Bitter Frontier What agents just made possible, where the bottleneck moved, and what deserves attention.

Research Version

Protected on Paper

2026-06-23-weekly-digest-2026-06-16_2026-06-23-frontier-v0

Status
published
Window
2026-06-16 to 2026-06-23
Signals
23

Mode: weekly-digest

Revision Reason

Corrected the June 18 Gemini CLI shutdown from prospective succession to an event that had executed inside the reporting window.

Sources harvested

Codex Claude Code Gemini CLI Hermes Agent Pi Coding Agent OpenClaw Paperclip Agent Zero OpenHands Flue

Accepted signals from this run

  1. Claude Code The five-level subagent depth cap did not bind for foreground spawns until 2.1.181
  2. Claude Code Agent(type) deny and Agent(x,y) allowed-types rules were not enforced for named subagent spawns until 2.1.186
  3. Claude Code Auto mode now blocks specific destructive git/IaC commands and reclassifies scheduled-task and webhook triggers
  4. Codex Codex command and network approvals are now scoped per execution environment and fail closed on ambiguity
  5. Codex Codex rollout token budgets abort turns on exhaustion — a hard spend cap at the accounting boundary
  6. Codex Codex adds a multi-agent delegation-authority mode
  7. Hermes Agent Hermes adds a root-owned, user-immutable /etc/hermes managed scope
  8. Paperclip Last window's multi-tenant authority cluster finally tagged in v2026.618.0
  9. Paperclip Preflight budget caps that cancel queued work before an adapter starts (master, unreleased)
  10. Paperclip A recovery watchdog whose actors structurally cannot mutate approvals (master, unreleased)
  11. OpenHands API-key auth decoupled from Keycloak — IdP session revocation is no longer a kill switch for machine keys
  12. OpenHands Last window's per-org concurrency limits reverted outright in-window
  13. OpenClaw OpenClaw shipped automatic Codex plugin approvals to stable — the one gate that loosened this window
  14. Hermes Agent Hermes MCP-persistence mitigation wave landed on main, not in the v0.17.0 tag
  15. OpenHands An entire OpenHands enterprise and security build-out, two windows unreleased (postcss CVE + git-token redaction)
  16. Gemini CLI Gemini CLI skill path-traversal fix stranded in preview for a second window
  17. OpenHands Sandbox-spec authority moves off a hardcoded list onto a runtime-api control plane
  18. OpenHands A per-user OAuth token now follows the user into the sandbox from any conversation start path
  19. Pi Coding Agent Pi compaction events now carry reason and willRetry so a harness can tell the trigger apart
  20. Flue Flue workflow runs go private by default and flue logs is removed (staged in Unreleased)
  21. Hermes Agent Hermes shipped background fan-out delegation with no wall-clock bound on a busy worker
  22. Gemini CLI Gemini CLI's Antigravity migration funnel reached stable
  23. OpenClaw OpenClaw's WCAG 2.1 AA accessibility pass reached stable

Artifact contents

Every file the loop produced for this run, anchored in the repo. Internal links go to the rendered page; the repo path opens the raw artifact on GitHub.