·7 min read·中文
尊重他人的选择，也尊重选择所带来的后果。尽慈悲之心，但守责任之界。
尽慈悲，但不替人承担本不属于自己的责任，也不把本属于自己的责任交出去。
Blog
Start here
- 01
The Handoff Is a Living Repo
ENThe scarce skill in human and agent collaboration is not managing either side, but structuring ongoing work in a living repository so clearly that either can continue it mid-stride.
- 02
Can You Fire the Generalist?
ENThe durable firm asset is not the model or the harness. It is the hill-climbing loop that turns a rented generalist into a company veteran you can keep.
- 03
The Durable Moat in Agent Control Planes
ENAs models improve, a growing share of enterprise value may move to the systems that let agents act safely, observably, and repeatably in real environments.
- 04
The Agent That Can Stop Is the Agent You Can Trust
ENFor higher-risk agent workflows, pause-resume execution changes the trust model: agents can preserve state, request human approval at the risky step, then...
- 05
One Throat to Choke Means No Independent Witness
ENEval and observability are moving into the agent runtime. That gives enterprises clearer accountability, but it can also weaken the independent evidence...
All writing
·2 min read·EN
The Handoff Is a Living Repo
The scarce skill in human and agent collaboration is not managing either side, but structuring ongoing work in a living repository so clearly that either can continue it mid-stride.
·2 min read·EN
Your Spreadsheet Can't Tell a Fact From a Guess
Ops decisions rot when actuals, estimates, and mocks share a cell with no tag. Provenance on every figure beats a prettier dashboard.
·3 min read·EN
Why Frontier Models Stay Spiky
Frontier models stay spiky because useful work is contextual and counterfactual paths are ungradable. Post-training quality is a grader problem, not a pretraining-size problem.
·4 min read·EN
Can You Fire the Generalist?
The durable firm asset is not the model or the harness. It is the hill-climbing loop that turns a rented generalist into a company veteran you can keep.
·6 min read·EN
Auditability Is Not Logging: What Agent Compliance Will Actually Cost You
Agent safety is turning into a compliance surface. Recording what an agent did is cheap. Proving what it could not do is the expensive part.
·6 min read·EN
Agent Security as Its Own Product: One Reading, Held Loosely
OpenAI's news page lists \"Codex Security: now in research preview\" with almost no public detail. The headline cannot settle what the product is, so the...
·5 min read·EN
The Fair Use Fight Everyone Is Watching Is Not the One That Matters
A permissive copyright ruling on AI training may leave the industry worse off than a restrictive one, because it keeps acquisition and distribution...
·7 min read·EN
Agent-First Tooling Is Not About Agents
Three March 2026 launches hand capability to machines directly. What matters is what that exposure reveals about the products doing it, and what it costs them.
·5 min read·EN
Invert the AI Scaling Consensus: Four Constraints, One Real Fragility
Four constraints could break AI scaling. Three have engineering workarounds. The fourth, capital structure, is the one lacking an engineering response.
·7 min read·EN
Open Weights Hit Production Parity. Reliability Is Now the Harder Thing to Buy.
A new open-weight release leads on hallucination rate rather than size. Lab-measured reliability does not transfer to your deployment, and it removes your...
·6 min read·EN
World Models Relocate Hallucination Rather Than Removing It
World models improve grounding, but hallucination comes from generating without verifying, so switching modality moves the failure somewhere less legible...
·6 min read·EN
Codex Security and the Triage Problem
Codex Security entered research preview in March 2026, per the announcement. The capability worth examining is triage, not vulnerability discovery.
·7 min read·EN
Self-Modifying Agents Are Version Control With Better Manners
Prompt files drift as their environment moves. Snapshots, rationales, evaluation gates, and logs fix that. The catch is that building the evaluator is...
·6 min read·EN
Singapore Is Pointing AI Governance at Runtime, Not Weights
IMDA's updated framework treats agentic AI as its own governance category. Its named risk areas sit in orchestration and authorization rather than in model...
·9 min read·EN
LeCun Says the LLM Revolution Is Over. The Verification Argument Is the Part Worth Arguing With.
Yann LeCun, as reported, argues LLMs cannot offer behavioral guarantees because they are trained on a sliver of possible inputs. That verification argument...
·7 min read·EN
YouTube's AI Rollout: The Label May Outlast the Toolkit
YouTube shipped auto-dubbing, Veo 3 Fast, Lyria 2, and an analytics chatbot alongside mandatory AI disclosure labels. The tools are the visible change. The...
·4 min read·EN
Origin Over Domicile: Why China Unwound the $2B Manus Acquisition
China's NDRC unwound the $2B Manus acquisition, signaling that AI engineering origin can override legal offshore domicile in regulatory review.
·4 min read·EN
The Bottleneck Moved: Intelligence Is Cheap, Coordination Is Not
Recent releases point one direction: the frontier is shifting from how well one agent reasons to how reliably many agents coordinate and fail.
·4 min read·EN
The Federal AI Law You're Waiting For Isn't Coming. State Enforcement Already Did.
While federal AI legislation stalls, US state attorneys general are pursuing AI systems under decades-old consumer protection statutes, and new state laws...
·5 min read·EN
The Cheating Crisis Is a Design Failure, Not an Enforcement Problem
EdTech is spending billions policing AI cheating. The real problem is that the tests certify something machines already commoditized: the ability to...
·5 min read·EN
27 Seconds to Breakout: Why Identity Is the Only Perimeter Left
A reported 27-second lab breakout, from hijacked browser session to shell, sits outside what wall-based defense was built for. Per-action signed identity...
·5 min read·EN
Self-Improving Agent Skills Are a Version Control Problem, Not an Intelligence Problem
Letting agents edit their own skill files without an audit trail is uncontrolled drift. The real unlock is evaluate-then-rollback discipline, not smarter...
·5 min read·EN
The Super App Is an Anti-Pattern: Why OpenAI's Consolidation Play Sells Modularity for Everyone Else
OpenAI is merging ChatGPT, Codex, and its browser into one desktop app. The stronger the bundle gets, the more it raises the stakes for enterprise buyers...
·5 min read·EN
The Agent Bottleneck Is Memory, Not Intelligence
Most enterprise agent pilots reportedly fail before production, and the top blocker is context management, not model capability.
·5 min read·EN
Agent Optimization: The SEO Discipline Nobody Is Practicing Yet
WebMCP flips robots.txt on its head. Sites that declare structured functions for agents early may win a new kind of visibility contest, but only for the...
·4 min read·EN
The Federal AI Law You're Waiting For Is Not Coming First. State Enforcers Are Already Here.
While companies wait for federal AI rules, state regulators are enforcing existing consumer protection laws now. Compliance debt is accruing today.
·5 min read·EN
Anthropic's New Institute Is Not a Safety Team. It Might Be a Sales Team.
Anthropic's new Institute publishes safety research externally. One read is accountability. A sharper read: an enterprise sales wedge. The case is...
·4 min read·EN
When the Model Is Free, the Hard Part Gets Harder
MIT-licensed frontier-scale models make the cloud API tax optional. APIs already commoditized access to AI; open weights commoditize the price. Advantage...
·4 min read·EN
The Runtime Is Becoming the Product
AI's competitive focus is shifting from chat UI to agent control planes. The differentiator is increasingly execution boundaries, state, and operator trust.
·4 min read·EN
The Money Is Going to the Engine. The Bottleneck Is the Steering Wheel.
Coding agents raised billions this cycle, but the real constraint on complex work is the human-in-the-loop interface. Chat UX breaks on visual...
·4 min read·EN
The IDE Just Got Demoted
JetBrains' Air and Junie CLI point to an inversion worth watching: the IDE becoming a feature inside an agent orchestration layer, instead of the workspace...
·5 min read·EN
Stop Growing the Context Window. Start Delegating It.
Recursive Language Models flip the long-context race: instead of bigger windows or lossy summaries, models delegate context to sub-LLMs and code.
·4 min read·EN
The Moat Moved to the Runtime
Evals, provenance, and execution controls are merging into the agent runtime. The advantage is shifting from model quality to who owns the deployment surface.
·5 min read·EN
How Paywalls Hand the Training Set to State Media
A study found LLMs cite state-aligned propaganda about 57% of the time on controversial geopolitical questions. The likely driver is not bias by design but...
·4 min read·EN
AI Disclosure Is Becoming the Baseline. Human-Only Is the Next Premium.
AI disclosure on platforms like YouTube is settling into a default standard, which sets up verified human-made work as the next premium signal.
·4 min read·EN
The Deepfake Defense Is Actually an Identity Gate
Platforms are building Content ID for human faces. The tool sold as creator protection is quietly becoming the entry fee for getting paid.
·5 min read·EN
Infrastructure Is the New Moat
Open-weight models are reaching parity, so the moat moves from owning the model to orchestrating it. A model is a stateless function and commoditizes; a...
·4 min read·EN
When Safety Moves Inside the Runtime
Agent safety is shifting from a bolt-on audit layer into the runtime itself, and that quietly changes where the competitive moat sits.
·4 min read·EN
Treat Vision APIs as Plumbing, Not a Moat
Vision and OCR may be commoditizing faster than reasoning. Build ingestion pipelines that can swap vision providers, and avoid paying a premium for an edge...
·4 min read·EN
The Agent Orchestrator Is Not the Moat
Enterprise IT history suggests governance and policy layers tend to outlast framework layers. The same shift may be reaching agent orchestration.
·5 min read·EN
The Convenience Loop: Why AI Assistants Are Picking the Next Default Language
TypeScript just passed Python and JavaScript on GitHub. The reason may have less to do with human taste and more with what machines can verify.
·4 min read·EN
The Number That Matters in Nemotron 3 Super Is Not 120B
NVIDIA's Nemotron 3 Super reframes the open-model race around deployment economics, not parameter counts. The active parameter figure is the one to watch.
·4 min read·EN
World Models Are a Bet Against LLMs, Not Proof They Win
World models like JEPA, Genie 3, and Marble are pulling capital toward physical reasoning. The €500M behind AMI Labs prices doubt, not victory.
·4 min read·EN
OpenClaw Is Becoming a Platform, and That Is the Risk
OpenClaw is shifting from a generic agent framework toward a specialized platform. The moment it feels safest to adopt is also when lock-in costs are highest.
·4 min read·EN
The Sovereign Tier: Why Cheap AGI Will Not Save Your Margins
AI is splitting into a commodity tier for routing and a sovereign tier for synthesis. Architect for infinite cheap frontier access and your margins are exposed.
·4 min read·EN
The Worker-Model Tier Is the Real Product
Frontier models are R&D showcases. The worker tier is what you actually deploy, and it is starting to absorb the router you built around it.
·4 min read·EN
The Durable Moat in Agent Control Planes
As models improve, a growing share of enterprise value may move to the systems that let agents act safely, observably, and repeatably in real environments.
·4 min read·EN
One Throat to Choke Means No Independent Witness
Eval and observability are moving into the agent runtime. That gives enterprises clearer accountability, but it can also weaken the independent evidence...
·6 min read·EN
The Agent That Can Stop Is the Agent You Can Trust
For higher-risk agent workflows, pause-resume execution changes the trust model: agents can preserve state, request human approval at the risky step, then...
·4 min read·EN
State AI Rules Are Becoming a Compliance Problem Before Federal Law Arrives
Federal AI legislation remains uncertain, while state laws and existing consumer protection powers are already shaping how automated systems are governed.
·4 min read·EN
The Coding Agent Boom Still Needs a Steering Wheel
Coding agent companies are attracting huge valuations, but the next constraint may be the interface that lets humans review, compare, coordinate, and steer...
·4 min read·EN
The GPU Cycles You Already Paid For Are Training Your Next Model
MIT's TLT uses idle RL training compute to train adaptive drafters and accelerate long-tail rollout generation.
·4 min read·EN
Shadow A2A: Why Local Agents Can Look Like an Intrusion
Unsanctioned agent-to-agent traffic can resemble lateral movement unless local-first agents expose identity, audit records, and policy hooks.
·4 min read·EN
Singapore Is Moving Agent Governance From Debate to Implementation
Singapore's KYA framework gives regulated finance teams a concrete agent governance artifact to evaluate while Western timelines remain contested.
·4 min read·EN
The Zero-Human Company Still Has Humans Somewhere
A repo named paperclip selling zero-human orchestration is a narrative signal. The real question is where human judgment moves.
·5 min read·EN
Stop Summarizing Your Context. Start Querying It.
Recursive Language Models suggest a different approach to long-horizon memory: keep raw context addressable, then use scripts and sub-LLMs to query it when...
·5 min read·EN
Stop Using Claude as a Search Engine
Claude burns expensive input tokens when you use it for full-text search. Put the corpus in NotebookLM, send Claude only retrieved answers with citations...
·5 min read·EN
NVIDIA Is Arming Its Own Customers
A $249 Jetson box running Llama 3 locally will not replace enterprise AI infrastructure by itself. But it puts pressure on the low end of the cloud API market.
·7 min read·EN
Your AI Team Should Be a Shadow Company
The first serious enterprise AI team should prototype a lower-cost version of one workflow, not decorate old org charts with tools.
·4 min read·EN
Security Is Becoming an Agent Capability, Not a Wrapper
Codex Security's research preview points to AI application security moving inside the agent stack, where review, validation, and patching can happen closer...
·4 min read·EN
Enterprise AI Optimizes for the Median, and That's the Trap
Enterprise AI can raise baseline performance by turning common patterns into guidance, but it can also constrain top performers when probabilistic signals...
·4 min read·EN
The Cage Is the Point: When Algorithmic Management Becomes Political
Enterprise AI doesn't just shift the performance curve. In bad-faith hands, it becomes a control mechanism that punishes top performers for using judgment.
·5 min read·EN
PDF Accessibility Is the Trojan Horse for Your RAG Pipeline
Compliance-driven PDF tagging looks like a cost line. It can also produce the structural backbone your RAG stack has been approximating.
·7 min read·EN
The Half-Billion Dollar Clock in Defense AI
Scale AI's $500M Pentagon deal shows defense AI splitting into layers: cleared infrastructure, data work, and compute leverage.
·5 min read·EN
The Steering Wheel Is the Moat
Coding agents are getting funded like infrastructure. The harder moat is the interface that lets humans steer many agents at once.
·6 min read·EN
Durov's Inverse: Team Velocity in the AI Era
In AI-native software teams, adding a third engineer rarely solves a delayed project. Removing the net-negative contributor is often the fastest path to velocity.
·7 min read·EN
The First to Submit Writes the Rules
Mythos reads less like a safety warning heeded and more like a first-mover play on CAISI. The labs that submitted first are writing the rules.
·8 min read·EN
The Creative Is the New Targeting
iOS 14.5 killed demographic ad targeting three years ago. AI didn't come for the creative team; it made creative volume the only way back onto the platform.
·6 min read·EN
The Filing Cabinet Fallacy
Infinite context isn't memory and RAG isn't learning. The next moat in AI agents is parametric compression of deployment experience, not bigger vector DBs.
·5 min read·EN
The Number Cannot Be Accused of Bias
Algorithmic outputs launder managerial intent as objectivity. In enterprise AI adoption, top performers are the most exposed, not the most protected.
·4 min read·EN
The Median Is the Trap
Enterprise AI tools encode median judgment as ground truth. They lift the bottom, normalize the middle, and quietly cage the top. The fix is adoption, not model quality.
·6 min read·EN
The Thin Layer Is the Point
Enterprise AI decks sell 'efficiency' because efficiency does not commit to a number. The projects that work do. They also name what they are actually doing.
·3 min read·EN
The Middle Tier Is the Target
Google's Gemma 4 release isn't generosity. It's a targeted attack on the profit pool where GPT-4o-mini and Claude Haiku live.
·5 min read·EN
The Three-Month Gap Is the Moat
DeepSeek's lag behind US frontier labs is being read as weakness. It is the opposite. The gap is the product.
·3 min read·EN
The reliability premium
API frontier models degrade under load exactly when demand peaks. Open-weight's real argument isn't quality. It is predictability.
·3 min read·EN
APAC is writing the rules while the West debates timelines
Singapore shipped the first agent governance framework for regulated finance. The EU is still arguing about 2027 versus 2028. First working standard wins.
·4 min read·EN
Agent security is an identity problem, not a safety problem
MCP's STDIO RCE is not a bug. It is exactly how the protocol was specified. Safety-layer products patch the wrong end. The responses that work treat agents as infrastructure.
·5 min read·EN
Export Controls End at the API
Chip sanctions were enforceable at ports. API access has no port. The US State Department's April 2026 cable marks the moment policy admits it.
·3 min read·EN
Parameters Are a Commodity. Tool Access Isn't.
Google Deep Research Max ships on MCP. Not a proprietary connector. The real AI moat moved from model parameters to enterprise tool access.
·4 min read·EN
AI Tutors Need a Calculator
The UK's 450k-student AI tutoring program will expose a structural bug in pure-LLM STEM tutors. The fix is architectural, not a bigger model.
·2 min read·EN
A2A Is the Next Shadow IT
Enterprise gateways are wiring up to scan agent-to-agent traffic. Local-first A2A without observability will get classified as lateral movement and blocked.
·2 min read·EN
The governance layer eats the framework
Everyone says the agent orchestration layer is the moat. Enterprise IT history says the governance plane above it wins. Kong, Databricks, and Cloudflare are already making the move.
·2 min read·EN
Self-Improving Agents Are Lying to You
Self-modifying agents are only safe with evaluate and rollback discipline. Without an audit trail, self-improvement is just drift with better PR.
·2 min read·EN
The interface is no longer for you
Google, Binance, and Binary Ninja all shipped machine-first interfaces in Q1 2026. Platforms aren't designing for humans anymore. They're designing for agents.
·3 min read·EN
The Model Is Not the Moat. The Improvement Loop Is.
MiniMax hit GPT-5 performance at 10B active params via 100 autonomous optimization rounds. Xiaomi priced at $1/M via hardware integration. The benchmark race is the wrong race.
·3 min read·EN
Agent Memory Is a Billing Problem
Most builders treat agent memory as an organization problem. It is a cost equation. The structure of your memory directly determines your inference bill through prompt caching mechanics.
·4 min read·EN
MCP Is Now Infrastructure, Not a Tool-Hook
MCP crossed 97M installs and landed inside the Linux Foundation's new Agentic AI Foundation. The protocol graduated from experiment to neutral infrastructure, and that changes the calculus for every proprietary agent SDK.
·3 min read·EN
The Swarm Moved Inside the API
Grok 4.20 runs a 4-agent internal swarm before responding. You're no longer calling a model, you're calling an opaque committee. Here's what that means for application-layer builders.
·5 min read·EN
The AI Security Threat Is Already Here: It Just Looks Boring
Three supply chain incidents in six weeks expose a pattern: AI deployment velocity is breaking operational security. The risk isn't rogue superintelligence, it's a compromised pip package.
·2 min read·EN
The Vision Moat Cracked First
Vision APIs are commoditizing faster than reasoning. Qwen-MAX now matches Gemini on real OCR workloads. What this means for AI ingestion pipeline architecture.
·4 min read·EN
The Foundation Model Moat Is Getting Squeezed from Three Directions
Open weights, world models, and state-level regulation are hitting the model layer simultaneously. The durable value has moved to orchestration.
·3 min read·EN
AAIF Is Doing to Agent Orchestration What CNCF Did to Containers
The Linux Foundation's AAIF just standardized the agent orchestration layer. History says proprietary frameworks get steamrolled, and value migrates up the stack.
·3 min read·EN
The Dashboard Is Dead. The API Is the Product.
Domo's MCP Server doesn't add AI to BI. It exits the dashboard business. The headless CMS pattern is repeating in enterprise data, and the companies that survive are the ones that governed their data first.
·4 min read·EN
The Frontier Is Bifurcating
Anthropic leaked a 10T-parameter model above Opus. The AI frontier isn't converging, it's splitting into commodity and ultra-tier intelligence, and most architectures aren't built for that.
·5 min read·EN
Put the SSH Tunnel Inside Your Database Client
Stop managing SSH tunnels manually. A 50-line pattern that lets your Python DB client open its own tunnel via the native ssh binary, ProxyJump, 2FA, and all.
·3 min read·EN
The Moat Is Scar Tissue
Meta reportedly delayed Avocado. Apple pushed Siri. Neither has a compute problem. Frontier AI capability is organizational, not computational, and it doesn't transfer from a hiring spree.
·4 min read·EN
LLMs Don't Run the World. World Models Might.
LeCun's €500M AMI Labs bet isn't a research play, it's a verdict. LLM dominance is domain-specific. Physical reasoning is going a different direction.
·3 min read·EN
The Eval Layer Is Gone. It's Inside the Runtime Now.
Evals and security controls are being absorbed into the agent runtime. The moat is no longer model quality, it's control of the deployment surface.
·2 min read·EN
When AI Safety Moves Down the Stack
Constitutional MCP isn't a security patch. It's an architectural shift that will fracture the MCP ecosystem in two, and eliminate third-party agent firewall services overnight.
·3 min read·EN
When Your AI Agents Go Silent
OpenClaw shipped three security updates in March and April. My 7-agent fleet went offline. Here is what the breakage actually means, and how to build for it.
·2 min read·EN
How AI is Hijacking Our Screens
Are we just computing by the help of AI?
·3 min read·EN
Beyond Price: From Selling Products to Delivering Futures
The shift from low-ticket to high-ticket offerings isn't about adding features, it's about delivering transformation.
·3 min read·EN
Where are we now?
Loops, nature, and the future of humanity.
·2 min read·EN
Are We Heading for an On-Device AI Disaster?
Are we heading for an on-device AI disaster?
·2 min read·EN
Breaking Free from the Learning Loop
Constantly learning can feel productive, but it is often just procrastination.