Building with agents
May 2026
-
Coding agents In the briefing →
Anthropic — Claude Code v2.1.158: *dynamic workflows* research preview lets Claude write orchestration scripts that spawn tens-to-hundreds of parallel subagents in a single session for large-scale migrations and multi-repo engineering work; Opus 4.8 is now the default high-effort model in Code. (source)
-
Coding agents In the briefing →
Anthropic — Claude Code plugins in
.claude/skillsnow auto-load without marketplace setup;claude plugin init <name>scaffolds new plugins locally; auto mode available on Bedrock, Vertex, and Foundry for Opus 4.7/4.8 viaCLAUDE_CODE_ENABLE_AUTO_MODE=1. (source) -
Coding agents In the briefing →
[2026-05] AWS Kiro — new *spec validation* feature uses formal methods to check requirement specs for internal contradictions before any code is generated, targeting underspecified-prompt "AI slop"; parallel task execution reportedly cuts large-project time by ~75% per AWS. (source)
-
MCP — 2026-07-28 release candidate locked: protocol goes stateless (no session handshake; every request is self-contained with protocol version and capabilities in
_meta), enabling plain round-robin load balancing;Mcp-Method/Mcp-Nameheaders allow gateway routing without body inspection; *MCP Apps* adds sandboxed HTML UIs served by tool servers. Final spec targets July 28. (source) -
[2026-05] NSA — published MCP security guidance (CSI PP-26-1834) recommending mandatory OAuth 2.1 per server, network segmentation for MCP traffic, and prompt-injection defenses; timed alongside rapid enterprise MCP adoption. (source)
-
[2026-04→05] OX Security — disclosed a systemic RCE design flaw in the MCP STDIO transport affecting all official SDKs (Python, TypeScript, Java, Rust) and ~7,000 public servers (150M+ download supply chain); CVE-2026-33032 (CVSS 9.8) in nginx-ui; Anthropic confirmed the behavior is intentional and declined to modify the protocol, placing sanitization responsibility on developers. (source)
-
AI-assisted SDLC In the briefing →
Microsoft — Build 2026 (June 2–3, San Francisco) preview: Windows Agent Framework (WAF) to be open-sourced under MIT with APIs embedding autonomous agents in the OS shell and security model; GitHub Copilot agent mode ships specialized sub-agents for testing, docs, security scanning, and review running in parallel inside VS Code. (source)
-
AI-assisted SDLC In the briefing →
[2026-05] Sonar — 2026 State of Code survey: 96% of developers don't fully trust AI-generated code, yet only 48% always verify it before committing; AI now accounts for 42% of all committed code, with developers predicting 65% by 2027 — the "verification gap" is the emergent bottleneck. (source)