Agent Harness Architecture: How Coding Agents Actually Execute Tools
A mechanism-first breakdown of the runtime that wraps a model: the loop, tool schemas, sandboxing, context strategy, permissions, and injection defence.
· 14 minLatest news
Fresh reporting on active vulnerabilities, security patches, incident response, and threat research for defenders.
A mechanism-first breakdown of the runtime that wraps a model: the loop, tool schemas, sandboxing, context strategy, permissions, and injection defence.
· 14 minPaged KV, radix-tree prefix sharing and ahead-of-time compilation all pull in different directions. Work out which one your own workload should pay for.
· 14 minA model that fits can still die on one long prompt. Here is the arithmetic behind the second allocation that grows with context, and how to shrink it.
· 11 minWeights are only one of four memory buckets, and past roughly 115k tokens the KV cache costs more than the model does. Here is the arithmetic in full.
· 16 minPrefill is compute-bound, decode is bandwidth-bound, and KV cache is what really caps concurrency. The metrics, memory maths and tradeoffs behind serving.
· 16 minThe same 320B model is 328 GB in FP8 and near 135 GB at 4 bits. Bytes-per-parameter math, per-format tradeoffs, and how to size a box that actually fits.
· 13 minPrepare for the September 2026 FIPS 140-2 sunset. Learn the procurement impacts, technical breaking changes, and exact steps to migrate stacks to FIPS 140-3.
· 8 minExplore the EU Cyber Resilience Act Article 14 mandatory 24-hour vulnerability reporting rules, ENISA platform architecture, and PSIRT compliance steps.
· 9 min