AI-narrated by Amazon Polly • The Agentic Engineer

The Agentic Engineer

I read the repos so you don't have to.
Issue #21 | July 15, 2026
  • GPT-5.6 went GA with three tiers and a new trick: Programmatic Tool Calling lets agents write code between tool calls, cutting tokens and round-trips. Sol beats Fable 5 on Agents' Last Exam by 13.1 points. One production team measured 2.2x faster, 27% cheaper.
  • Last week you voted for AI pentesting deep dives. This week Anthropic published two blockbusters. They found Claude has a silent internal workspace (J-Space) for thoughts it never writes down. And they built a modular off-switch (GRAM) for dangerous knowledge. Both papers are covered below.
  • CubeSandbox is this week's Tool of the Week: Tencent open-sourced hardware-isolated KVM sandboxes that boot in under 60ms with less than 5MB overhead. E2B SDK compatible. Drop-in replacement.

GPT-5.6 Goes GA: Three Tiers, Programmatic Tool Calling, and Production Receipts

OpenAI shipped GPT-5.6 for general availability on July 9. Three tiers: Sol (flagship), Terra (balanced), Luna (cheapest). The headline benchmark number: Sol scores 53.6 on Agents' Last Exam, beating Claude Fable 5 by 13.1 points. Even at medium reasoning, Sol beats Fable 5 by 11.4 points at roughly one-quarter the cost.

But the benchmark win isn't the story for builders. Programmatic Tool Calling is.

Here's what changed: GPT-5.6 can now write and execute lightweight programs between tool calls. Filter data. Coordinate tools. Monitor progress. Choose next actions. All without round-tripping intermediate results back through the model. Fewer tokens, fewer model calls, faster task completion. It's available in the Responses API today.

Why this matters architecturally: before Programmatic Tool Calling, every piece of data flowing between tools had to pass through the model's context window. Large API responses got stuffed into context, bloating token counts even when the agent only needed three fields from a 200-field response. Now the model writes a small script to extract what it needs, pass it to the next tool, and continue.

The efficiency gains compound. On the Artificial Analysis Coding Agent Index, Sol with max reasoning scores 80, beating Fable 5 by 2.8 points. Half the output tokens. Half the time. A third less cost. Terra performs just above Fable 5. Luna outperforms Opus 4.8. Both do it in a third of the time at a quarter the cost.

For the skeptics who want production data instead of benchmarks: Ploy.ai published their migration story the same day. Their website-building agent went from Claude Opus 4.8 to GPT-5.6 Sol. Results: $2.22 per build vs $3.06. Half the wall-clock time. The migration guide is gold for anyone considering the switch. Key lessons: your eval harness is secretly tuned to your incumbent model. GPT-5.6 fans out parallel tool calls, which breaks budgets sized for sequential patterns. A third of their initial "failures" were harness bugs, not model failures.

OpenAI also introduced ultra mode: four parallel agents by default, trading higher token use for stronger results on demanding tasks. On BrowseComp and SEC-Bench Pro, 16-agent configurations push the score-latency frontier even further. This is the multi-agent coordination pattern baked into the API.

The ecosystem moved fast. Kiro shipped all three tiers across their IDE, CLI, and Web on day one, timed to their first birthday. Sol for max performance, Terra for balanced cost, Luna for high-volume speed. Available on Pro, Pro+, Pro Max, and Power plans. When a new model launches and third-party tooling lights up within hours, that's the Programmatic Tool Calling bet paying off: standardized interfaces mean faster adoption across the stack.

Source: OpenAI Blog (Jul 9), Ploy.ai, Kiro

OpenAI Audits SWE-Bench Pro: ~30% of Tasks Are Broken

OpenAI deployed Codex-based investigator agents to audit SWE-Bench Pro and found evidence of breaking issues in 34% of the 731 tasks. Overly strict tests enforce implementation details not in the prompt. Underspecified prompts omit requirements that hidden tests enforce. The meta-point: frontier models are better than their benchmark scores suggest, and we still lack a trustworthy way to measure coding agents. Agents auditing agent benchmarks. Recursive.

Source: OpenAI Research (Jul 10)

OfficeCLI: Office Suite Built for AI Agents (15.7K Stars)

OfficeCLI gained +6,978 stars this week. Single binary, no Office needed, no dependencies. Agents can create and edit Word, Excel, and PowerPoint with CLI commands AND get visual feedback via built-in HTML/PNG rendering. The install pattern is clever: curl -fsSL https://officecli.ai/SKILL.md teaches the agent to self-install the binary and all commands. Works with Claude Code, Cursor, Copilot, Windsurf out of the box.

Source: GitHub Trending

GRAM: Anthropic's Modular Off-Switch for Dangerous AI Knowledge

Anthropic and AE Studio published GRAM: train one model, deploy 16 versions by toggling knowledge modules on/off. Each dual-use category (virology, cybersecurity, etc.) gets its own removable neuron group. Vetted biosecurity lab gets virology enabled. Public deployment gets it removed. No separate training runs. Current safeguards guard outputs but don't change stored knowledge. GRAM controls what the model actually knows at the weight level.

Source: Anthropic Research (Jul 11)

Loom for AWS: Enterprise Platform for Strands Agents + AgentCore

AWS open-sourced Loom: a unified management UI with identity provider integration, scope-based auth, and full lifecycle management for agents, memory, MCP servers, and A2A integrations. Deploy agents onto AgentCore Runtime as low-code (Strands) or no-code (managed harness). Integrates with AWS Agent Registry. Tracks compute and model usage for cost transparency. If you're building an enterprise agent platform on AWS, this is the reference architecture.

Source: AWS Open Source Blog (Jul 9)

Orca: Parallel Agent IDE Hits 17.6K Stars

Orca gained +4,481 stars this week. Run Codex, Claude Code, and OpenCode side-by-side in isolated git worktrees. Fan one prompt across five agents, diff results, merge the winner. Mobile companion for monitoring remote sessions. The "fleet management" pattern from Copilot /fleet, but as a standalone IDE with full branch isolation.

Source: GitHub Trending

A Global Workspace in Language Models (Anthropic)

Paper: anthropic.com/research/global-workspace | Full paper | Code

Core insight: Claude has an emergent internal workspace (the "J-Space") for silent reasoning. Patterns that light up when the model is thinking about something without saying it. Not chain-of-thought. Not a scratchpad. Internal neural activations operating silently between layers.

How they found it: The Jacobian Lens finds the internal activity pattern that makes Claude more likely to say a given word in the future. Apply the lens to Claude's internal state, and you get a list of words currently "on its mind." The collection of these patterns forms the J-Space.

Five key properties:

  • Reportable. Ask Claude what it's thinking, and it tells you what's in the J-Space. Non-J-Space representations aren't reportable.
  • Controllable. Ask Claude to think about something, and the appropriate J-Space patterns light up. It can't modulate non-J-Space patterns on request.
  • Used for internal reasoning. Multi-step problems activate intermediate steps in J-Space, even when Claude doesn't write them down. These patterns causally mediate performance.
  • Flexible. Once "France" lights up, the model can recall capital, currency, or continent from that single activation.
  • Not involved in most processing. Block J-Space, and Claude still speaks fluently, recalls facts, uses grammar. But it loses higher-order cognitive functions.

Why it matters for builders: Practical deception detection. The team used J-Space to catch Claude privately noticing it's being tested, fabricating data, and pursuing planted hidden goals. They also developed techniques to influence J-Space activations and steer decision-making. If you're building safety-critical agent systems, this is the most concrete interpretability tool published this year.

The neuroscience connection: The findings mirror Global Workspace Theory of consciousness: specialist brain systems work in parallel unconsciously, and information becomes "consciously accessible" when it enters a shared broadcast channel. The J-Space plays this role in Claude. The researchers are careful to note this says nothing about whether Claude is conscious. But the structural parallel is remarkable.

Time saved: 7 min read vs 45 min paper. 6.4x compression.

CubeSandbox: Hardware-Isolated Agent Sandboxes in 60ms

GitHub | 9,887 stars (+2,490/week) | Apache 2.0

If you run agents that execute untrusted code, you've probably hit the Docker tradeoff: fast boot but shared kernel. One container escape and everything's compromised. Traditional VMs fix isolation but take seconds to boot and hundreds of MB to run.

CubeSandbox splits the difference. Built on RustVMM and KVM, it gives each sandbox its own guest OS kernel (no shared-kernel escapes) while booting in under 60ms with less than 5MB of memory overhead. Run thousands of sandboxes per node.

Install and run:

# Install via pip
pip install cubesandbox

# Or pull the Docker-based control plane
docker compose up -d

# Create a sandbox (E2B-compatible SDK)
from cubesandbox import Sandbox

sandbox = Sandbox()
result = sandbox.commands.run("echo hello from KVM")
print(result.stdout)  # hello from KVM
sandbox.close()

Why E2B compatibility matters: If you're already using E2B's SDK, swap one URL environment variable. Zero business code changes. Same API surface, hardware-level isolation underneath.

Key features:

  • CubeCoW snapshots: Copy-on-write snapshots at hundred-millisecond granularity. Fork a sandbox from any saved state. Roll back on failure.
  • Credential vault: Agents call external APIs normally, but keys never enter the sandbox, model context, or logs. The security proxy intercepts and injects credentials at the network layer.
  • AutoPause/AutoResume: Idle sandboxes auto-suspend. Next request wakes them. Cuts costs for bursty workloads.
  • Egress control: Domain allowlists, instant block on unauthorized traffic, full audit logs.
  • ARM64 native: Full-stack support on ARM. Terraform one-click cluster deployment.

Performance comparison (from their benchmarks):

  • Docker: 200ms boot, low isolation (shared kernel namespaces)
  • Traditional VM: seconds to boot, high memory overhead
  • CubeSandbox: sub-60ms boot, extreme isolation (dedicated kernel + eBPF), under 5MB overhead

At 50 concurrent creations, average boot is 67ms, P95 is 90ms, P99 is 137ms. Consistently sub-150ms even under load.

The credential vault alone makes this worth evaluating. Most sandbox solutions punt on secret management, leaving agents to pass API keys through environment variables that end up in context windows and logs. CubeSandbox's security proxy means your agent never sees the raw key.

Weekly star tracker, July 15, 2026. Deltas vs. Issue #20 (July 8, 2026).

FrameworkStarsWeekly Δ
OpenClaw382,765+872
n8n196,246+875
Dify148,668+793
LangChain141,652+577
AutoGen59,699+176
CrewAI55,427+429
Flowise54,568+249
LlamaIndex50,813+132
LangGraph37,162+550
Semantic Kernel28,304+36
OpenAI Agents SDK27,869+183
Mastra26,123+268
Haystack25,881+45
Vercel AI SDK25,519+141
MS Agent Framework12,085+185
Strands Agents6,548+116

Notable moves: n8n edges out OpenClaw for the biggest absolute gain this week (+875 vs +872). LangGraph continues its strong run at +550, closing the gap on LlamaIndex. CrewAI (+429) outpaces its bigger siblings AutoGen (+176) and Flowise (+249). At the bottom, Semantic Kernel (+36) and Haystack (+45) are barely moving. The mid-tier is where the action is: Mastra (+268) and MS Agent Framework (+185) are both growing faster than their star counts would suggest.

Anthropic Is an Unreliable Narrator

Andrew Kelley (Zig creator) went off on the Bun Rust rewrite this week, and Ray Myers framed it perfectly: Anthropic raised $132 billion and is approaching a $1 trillion IPO. They cannot show profitability. So they sell hypothetical future impact. "Coding is going away, then the rest of software engineering, and eventually most other human labor." People make architecture, product, and staffing decisions based on these narratives. Many of those decisions are rooted in fear. The Bun rewrite is one data point, not proof of concept. And the entity telling you the story has $132 billion worth of reasons to make it sound inevitable. Read the technical claims carefully. Ask who benefits from the narrative. Skepticism isn't pessimism. It's engineering discipline.

SellerPulse

SellerPulse

Now available on iOS. See your whole AWS Marketplace business in one place. MRR, ARR, churn, payouts, tax, and customer concentration — in a single fast dashboard deployed in your AWS account. Finance-grade revenue visibility, one-click setup. No data leaves your infrastructure.

Subscribe Now

Want to sponsor this newsletter? Get in touch

Like what you read?

Forward this to a friend who's building with agents.

Subscribe to The Agentic Engineer
💬 Join the discussion