Vibe Coding Weekly #42
MCP drops the handshake and goes stateless, three open-weight coding models land in six days, and 79% of agent-written PRs are reviewed by the same person who prompted them.
Everything that mattered this week in AI-assisted development, distilled into three headlines, one must-read, and the takeaways behind them.
This week, compiled:
The Big Story: Open weights had their loudest week of the year — DeepSeek retrained V4-Flash until it beat its own larger Pro model on all nine agent and coding benchmarks at $0.14/$0.28 per Mtok, Moonshot dropped 2.8 trillion parameters of Kimi K3, and Kuaishou open-weighted an agentic coder trained inside 100,000+ real executable repositories
The Research: Someone finally measured what agentic coding does to teams — across 25,264 agent-generated PRs, 79% were reviewed and modified by the same developer who prompted the agent. Only one in eight workflows involved a second human
The Trend: Reviewing agent output became its own product surface — Cursor shipped a native iPad app built around watching several agents run, and Copilot’s VS Code Agents window was redesigned around code review sitting next to chat
If you only read one thing this week: MCP shipped its fifth and largest specification since launch, and it deletes the thing every implementation was built around — the
initializehandshake and the protocol-level session are gone, and every request now carries its own protocol version, client identity and capabilities. A remote MCP server that needed sticky sessions, a shared session store and deep packet inspection at the gateway can now sit behind a plain round-robin load balancer, route on anMcp-Methodheader without parsing a JSON body, and let clients cachetools/list. Roots, Sampling and Logging are deprecated, Tasks graduates out of experimental, and a 12-month deprecation policy arrives with it. If you maintain a server, this is your migration weekend. Read more →
The stories this week aren’t hard to find. What’s hard is knowing which ones actually matter before your team asks you on Monday.
In Vibe Coding Weekly I try to cut through that volume so you arrive at the week with context, not anxiety.
I’m Angel Llosa, and my day job is getting these tools adopted inside real companies — the technical wiring and the strategy around it. I read this news wondering what survives contact with an actual engineering team.
LinkedIn · X · Medium
Key Takeaways
DeepSeek made a smaller model beat its bigger one by changing nothing but the post-training: V4-Flash-0731 ships MIT-licensed and ungated with 284B total parameters and 13B activated per token — architecture untouched from the April preview. Every gain comes from a rebuilt post-training pipeline aimed at coding, agents and tool use, and it clears DeepSeek’s own larger V4-Pro Preview on all nine published benchmarks: DeepSWE 12.8 → 54.4, Cybergym 52.7 → 76.7, Terminal Bench 2.1 up to 82.7. Pricing holds at $0.14/M input, $0.28/M output — roughly a third of V4-Pro’s output cost. The caveat worth keeping: benchmarks are vendor-reported on an unreleased harness. Read more →
Agentic coding is quietly becoming a solo activity, and now there are numbers: an analysis of 25,264 agent-generated pull requests across 2,361 repositories found that in 70% of projects fewer than one in five contributors touched agentic workflows at all, 79% of agentic PRs had the same developer both reviewing and modifying the AI’s code, and only one in eight workflows involved more than one human. Courtney Miller’s line is the one to bring to your next team meeting: “Software development is not an isolated task, and writing new code was never the hard part.” Read more →
Kimi K3’s open weights came with a revenue clause, and Moonshot stopped calling it open source: 2.8 trillion parameters, 1.56TB on Hugging Face — and a licence that deliberately drops the “modified MIT” framing used for K2 in favour of “open weight.” Model-as-a-Service operators above $20M aggregate revenue over any rolling 12 months must negotiate a separate agreement with Moonshot before any commercial use; above $20M monthly revenue you owe “Kimi K2” attribution. OpenRouter already serves it across seven providers at $3/$15 per Mtok. Read the licence before you build a product on it. Read more →
Anthropic put its open-weights position in writing — and it isn’t the one the timeline assumed: the company states plainly that it “has never advocated for a ban on open-weights models,” separating opposition to protectionist bans from national security concerns. Its actual asks are chip export enforcement, a crackdown on industrial-scale distillation, and mandatory safety testing for all sufficiently capable models, open and closed. No open-weight release of its own is announced — the only commitment is to ban accounts caught distilling Claude. Published the same week three labs shipped open weights. Read more →
Copilot’s VS Code update makes parallel agents a Git problem instead of a UI problem: the July release adds worktrees with any harness — Copilot, Claude or Codex — so each session runs in an isolated repository copy, and lets a Claude session fork into a peer chat to explore an alternative approach without losing context or re-explaining the problem. The Agents window is rebuilt around reviewing code alongside chat, with subagent tracking showing model and elapsed time. Vision reaches GA, and BYOK models finally arrive in the Agents window after 16 months in the editor. Read more →
The clearest price tag yet on multi-day autonomous agent work: ~$100,000 per result: Anthropic’s Claude Mythos Preview found an improved key-recovery attack on the post-quantum HAWK signature scheme — halving its effective key size — in roughly 60 hours alongside one researcher, and separately produced a 200–800× faster attack on 7-round reduced AES from three days of near-autonomous work needing only three substantive prompts, generating a billion output tokens across refinement. Each cost about $100K in API spend, and humans still burned several hundred hours validating the math. Neither attack touches production systems. Read more →
Subscribers also get Change Management in Agentic AI Adoption — the framework for the conversation that always comes after “we should use AI more”: how to actually move an organization that didn’t ask to be moved. Included with every subscription.
📦 Releases & News
MCP 2026-07-28 comes to Claude — with 950+ connectors, MCP Apps and private-network tunnels
Anthropic — July 28, 2026
Anthropic shipped its support for the new specification the same day the spec landed, which tells you how coordinated this release was. The three changes it calls structural are the stateless core (serverless and edge deployment now viable), a versioned extensions framework covering MCP Apps and Tasks, and authorization hardened against OAuth 2.0 and OIDC for enterprise identity integration. Around that, the connectors directory now carries 950+ MCP servers, plus interactive UI rendering through MCP Apps, enterprise-managed authentication via identity providers, developer observability dashboards, and MCP tunnels for reaching private networks. The pitch is lower friction for developers bringing applications into Claude — the practical read is that the enterprise plumbing landed at the same time as the protocol change.
Cursor ships an iPad app, because watching agents is now a separate job from writing code
Cursor — July 29, 2026
Available on all paid plans, and the design gives away the thesis: sidebar chats stay pinned so you can watch several agents run at once. You get full PR review with comments, checks and approvals, plus a new Inbox surfacing in-progress work and PRs waiting on you. Bitbucket and Azure DevOps support, multi-PR session handling and in-app team switching round it out. The tablet form factor is the signal worth reading — supervising agent runs has become distinct enough from authoring code that it no longer needs a keyboard-first machine.
Copilot code review gets skills and MCP at GA — and Grok 4.5 arrives with a 500K context window
GitHub Changelog — July 28–29, 2026
Two Copilot moves worth separating from the monthly release train. On July 29, agent skills and MCP server support in Copilot code review reached GA across Pro, Pro+, Business and Enterprise: drop a SKILL.md into .github/skills to hand Copilot your repository’s actual review standards, and connect third-party platforms via MCP — with a hard constraint that every MCP tool call in code review is read-only. GitHub and Playwright MCP are on by default, and new attribution shows which comments came from a skill or an MCP source. The day before, Grok 4.5 landed in Copilot with a 500K-token context window, image input and low/medium/high reasoning effort, billed at provider list pricing — GitHub singles out parallel tool dispatch in VS Code and Copilot CLI testing, and it ships off by default for Business and Enterprise until an admin flips it on.
Stacked pull requests hit public preview — and coding agents can drive them
GitHub Changelog — July 30, 2026
The review-workflow answer to agents producing more change than a single PR can reasonably carry. Large changes break into an ordered series of focused layers, each targeting the one below, reviewable in parallel and mergeable in one click with automatic rebasing. It works from the terminal, github.com and GitHub mobile — and from coding agents, through the gh-stack skill (gh extension install github/gh-stack). John Resig’s verdict after using it: “Landing 5 stacked PRs directly to a merge queue all at once! This removes so much friction (and the gh cli tools + agent skill help a ton).”
KAT-Coder-V2.5: an agentic coder trained inside 100,000+ real executable repositories
MarkTechPost / KwaiKAT — July 26, 2026
The interesting contribution here is infrastructure, not the model. Kuaishou’s team built AutoBuilder, a pipeline that constructs executable repository environments from real pull requests, lifting environment construction success from 16.5% to 57.2% and yielding 100,000+ verifiable environments across 12 languages. The open-weight KAT-Coder-V2.5-Dev (35B total / 3B active MoE, Apache-2.0) ships alongside a closed Pro flagship that leads PinchBench at 94.9 against Opus 4.8’s 93.5 and takes second on SWE-Bench Pro — but trails badly on Terminal-Bench 2.1 (60.7 vs 84.6). Buried in the report is the detail every RL practitioner should steal: a sandbox audit found ~16% of training trajectories failed because of the sandbox, not the policy, and fixing it cut that below 2%.
OpenCode ships four releases in five days, almost entirely to keep up with MCP
OpenCode — July 28 to August 1, 2026
A useful barometer of what the new specification costs downstream. v1.18.8 (July 28) added MCP server reconnection after expired SDK sessions, configured OAuth callback ports, and stopped sending deprecated sampling defaults to newer Gemini models. v1.18.9 (July 28) restored compatibility with legacy MCP SDK clients and fixed a desktop navigation crash. v1.18.10 (July 30) brought automatic discovery of available Modal models and repaired malformed saved tabs. v1.18.11 (August 1) stopped MCP SSE connections getting stuck in reconnect loops after server error responses and fixed provider configs with interleaved reasoning fields. Four point releases, one theme.
GitHub hardens both ends of the supply chain in a single day
GitHub Changelog — July 28, 2026
Two announcements, same afternoon, same underlying assumption: machine-speed publishing is now the default threat model. GitHub Actions automatically holds workflow runs for approval when it detects potentially malicious activity, requiring a collaborator with write access to approve through an authenticated web session — “you don’t need to configure this protection; GitHub applies it automatically.” Public repositories on github.com only for now. Separately, npm now scans newly published packages before they become installable, holding them for manual review or blocking them outright depending on the result. The cost is latency: a typical 5-minute delay, past 15 minutes at peak. If you have agents opening PRs against public repos, both of these land on you.
📚 Tutorials and Resources
Stateless MCP has recaptured my interest
Simon Willison — July 31, 2026
The practitioner’s read on the new spec, and the rare Willison post that is squarely about building with agents. His argument is a security one: two HTTP requests condensed into one with no session management is not just simpler to implement on both sides, it is “easier to audit and control” than handing an agent shell access with internet connectivity — which makes MCP the safer architecture for sensitive LLM applications rather than merely the more standard one. He backed it with code in the same week, shipping three tools against the new spec: mcp-explorer for interactively probing MCP servers via uvx, datasette-mcp exposing list_databases(), get_database_schema() and execute_sql(), and llm-mcp-client, an alpha plugin bringing MCP into his llm CLI.
The new rules of context engineering for Claude 5 generation models (editorial inclusion — outside range)
Anthropic — July 24, 2026
Anthropic systematically dismantling the prompt-engineering habits it helped create. Strip the guardrails and let the model use judgement instead of rigid rules; invest in expressive tool interfaces rather than usage examples, because examples now constrain exploration; delete instructions repeated across system prompts and tool descriptions and keep the guidance in the tool spec; trust auto-memory over a hand-curated CLAUDE.md, which should shrink to repo-specific gotchas the model can’t discover on its own. The most actionable reframe: use code, test suites and rich artifacts as the specification instead of markdown prose, and reserve skills for encoding your team’s opinions, loaded through progressive disclosure. If your CLAUDE.md has grown past a page, this is the permission slip to cut it.
💡 Others
Engineering management after the cost of code collapsed (editorial inclusion — outside range)
Karim Jedda — July 20, 2026
The argument is that most engineering management practice was built on an assumption about the cost of producing code that no longer holds. Plumbing and boilerplate are now cheap; verification, specification quality and human accountability are the constraints that survived. Jedda’s prescription is uncomfortable in the right way — stop measuring code output, start ensuring specifications are good enough to be verified against, and make sign-off an act of informed ownership rather than a rubber stamp. Read it next to this week’s finding that 79% of agent PRs are reviewed by the person who prompted them, and the two pieces answer each other.
Nothing works and everyone is euphoric (editorial inclusion — outside range)
Piotr — July 24, 2026
The counterweight to a week of benchmark charts. A Warsaw developer’s observation is that consumer software keeps degrading — banking apps, car infotainment — at exactly the moment every team has frontier models and generous compute. His diagnosis is organizational rather than technical: stability doesn’t move the numbers that appear in corporate decks, so nobody is paid to protect it. He lands somewhere optimistic anyway, betting that individual developers with these tools can now ship better software alone than the org chart can, and that accumulated user frustration is what turns that into a movement.
What is really happening to jobs? Separating AI hype from reality (editorial inclusion — outside range)
Stanford SIEPR — Neale Mahoney, Erika McEntarfer, Karsen Wahal — July 2026
A policy brief from authors carrying White House National Economic Council and Bureau of Labor Statistics credentials, and it refuses both available narratives. The findings: little evidence AI is causing significant job losses right now, aggregate employment impact likely small, productivity effects mixed but generally positive, and firm adoption accelerating very unevenly across the economy. The one concession to the doomers is the one that matters most to this audience — a tough market for recent graduates may be partly attributable to AI. If you manage juniors, that sentence is the whole brief.
Every week, a new model drops. A new agent framework ships. A new “this changes everything” thread goes viral. And you still have actual code to write.
That’s what Vibe Coding Weekly is. For developers, architects, tech leads, and everyone building or managing software in the age of AI.
Clean code and positive vibes,
Angel Llosa
Questions, disagreements, or a story I missed? Just hit reply.
LinkedIn · X · Medium