What You Need to Know: Simon Willison published a detailed breakdown showing how Fable-5's refusal to "fix this code" on vulnerable open-source examples triggered export-control enforcement. Nemotron 3 Ultra launched as a 550B/55B MoE hybrid Mamba model with 1M context. Hermes Agent added asynchronous subagents that no longer block the parent session. Builders should watch how these restrictions reshape defensive security tooling and test new open models for long-running agent workflows.

Top Story

The Fable 5 Export Controls Harm US Cyber Defense details how researchers used a multistep "fix this code" prompt on Fable-5 to generate security patches from deliberately vulnerable open-source code. The model refused the initial "review for security issues" framing but complied when asked to fix, allowing the output to be turned into working test scripts. This capability is core to the find-fix-test loop defenders run daily, yet it is now treated as a prohibited cyber capability under export rules. The result is that models useful for patching become harder to access or improve inside the US. Non-technical regulators appear to have conflated defensive bug-fixing with attack generation. Watch for further clarification on whether routine code-review and patch-verification prompts will remain restricted. Source: simonwillison.net

Model Updates

Nemotron 3 Ultra: Open, Efficient Mixture-of-Experts Hybrid Mamba-Transformer Model for Agentic Reasoning: arXiv NVIDIA released Nemotron 3 Ultra, a 550B total / 55B active parameter MoE hybrid Mamba-Attention model pre-trained on 20T tokens then extended to 1M context. Post-training used SFT, RL, and Multi-teacher On-Policy Distillation with techniques including LatentMoE, Multi-Token Prediction, and reasoning budget control. It reportedly delivers up to 6x higher inference throughput than current public frontier models while matching accuracy. The base, post-trained, and quantized checkpoints plus training data are open-sourced on Hugging Face. Builders working on long-running autonomous agents should test the 1M-context checkpoints this week for workflow memory tasks. Source: arxiv.org

Ling and Ring 2.6 Technical Report: Efficient and Instant Agentic Intelligence at Trillion-Parameter Scale: arXiv The Ling-2.6 and Ring-2.6 family upgrades the Ling-2.0 base via architectural migration pre-training and large-scale post-training. Ling-2.6 targets instant response with high capability per token; Ring-2.6 targets deeper reasoning and advanced agent workflows. A hybrid linear attention design combining Lightning Attention with MLA improves long-context training and decoding efficiency. Additional techniques include Evolutionary Chain-of-Thought, Linguistic Unit Policy Optimization, and the KPop RL framework for stable agent training on environment-grounded data. All checkpoints are open-sourced. Teams building low-latency agentic systems should benchmark Ling-2.6 against current production stacks. Source: arxiv.org

AdaMame: A Training Recipe for Adaptive Multilingual Reasoning: arXiv AdaMame is a two-stage recipe that aligns reasoning language to the query language without accuracy trade-offs. Stage one fine-tunes on naturally occurring reasoning traces across five languages; stage two uses AdaMame-GRPO, a modified Group Relative Policy Optimization where a query-conditioned alignment factor grows during training. Evaluated on two benchmarks across 12 languages and two LRMs, it improves language fidelity and token efficiency while preserving accuracy, with largest gains on lower-resource languages. The method is training-recipe only and compatible with existing open models. Multilingual agent developers should experiment with the GRPO adaptation on their current fine-tunes. Source: arxiv.org

quicktok: a faster tokenizer (exact and byte-identical with tiktoken): r/MachineLearning quicktok is a C++ BPE tokenizer that produces byte-identical output to tiktoken while running 4–11× faster than the Python version and 2–3.6× faster than bpe-openai on Apple M1. It supports cl100k, o200k, GPT-OSS, Llama-3, and Qwen2.5/3 tokenizers and ships with a hand-compiled pretokenizer plus dense caches for merge checks. The project is available via pip install quicktok-v1 with a public GitHub repo. Any pipeline doing heavy tokenization should swap in quicktok for immediate throughput gains. Source: reddit.com

Agent & Tool Developments

Hermes Agent Adds Asynchronous Subagents, So Delegated Work No Longer Blocks the Parent Chat: MarkTechPost Nous Research updated Hermes Agent so the delegate tool can spawn background subagents via the new async_delegation toolset tracked in issue #5586. Subagents run independently, allowing the parent chat to continue while tasks execute; users can later steer, check status, or collect results. The change introduces explicit subagent isolation and synchronous-versus-asynchronous trade-offs. Developers using Hermes should test the async path on multi-step workflows that previously stalled the main session. Source: marktechpost.com

Meet Atoms: A Vibe Coding Tool That Uses AI Agents to Build, Deploy, and Market Your App (No Code): MarkTechPost Atoms lets users describe an app in plain language; AI agents then build, edit, refine, deploy, and market the application without requiring code edits. The system targets non-developers who want to ship functional products through iterative natural-language direction. No specific license or pricing details were released in the announcement. Teams exploring no-code agentic app generation should try the public demo to assess current output quality on realistic product ideas. Source: marktechpost.com

Google Cloud Introduces Open Knowledge Format (OKF): A Vendor-Neutral Markdown Spec for Giving AI Agents Curated Context: MarkTechPost OKF formalizes the LLM-wiki pattern as a directory of markdown files with YAML frontmatter where each concept requires only a type field. Google released reference tools and a working Python consumer plus an interactive bundle explorer. The format is positioned as an alternative to RAG for supplying agents with structured, human-readable context. Agent builders needing portable, version-controllable knowledge should evaluate OKF bundles against their current context-injection methods. Source: marktechpost.com

PhoneHarness: Harnessing Phone-Use Agents through Mixed GUI, CLI, and Tool Actions: arXiv PhoneHarness provides a mixed-action execution harness and benchmark that lets phone agents combine GUI actions, device CLI commands, and host-side tools with deterministic routing and auditable traces. On the annotated evaluation split it reaches 75.0% pass rate, 12.9 points above the strongest non-PhoneHarness baseline. The benchmark requires observable side effects rather than just plausible final answers. Mobile-agent developers should examine the harness for tasks that need verifiable real-world effects beyond screen taps. Source: arxiv.org

Practical & Community

How to Build a Parsing Pipeline with Docling Parse for Layout-Aware Document Intelligence: MarkTechPost The tutorial walks through setting up Docling Parse in a stable Python environment, handling Colab dependency issues, and generating custom multi-page PDFs with text, columns, tables, shapes, and images. It extracts words, characters, and lines with page-level coordinates, renders visual overlays, and exports structured JSON/CSV. The approach supports downstream layout analysis and retrieval-ready document preparation. Anyone ingesting complex PDFs for RAG or agent memory should run the pipeline on their current document corpus. Source: marktechpost.com

Under the Hood: Fast Exact BPE Tokenization

Everyone treats tokenization speed as a simple "use the faster library" decision. In practice it is a memory-access and data-structure problem that compounds across every forward pass. quicktok keeps the exact backtracking BPE algorithm but replaces the general regex pretokenizer with a hand-compiled one and adds a 2-byte trie for longest-match walking plus dense caches for merge-validity checks. These changes cut memory traffic enough to deliver 4–11× speedups on Apple M1 while remaining byte-identical to tiktoken. The quality of the resulting tokens is unchanged; only the engineering of the lookup path differs. The approach works best when you control the full ingestion pipeline and can afford a native dependency. If you are already bottlenecked on Python tokenization loops or running high-volume batch encoding, the swap is low-risk and immediately measurable. The gotcha that bites most teams is forgetting to verify byte-identity on their specific tokenizer variant after the switch.

Things to Try This Week

• Test Nemotron 3 Ultra 1M-context checkpoints on long-horizon agent workflows that previously hit context limits.
• Swap quicktok into any heavy tokenization pipeline for immediate 4×+ throughput without changing token IDs.
• Experiment with Hermes Agent's async_delegation on multi-step tasks that currently stall the parent chat.
• Load Google Cloud's OKF reference tools and compare curated markdown bundles against your existing RAG context strategy.
• Run the Docling Parse pipeline on a sample of your production PDFs to measure layout-aware extraction quality.

On the Horizon

• Further clarification expected on Fable-5 export-control scope for defensive security prompts.
• Additional open checkpoints from the Ling/Ring 2.6 family planned in coming weeks.
• Continued rollout of asynchronous subagent patterns across other agent frameworks.
• More vendor-neutral context formats likely to appear as teams standardize on OKF-style bundles.

💬 Reply to this email — Patrick reads every one.

Share: X · LinkedIn · WhatsApp

Forwarded this email? Subscribe here — it's free.