudPlatfo…
You can now SSH into Cloud Run!
docs.cloud.google.com/run/do…
skills were invented to package and share some useful reusable bits of know-how. but people have now probably built many more skills for personal use than for distribution at this point. now with the smarter models needing thinner harnesses and the power of shared directories the line between private use of agent-skills as a standard vs just local notes/wiki in markdown blurs.
you think people went nuts over Jev? wait for SSI. I sense a disturbance in the force. the era of “just another LLM” is over.
pi durable might be a good fit for agent substrate
People of Pi: We've shipped Pi 1.0 with Pi Durable. Go make them yours.
earendil.com/posts/pi-1-0/
Agents are really good at working with oauth device flows, got me logged into this in flight (and duh the code is now invalid if you think i’m sharing some secret)
this might be a premature call. but opus 5.5 seems to be doing recursive deslopifying of a project. it is finding gaps and cleanups as a side effect of doing new feature work. filing issues for those items, dispatching agents to fix.
Those agents in turn find other cleanup opportunities, file issues, dispatching agents.
this has led to steady stream of dozens of often small, but cumulatively impressive hardening and robustness over the last 36 hours, fully automated.
software factories will be a thing if this proves true cc @dexhorthy
opus 5.5 is being pretty good at proactively finding security issues and being cautious about disclosure.
in my meta harness there are both group threads and DMs and agents raise security issues always in DM and almost with a whispering tone.
One inefficiency in my multi-agent use that results from agents being "over helpful + untrusting" is when an agent finds a secondary issue, and I want them to delegate that as a task, they feel they should fully investigate and research the problem to come up with a very detailed issue, which is then taken with doubt by the other agent who is compelled to do the exact same depth of research to make sure the report agrees with the code. This DOES mean less slop - but is not token efficient.
This kind of feels like a vim vs emacs debate. every issue raised has the inverse.
- a crash on your backend brings down every agent harness
- tools need credentials too
- an agent harness can have an overlooked an in-sandboxed tool
etc
there are traders either way. what is wrong is trying to present this as a “only one right way” space
This is the wrong approach
Running agents inside the sandbox is simple in theory
But in production, the sandbox's blast radius becomes your agent's blast radius
For example, with the DigitalOcean architecture:
- Sandbox crashes / OOMs → agent loop dies with it
- Disk fills up or env breaks → agent is bricked
- Exposing your own API as tools → needs extra infra
- Creds can't live in the sandbox → needs a whole credential proxy layer
- Sleeping sandbox can't wake itself for crons
- Updating agent code → updating the binary in every VM
- Monitoring → the sandbox has to report its own failures
Separate the harness from the sandbox instead:
- Run the harness in your backend
- Expose the sandbox as tools
- Keep creds, history, and permissions outside
- Wake the sandbox only when needed
Amp, Vercel Eve, Cloudflare Flue, Claude Managed Agents, and OpenAI's Agents SDK all use this architecture for a reason
I wrote more on why and how here: rivet.dev/blog/2026-07-27-ru…
Fun experiment with Jev this morning:
Since Jev can evaluate one piece of data across multiple questions at once, you can feed those output scores straight back into Jev to get a compound judgment.
Multi-criteria evaluation ➔ recursive synthesis.
Probably 99% of the projects using Jev were co-developed with a frontier LLM, and that’s awesome.
It’s a new kind of compounding capability: using frontier intelligence to flatten the learning curve and rapidly adapt a new classifier model. A genuine multiplier.
Sometimes when working on a larger project, there is some hard stuff at the start, then another set of hard things at the end. So why in the world has OpenAI made it impossible to configure Codex to STOP instead of downgrade to Luna if Astra started to run low on quota?
I feel like this should be called "agent ethology" - it feels closer to anthropology than code debugging - learning to live with imperfect agent team-mates
Preston Holmes retweeted
An extraordinary @Nature paper has just landed from the lab of @Sergiu_P_Pasca at @Stanford - led by Konstantin Kaganovsky. They have found a way to create "xenocortical mice" which have ~92% of their cortex occupied by a cortical organoid derived from human stem cells. This human-derived cortical graft integrates deeply with the host nervous system, supporting organised neural activity and behaviour.
This study is a milestone in synthetic biology and chimera research. It has the potential to generate multiple medical breakthroughs by providing an enhanced biological model of human brain tissue that allows behavioural as well as neural and genetic assays.
The Stanford team have been exceptionally thorough and proactive in addressing ethical concerns that comes from this frontier work. But their pioneering work nonetheless raises many open questions: are the xenocortical mice conscious? Do they have any human-like properties of consciousness or cognition?
@NitaFarahany and I will be addressing some of these questions in a forthcoming commentary - where we'll also offer an ethically-informed roadmap to guide this important research as it progresses. In this context, "pacing the frontier" really does make sense 😉
Read the Stanford @nature paper here, and buckle up. It's wild. nature.com/articles/s41586-0…













