Every story across the Writeble desks, newest first.
On September 24, 2026, Microsoft introduced run-assert-eval, an open skill that discovers agent risks with Clarity, measures them with ASSERT, generates ACS policy, and reruns the same eval to prove the fix.
Tsinghua SIGS Robot Lab published VeriLoop-E2 on Hugging Face under Apache 2.0—a 27B post-trained Qwen3.8 derivative with 262K context, public eval evidence, and a verifier-governed recurrence contract.
On September 21, 2026, Nokia Applied Research published AnyJev on PyPI and GitHub under Apache 2.0, a library that reads calibrated typed decisions from open LLM next-token distributions without fine-tuning.
On September 23, 2026, Advanced AI Society and LF Decentralized Trust opened the Proof-of-Control v1.0 working draft for public comment, defining openly verifiable evidence that AI agents stayed inside assigned controls.
On September 21, 2026, Yandex open-weighted AliceAI-Foundation-80B-A3B-Base under Apache 2.0—an ungated 80B/3B hybrid MoE trained from scratch with a 262,144-token context window.
On September 22, 2026, Cisco Talos released the MIT-licensed CAIRN toolkit and documented CLOSEDQUORUM, a Windows implant that tallies commercial LLM votes for post-compromise actions.
CERT/CC published CVE-2026-93088 on September 22, 2026 for SGLang’s disaggregated-diffusion DiffusionServer—an unauthenticated ZeroMQ ROUTER socket that feeds attacker frames to pickle.loads—documented in Keita Sode’s September 22 technical writeup covering affected 0.5.11+ releases with no patch called out yet.
On September 22, 2026, Datris.ai announced a major update to datris-platform-oss under AGPL-3.0—credential brokering via Vault, isolated tap execution, per-action Agent Policy, audit logging, row-level provenance, and an optional recovery agent for self-hosted MCP data work.
On September 22, 2026, Hugging Face documented GGUF support in Transformers that reuses llama.cpp’s ggml Metal kernels via the kernels library—so Apple Silicon users can call from_pretrained on Hub GGUF files and generate with the standard Python API.
Xiaomi’s MiMo team published MiMo-V2.6-Pro-RL and MiMo-V2.6-Flash-RL on Hugging Face under MIT—native text/image/video/audio MoE checkpoints with a claimed 1M-token context—alongside RL training disclosures updated on Xiaomi’s docs on September 22, 2026.
On September 15, 2026, Gensyn announced open-1b, a 1.61B-parameter Apache 2.0 language model shipped with per-step state hashes, intermediate checkpoints, training code, and a public audit client so third parties can replay training steps.
On September 17, 2026, Linkup Research released SPARSEUP, an Apache 2.0 ModernBERT-based sparse retriever on Hugging Face as Linkup-Platform/linkup-sparseup-embed-v1, positioned as a controlled companion to LightOn’s DenseOn and LateOn.
On September 16, 2026, Trend Micro’s Zero Day Initiative published ZDI-26-706, a CVSS 8.8 remote code execution advisory in the open-source CrewAI framework’s load_agent_from_repository path when a user loads a malicious agent configuration.
On September 16, 2026, Zhongguancun Academy and the Zhongguancun Institute of Artificial Intelligence published ZGCM-1-7B on Hugging Face under MIT, with arXiv technical report 2609.13356, training code, staged checkpoints, and a public data card.
In mid-September 2026, Knowledgator released GLiFormer under Apache 2.0—a shared-encoder framework for NER, classification, relations, nested JSON structuring, and embeddings—with Large v1 (575.6M) on Hugging Face and PyPI packages through 0.1.2 dated September 15.
On September 15, 2026, Meta made WhatsApp Business Tools available as a remote MCP server so coding agents can onboard numbers, manage templates, configure webhooks, and send test messages under the signed-in human’s Meta scopes, documented alongside Meta Social Technologies MCP.
In mid-September 2026, Nums AI shipped Causilo—a pretrained tabular foundation model for classification and regression with a scikit-learn interface, Apache-2.0 code on GitHub, Hugging Face weights under a separate research license, and top single-model TabArena Elo in project reports.
On September 16, 2026, Nature published Stanford’s Paper2Agent framework, which automatically converts papers and codebases into tested Model Context Protocol servers under an MIT license, with public AlphaGenome, Scanpy, and TISSUE demos on Hugging Face.
On September 15, 2026, Google’s Developers Blog published Part 2 of its Zero-trust Agents series, covering Model Armor, Semantic Governance Policies, and Agent Anomaly Detection, with an open-source companion demo under GoogleCloudPlatform/generative-ai.
On September 15, 2026, NOFire AI released Brig under Apache 2.0 to run AI coding agents inside hardware-enforced microVMs on macOS and Linux, with install via brig.sh and curated profiles for major agent CLIs.
On September 15, 2026, Posit announced commons 0.1.0, an open framework for self-service data analysis agents in R and Python that prefer vetted trusted code and deterministically label answers—MIT-licensed on CRAN as of September 11.
