Morning Brief: Wednesday, July 8
Sixty-five feeds. Two weeks. 4,510 items reduced to what follows. (what we track, how we crawl, subscribe)
Wednesday. Latent Space publishes Lilian Weng summarizes 35 papers on Harness Engineering for RSI — a survey of the recursive-self-improvement literature packaged as an AINews issue. Noma Security discloses GitLost: a prompt-injection chain that tricks GitHub's Copilot Agent into leaking private repository contents. Cambridge publishes Copy That Floppy, a guide for preserving data from fragile floppies; Hackaday amplifies it as It's Now Imperative That You Copy That Floppy. CERT/CC issues an advisory on a hidden authentication backdoor in Tenda firmware. SambaNova closes a $1B Series F at $11B, five months after its last mega round. Hot French startup ZML ships a free tool to speed inference across heterogeneous chips. Werner Vogels announces Now Go Build CTO Fellowship Season 2. Vercel's Chat SDK adds Photon, Dial, and Vercel Connect adapters.
Top (5-7 min)
- Lilian Weng summarizes 35 papers on Harness Engineering for RSI
- Latent Space, 2026-07-08. AINews packages Weng's reading list on the harness engineering layer around recursive self-improvement — the substrate for agents that train agents.
- GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos
- HN, 2026-07-08. Noma Security's disclosure of a prompt-injection chain that exfiltrates private repository contents through Copilot's agent surface.
- Copy That Floppy – Cambridge guide for preserving data from fragile floppy disks
- HN, 2026-07-08. Cambridge digital preservation team's handbook for reading degrading media. Hackaday published a companion piece.
- Tenda firmware (multiple versions) contains hidden authentication backdoor
- HN, 2026-07-08. CERT/CC vulnerability note on an embedded authentication bypass across multiple Tenda router firmware releases.
- AI chip maker SambaNova raises $1B at $11B valuation
- TechCrunch, 2026-07-08. Series F first close, five months after the last mega round.
- Hot French startup ZML releases free product to speed inference across lots of AI chips
- TechCrunch, 2026-07-08. ZML ships a free inference accelerator targeting heterogeneous chip fleets.
- Now Go Build CTO Fellowship: Season 2
- All Things Distributed, 2026-07-08. Werner Vogels reopens the CTO fellowship program.
Themes this week
- RSI and agent-training substrate
- Latent Space: Weng's 35 papers on Harness Engineering for RSI (today), Latent Space: Field Guide to Fable (Tue), Kenneth Payne: The Fable of the Universal Schelling Machine (Tue).
- Agent security and prompt-injection exfil
- Noma Security: GitLost — GitHub Copilot Agent leaks private repos (today), TechCrunch: Discord AI moderation wrongfully bans users (Tue), Alignment Forum: data filtering works worse than expected (Tue).
- Inference layer money and tooling
- TechCrunch: SambaNova $1B Series F (today), TechCrunch: ZML free inference accelerator (today), Vercel: Chat SDK adds Photon (today), Vercel: Chat SDK adds Dial (today), Vercel: Chat SDK supports Vercel Connect (today).
- Digital preservation
- Cambridge digipres: Copy That Floppy guide (today), Hackaday: It's Now Imperative That You Copy That Floppy (today).
- Embedded security
- CERT/CC: Tenda firmware authentication backdoor (today).
- AI-coding receipt (carryover)
- Fast Company: developer inspects YC CEO's 37K LoC/day claim (Tue), Willison: sqlite-utils 4.0 GA with schema migrations (Tue), Tunguz: When AI Costs More Than the Engineer (Mon).
Scan (15 min)
- Wednesday signal (short, worth reading)
- Lilian Weng summarizes 35 papers on Harness Engineering for RSI, Latent Space, 07-08
- GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos, HN, 07-08
- Copy That Floppy – Cambridge guide for preserving data from fragile floppy disks, HN, 07-08
- Now Go Build CTO Fellowship: Season 2, All Things Distributed, 07-08
- arXiv notable (234 items today, steady state)
- Prompt-to-Paper: Agentic AI System for Bioinformatics, arXiv, 07-08
- FirstResearch: Auditable Question Formation for LLM Scientific Discovery Agents, arXiv, 07-08
- Memory in the Loop: In-Process Retrieval as Extended Working Memory for Language Agents, arXiv, 07-08
- Beyond the Leaderboard: A Synthesis of Tool-Use, Planning, and Reasoning Failures in LLM Agents, arXiv, 07-08
- Beyond Static Evaluation: Building Simulation Environments for Scalable Agentic RL, arXiv, 07-08
- StateFuse: Deterministic Conflict-Preserving Memory for Multi-Agent Systems, arXiv, 07-08
- Information Limits and Attractor Dynamics in Economies of Frontier LLM Agents, arXiv, 07-08
- PolyWorkBench: Benchmarking Multilingual Long-Horizon LLM Agents, arXiv, 07-08
- Information Gain-based Rollout Policy Optimization for Multi-Turn LLM Agents, arXiv, 07-08
- A Definition and Roadmap for World Models, arXiv, 07-08
- Agent security
- Inference and infra
- SambaNova raises $1B at $11B valuation, TechCrunch, 07-08
- ZML releases free product to speed inference across AI chips, TechCrunch, 07-08
- Chat SDK adds Photon support, Vercel, 07-08
- Chat SDK adds Dial support, Vercel, 07-08
- Chat SDK now supports Vercel Connect, Vercel, 07-08
- Use any Chat SDK adapter with eve, Vercel, 07-08
- Preservation, retro, hardware
- Copy That Floppy — Cambridge guide, HN, 07-08
- It's Now Imperative That You Copy That Floppy, Hackaday, 07-08
- The Atari Jaguar Runs Linux, Hackaday, 07-08
- ESP32 Keeps Tabs on Your Local Airspace, Hackaday, 07-08
- HN sundries
- Decoding the obfuscated bash script on a Uniqlo t-shirt, HN, 07-08
- How to Build a Minimal ZFS NAS Without Synology, QNAP, TrueNAS (2024), HN, 07-08
- LineageOS Statistics, HN, 07-08
- Show HN: Chiptune Radio, HN, 07-08
- The space bit of SpaceX is worth $8 a share, says Morgan Stanley, HN, 07-08
- Consent, moderation, media
- Meta Now Lets Anyone Use Your Instagram Photos In AI Images, Slashdot, 07-08
- Yesterday's carryover worth re-reading Wednesday morning
- sqlite-utils 4.0, now with database schema migrations, Simon Willison, 07-07
- YC CEO says he ships 37K LoC AI code per day. A developer looked under the hood, HN, 07-07
- LeRobot v0.6.0: Imagine, Evaluate, Improve, Hugging Face Blog, 07-07
- Data filtering works a lot worse than you would expect, Alignment Forum, 07-07
- The first American autonomous ground vehicles are fighting in Ukraine, TechCrunch, 07-07
Tail
- Demand appears to support launch of A220 Stretch, Leeham, 07-08
- Japan Releases Snowman-Like Asteroid Image After Flyby, Slashdot, 07-08
- claude-code v2.1.204, claude-code-releases, 07-08
- Mac Shine: Multiscale thalamocortical mechanisms of consciousness, MIT calendar, 07-08
Feed silences (diagnostic)
arxiv-cs-ai: 234 items today, back to typical mid-week volume after Sunday/Monday's silence and Tuesday's 673-item flush.OpenAI,Anthropic-first-party,Simon Willison,Databricks,ClickHouse,Apple ML Research,Google Research,Hugging Face Blog,404 Media,LWN,Schneier,MIT Technology Review,EFF Deeplinks,Alignment Forum,Interconnects,GitHub Blog,Kenneth Payne,Martin Fowler: no posts today.Netflix Tech Blog,James Bornholt: persistent DNS/TLS errors continue (unchanged).Planet Clojure: no Wednesday posts yet after Tuesday's three (Clojure 1.13.0-alpha3, biff.graph, libl.in).WBUR: no Endless Thread today.bitsavers(6 feeds): connected, 0 items (sparse archive, expected).claude-code-releases: v2.1.204 today (v2.1.203 yesterday).
Build provenance
build: 2026-07-08 | crawler-sha: 5fe7ab8 (Walsh-Research/1.2, compliance v1.3) | feeds: 65 active (78 configured, incl. 12 corp-eng, 6 bitsavers, 5 generated) | items-considered: 4510 (14d, incl. 2733 arXiv) | warehouse: 23264 items | published: 7 | note: Wednesday. Latent Space runs Lilian Weng's synthesis of 35 papers on Harness Engineering for Recursive Self-Improvement. Noma Security exfiltrates private repos from GitHub's Copilot Agent (GitLost). Cambridge digipres publishes Copy That Floppy; Hackaday mirrors. CERT/CC issues Tenda firmware backdoor advisory. SambaNova closes $1B Series F at $11B; ZML ships a free inference accelerator. Werner Vogels opens CTO Fellowship Season 2. Vercel Chat SDK adds Photon, Dial, and Vercel Connect adapters. arXiv back to 234 items after Tuesday's three-day flush.