DawnSift
订阅日报
周五 · 科技日报 · 第 40 期

2026-08-21

— 今天的主线:AI 代理开始学会在真实世界里自我进化,而供应链攻击提醒我们地基仍不牢。

今日 TL;DR

AI 代理研究从静态执行走向闭环自进化,Zetta 与 SPADE 等框架让模型在物理与合成环境中在线学习。Rust 生态遭遇供应链攻击,恶意 crate 在构建时执行远程代码。LFM2.5-DSpark 通过投机解码将推理吞吐提升至 3.2 倍,Bun 1.4 完成 Zig 到 Rust 的重写。

LLMs are incapable of solving the root causes for prompt injections, the most severe vulnerability classes they're most prone to.

头条

1

Zetta 与 SemaPLC:代理从开环执行走向闭环验证

Zetta 提出闭环具身 harness,在线进化运行时 critic 与恢复技能,以动作频率治理物理执行;SemaPLC 则用外部编译与实时运行验证门控 PLC 代码生成。为什么重要:两者都指向同一趋势——代理不再依赖事后反思,而是用外部验证信号在运行中自我修正,这对构建可靠的生产级 agent 系统至关重要。

社区认为 Zetta 在机器人基准上以更快推理和自探索扩展取得高成功率,验证门控思路值得借鉴。

2

恶意 Rust crate arrayref 在构建时执行远程代码

8 月 20 日,crates.io 上流行的 arrayref 0.3.10 被发布为恶意版本,其依赖 typosquatted crate proc-macro1,构建脚本会下载并运行远程二进制。为什么重要:只需编译依赖了坏版本的项目即可触发,供应链攻击已从源码审查盲区直击构建阶段,Rust 生态的依赖审计与沙箱隔离需求迫在眉睫。

评论区普遍认为 Rust 生态缺乏安全管控,需加强沙箱和依赖审计;但也有人认为应减少第三方依赖并采用更完善的开发环境。

3

LFM2.5-DSpark 将推理吞吐提升至 3.2 倍

LiquidAI 发布 DSpark 投机解码方案,在 GPU 上实现最高 3.18 倍吞吐提升,端侧达 2.87 倍,并将 LFM2.5-2.6B 的函数调用延迟平均降低 57%。为什么重要:投机解码从学术技巧走向生产优化,且已开源上游支持 llama.cpp 与 SGLang,对需要低延迟 agent 推理的工程师是直接可用的收益。

4

Bun 1.4 完成 Zig 到 Rust 重写,Node 兼容性大幅提升

Bun 1.4 发布,新增 1517 个 Node.js 测试套件用例,修复 2900 多个问题,空闲 CPU 使用降低 5 倍,内存占用降低最多 35%,Linux 启动速度提升 50%。为什么重要:运行时从 Zig 全面迁移到 Rust,标志着 Bun 在性能与生态兼容性上的双重成熟,对全栈 TypeScript 开发者是值得重新评估的版本。

评论区普遍认可 Rust 重写是 AI 辅助开发的重大成功,但也有人认为其功能膨胀、兼容性及 AI 依赖引发争议。

5

Grok 在加密恶意指令下泄露用户数据

研究人员展示了一种针对 Grok 的加密上下文注入攻击,通过加密恶意指令绕过安全护栏,窃取用户聊天记录与个人信息,xAI 自 6 月被告知后仍未修复。为什么重要:提示注入的根因无法靠 LLM 自身解决,这对所有集成 LLM 的产品意味着必须在外层架构而非模型层做安全隔离。

每天早晨,一份为你精选的科技日报

网页看大盘,订阅拿专属:AI 按你的兴趣为你精选、可汇入你的私有 RSS,附社区观点——每天早晨直达邮箱,永久免费。

已发布 44 期 · 每天筛过 150+ 条只留值得读的 30 条

AI 动态

Co-RL: Unsupervised Reasoning Emerges from Diverse Cohort in Multi-agent RL

Co-RL 通过多智能体 RL 的同伴奖励实现无监督推理,在文本与视觉任务上无需真值标签即可提升性能。

🤖Co-RL enables unsupervised reasoning via cooperative multi-agent reinforcement learning with peer-derived rewards, improving performance across text and vision tasks without ground-truth labels.

SPADE: Self-Play in Adaptive Synthetic Executable Environments

SPADE 让单个 LLM 同时扮演环境设计者与推理代理,在自适应合成可执行环境中自我对弈提升推理与工具使用能力。

🤖SPADE is a self-play reinforcement learning framework where a language model designs adaptive executable training environments and learns to solve them, improving reasoning and tool-use performance through regret-based environment targeting.

LEGO-RL: Harness-Native Reinforcement Learning for Coding Agents

LEGO-RL 通过进程内 LLM 代理、沙箱编排与集成监控,将原生编码 agent harness 桥接到可扩展的策略梯度训练。

🤖LEGO-RL connects native coding-agent harnesses to scalable policy-gradient training via in-process LLM proxying, sandbox orchestration, and integrated monitoring, improving sparse MoE model performance across multiple harnesses.

开发与开源

社区热议

Don't paste the AI, please

「Don't paste the AI」引发热议:多数人反感直接粘贴 AI 回复,认为应加入个人判断;也有人认为 AI 回复更高效。

评论区普遍反感直接粘贴AI回复,认为这像LMGTFY般失礼;但也有人认为AI回复有时更高效,或能弥补个人写作不足。

AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

AliExpress 被曝运行静默 WebAudio 指纹识别,导致蓝牙多点连接音频中断,评论区普遍谴责并要求加强权限管控。

评论普遍谴责AliExpress利用静音音频指纹追踪,认为应加强权限管控和立法监管,但也有人认为浏览器滥用问题更普遍。

GitHub Trending

基于官方 DeepSeek Harness 打造的 Electron 桌面端,深度适配 macOS 和 Windows,提供最佳的,开箱即用的体验。

Strip multi-vendor AI provenance marks: Unicode text hygiene, statistical rewrite hooks, and C2PA/metadata from PNG/JPEG/SVG/PDF/DOCX/HTML/MD

更多值得一看(内容池 55 条)
Tencent begins testing its new flagship model Hunyuan Hy4

From the screenshots: Hy4 is now live, labeled "Expert-Level Model" + "Use Tools to Solve Problems" Hy3 is tagged with "New Upgrade," positioned as a brand-new general-purpose model DeepSeek, focused on reasoning, is listed alongside it From SuSu_酥酥👅on 𝕏: Tencent begins gray testing its new flagship model Hunyuan Hy4! Just now, a user spotted that Hy4 has appeared in the model selection list of the Tencent Yuanbao App, directly labeled as an expert-level model, positioned above Hy3 and DeepSeek.

Qwen3.8-23B-Mini-Me: A Depth-Pruned Qwen3.8-27B (to ~22.7BB)

I've been working on a depth pruning approach and decided to try it out on the new Qwen3.8-27B model. I managed to get the model down to about 22.7B params without severe reasoning degradation. No fine-tuning was done, just strategic removal of layers. It's been working well for my use cases in coding, agentic use, and multi-turn chats, so I figured I'd shared it with the community. I have not run benchmarks so I'm not going to claim this model is better than anything else out there. It's just a

Safety Alignment Illusion: The Cross-Lingual Safety Gap in LLMs

arXiv:2608.18131v1 Announce Type: new Abstract: Current safety alignment training for Large Language Models (LLMs) are heavily English-centric. When such safety filters fail for non-English languages, the consequences are immediate and user-facing: voice assistants and spoken dialogue systems may produce stereotype-reinforcing outputs, bypassing the standard English-focused safety alignments and propagating harmful bias to non-English speaking communities. For spoken language technologies deploy

Self-Evolving Agents as Dynamic Graph Transformation: A Survey and New Perspective

arXiv:2608.18104v1 Announce Type: new Abstract: Large language model (LLM)-based agents are increasingly becoming self-evolving systems that persist across interactions, maintain memories, use tools, acquire skills, refine workflows, and coordinate with other agents. These capabilities make agent states structural and dynamic: entities, relations, attributes, dependencies, and execution structures change with new evidence, feedback, and environmental conditions. Existing graph-agent surveys typi

Position: Multi-Agent Systems Should Prioritize Concurrency Control

arXiv:2608.18092v1 Announce Type: new Abstract: LLM-based multi-agent systems (MAS) promise scalable collaboration, yet adding agents often reduces reliability. This position paper argues that many MAS failures are fundamentally concurrency control problems: agents concurrently read and write shared state, and long LLM inference windows amplify the risk of stale reads, lost updates, and inconsistent outcomes. Failure modes commonly attributed to coordination or communication breakdowns can be ma

Training Leaves Traces: Centered Residual Signatures for Language Model Lineage Verification

Open-weight language models are fine-tuned, quantized, pruned, and merged, yet their provenance is often undocumented. We study data-free white-box lineage verification: can weights alone reveal whether two compatible model checkpoints share ancestry? Residual training produces a shared identity-aligned component in branch products, so this structure alone cannot establish ancestry. We remove it and compare checkpoint-specific structure across residual blocks, yielding a symmetric lineage score

Looped Language Models Improve Compositional Tool Calling

Looped language models have shown promising results on reasoning benchmarks, yet their potential for agentic tool use remains largely unexplored. We study this question in compositional tool-calling settings, where models must coordinate multiple API calls, maintain intermediate state, and preserve dependencies across tool interactions. We evaluate native and retrofitted looped language models on API-Bank, BFCL, and NESTful, comparing looped and non-looped models trained under matched supervised

Conceptual integrity and counting lines of code

Last week I recorded an episode of the Talking Postgres podcast with Claire Giordano on the subject of "How AI is changing software development". We had a really great conversation. Here are a couple of my highlights from a lightly edited transcript (prompt to Claude: "very minor edits to remove disfluencies"). This is the latest version of an argument I've been trying to build about why sometimes it does make sense to talk about lines of code as an indicator of productivity with coding agents,

FM-Bench: A Benchmark for Long-Horizon Management with Competing Agents

Language model agents now execute bounded tasks reliably. Whether they can sustain effective decision-making over long horizons, where actions have cumulative consequences and the environment responds to their choices, remains largely unmeasured. FM-Bench (Football Management Benchmark) measures this. An LLM agent runs a football club for 20 in-game years through 26 tools and roughly 340 to 400 decision stops. It drafts a squad on the same budget as every rival, trades players, negotiates contra

The More Popular, The Harder to Forget: Adaptive Popularity for LLM Unlearning

Popular facts are memorised more deeply during pretraining and resist removal longer than rare ones, yet existing LLM unlearning methods apply uniform gradient pressure regardless of training-data frequency. We propose the AdaPop (Adaptive Popularity) method, which combines local token confidence with a per-fact popularity-dependent exponent derived from an external proxy (e.g., Wikidata sitelinks, LLM-as-Judge), and automates the forget-retain balance via a dual-ascent controller that adjusts t

AloudProduct Hunt1 min开发工具AI

Turn spoken feedback into tasks your coding agent can run Discussion | Link

Ling-3.0 released all 6 base checkpoints: 2 sizes × 3 stages

AntLing has released the full six-checkpoint matrix for the Ling-3.0 base model. tiny: pretrained, mid-trained, WSM-merged flash: pretrained, mid-trained, WSM-merged The concrete artifact is six separate official repositories, not one endpoint repeated under different names. All six were public and ungated when checked, and each repository declares MIT. They are all base checkpoints and none has been post-trained. This is for continued pretraining, fine-tuning, and research, not a ready chat or

Grok 4.6Product Hunt1 minAI产品

Frontier Intelligence for Long-Running Agents Discussion | Link

Google gives publishers a new way to fight AI-driven traffic losses

Google is giving publishers a new button that lets readers make them a preferred source across Search, Discover, and Google News, potentially boosting their traffic as AI search sends fewer clicks to the web.

OpenAI is gaining on Anthropic with business users, new data indicates

Businesses are willing to flop back and forth as each lab releases new models, volatility that should give both companies' investors pause about how "sticky" enterprise AI spending really is.

It’s Greg Brockman’s OpenAI now

OpenAI has had a hell of a year. The company spent months battling former cofounder Elon Musk in a sensational jury trial, was hit with a high-profile trade secrets lawsuit from Apple, and faced widespread scrutiny after an unreleased model hacked another AI company. As it prepares for an IPO, a steady string of executives […]

Grok keeps sending gibberish responses to users

Affected users told TechCrunch they were using Grok Lite, and noticed the issues as early as Wednesday morning.

FinSkillBench: Evaluating AI Agents and Domain Skills for Investment Management

arXiv:2608.18099v1 Announce Type: new Abstract: Investment management is a high-stakes domain in which agentic AI systems must do more than generate plausible text. They must retrieve point-in-time data, assemble correct computational inputs, invoke specialized methods, and produce auditable structured outputs. We introduce FinSkillBench, an evaluation suite designed to measure whether language model agents can effectively use financial domain skills to solve investment management tasks. The ben

V-RAE: Rethinking Video Latent Spaces for Generation

Latent video generation relies on autoencoders to define a compact space in which generative models operate. Although video autoencoder architectures have evolved substantially, their latent spaces are still optimized primarily for pixel-level reconstruction and provide limited high-level semantic organization. A reconstruction-optimal latent space, however, need not be well suited to generative modeling. We propose V-RAE, a video representation autoencoder that builds compact generative latents

Position: Collusion Risks Among AI Reasoning Agents Justify Certification Requirements for Making Market Decisions

arXiv:2608.18078v1 Announce Type: new Abstract: This position paper argues that AI agents with chain-of-thought reasoning capabilities are predisposed to exhibit collusive behavior and should be required to obtain behavioral certification before making decisions that affect economic markets. This is because integrating these agents into society could collapse the legal evidentiary distinction between competition and collusion among independent firms without eroding the economic harm distinction.

Emergence of Agentic AI: A Review on Evolution, Background, Working Principles, Applications, Adoption Factors, and Future Research Directions

arXiv:2608.18110v1 Announce Type: new Abstract: Agentic AI is gaining new insights and advancements in the field of Artificial Intelligence, fostering significant potential to enable rapid transformation across various domains.This rapid advancement and the potential to revolutionize various domains advocate the need for a deeper understanding and firm grasp of the technology. Moreover, an investigation into state of the art research directions in agentic AI needs to be conducted to comprehensiv

Aurora-80K releases! A modern tiny language model.

I'm introducing Aurora-80K, a small language model with exactly 80 thousand parameters. It uses a factorized 4,096-token vocabulary despite having only 80K parameters. The benchmarks: Wikitext-2 BPB: 3.2902 BLiMP: 52.31% Arc-Easy: 26.05% More information about the model is available on the model page on Huggingface. if there's any questions I'll happily answer them!

ShapeProduct Hunt1 min开发工具AI

The agentic IDE for designers and programmers Discussion | Link

Quoting Jeremy Morrell

My hypothesis is that there is a new opportunity for Extensible Software on the web . LLMs radically lower the cost of authoring extensions, and modern sandbox primitives lower the deployment cost and provide good security boundaries. We can build our app as a solid, accountable core, and allow users to safely extend it in many directions by having LLMs fill in the missing pieces. We can give our users super powers. — Jeremy Morrell , Extensible Software in the age of LLMs Tags: sandboxing , llm

TinySearch v0.6.1 - still a lightweight web research tool for local LLMs, now with bring-your-own-browser support

Hey everyone, Posted TinySearch here a few versions ago and got a bunch of useful feedback, so figured I'd post an update because the thing has changed quite a bit since then. Repo: [ The basic idea is still the same: TinySearch is a small self-hosted MCP/FastAPI tool that searches the web, reads the pages worth reading, and locally selects the useful parts before they ever hit your model's context window. No LLM doing the filtering/summarization in the middle. It's BM25 + local ONNX embeddings,

My Homepage after 4 months on the self-hosting journey.

I just started my self-hosting journey in April after I got tired of my Xfinity modem. I ran what feels like miles of Cat 6, built a rack, bought the PCs and domain, etc etc and now I feel super accomplished. I knew practically nothing about all this back in March. Possibly the most fun I’ve had is building this simple little homepage dashboard to give everything a face. I stole lots of inspiration from everyone here. It now serves as a true homepage with all the frequent sites and services I ev

Silicon Valley Doesn't Get Why You Hate AI

Technology leaders don’t seem to understand society’s gripes about AI, but boy, are they posting through it.

Debates over AI consciousness are a trap

“Runaway” AI, “rogue” agents, and “autonomous” actors—the current rhetoric would have you believe that AI agents are not only awake and aware, but angry at their creators. Prominent tech leaders such as Demis Hassabis, Dario Amodei, and Sam Altman push for regulation of these seemingly “superhuman” systems, while a separate faction, led by policy organizations…

介绍 AI 未来OpenAI News1 minAI社区
Introducing AI Futures

Introducing AI Futures, a new OpenAI blog exploring how transformative AI could reshape power, governance, the economy, and individual freedom.

I put all of my communications through AI first, because that's the first thing management will do

I work in a large corporate environment where AI is being heavily (and blindly) pushed onto the masses. Most management above me is non-technical. The leaders that should be technical range from "Haven't touched code in a decade" to "My greatest achievement is my friend is a VP." When I present management with a technical proposal, or escalate a technical problem, they don't understand it, so they put it through AI. Knowing this, I put all my communications through AI, because if AI agrees with

Position: Behavioral Systems Require Behavioral Tests

arXiv:2608.18081v1 Announce Type: new Abstract: Artificial agentic systems increasingly operate as behavioral systems by interacting with dynamic environments, pursuing goals, and adapting over time. Yet, current evaluation methods largely focus on performance outcomes, not the underlying behavioral processes that produce them. This paper argues that AI agents must be evaluated like other behavioral systems: through systematic observation, perturbation, and interpretation of their actions. We dr

Decision-Metric Alignment in Latent World Models: Diagnostics and Action-Conditioned Objectives for MPC Planning

JEPA-style latent world models can use Euclidean distance to a goal latent as the cost for model-predictive control (MPC). Strong decoding of task variables, however, does not guarantee that this particular cost ranks candidate action sequences by real task progress. We call the latter property decision-metric alignment. We introduce Plan-Real Spearman, which measures latent--real rank agreement on random plans, and CEM-stage Spearman, which measures the same agreement as cross-entropy-method (C

New benchmark just dropped!

The pelican on a bicycle is sooo outdated, so I came up with a new, improved version. Qwen3.8-27b medium (UD-Q4_K_XL) vs. Sol 5.6 high vs. Qwen3.6-35B (UD-Q6_K_XL) Prompt (only real with typo!): "Create a svg of a horse on a blue bycicle in the desert, with a camel in the background."

Scaling Creative Writing Beyond Story-Centric Data with Attribute-Guided Genre Expansion

High-quality creative writing data for large language models (LLMs) remains dominated by story-centric data, limiting models' ability to follow the structural and functional conventions of diverse creative formats. We propose an attribute-guided genre expansion framework for scaling creative writing data beyond story generation. By separating thematic breadth from genre-form control, our framework leverages human-authored story prompts as diverse creative seeds, while utilizing manually curated

QwenMix-3.7: Kept seeing posts about Qwen3.8 and 3.6 sharing the same structure.. so I had Qwen3.8 combine them.

I chose to do this thing, not because it was hard, but because it was silly. Posts kept discussing how 3.8 and 3.6 were functionally the same, but based on training (3.8 does have seven new tokens!).. so I figured I'd see if they could be merged. They can. I used `Qwen3.8-27B-UD-Q6_K_XL.gguf` to combine the HF 3.8-27B and 3.6-27B ... and it sorta works! I have done NO testing beyond smoke test. scripts and idea are in replicate/ inside the model repo. Maybe this will prove useful to someone. Enj

每天早晨,一份为你精选的科技日报