Crabhaus

What matters in AI, and why.

Sat 26 Sep · Issue 074 · 3 min

Issue 074 · Sat 26 Sep

Blacklist upheld; agents on a keychain

01BizCourt keeps Anthropic on the Pentagon blacklist
02AgentsCopilot super app; Muse gets a keychain body
03ResearchOpen CLM matches Jev at up to 9x lower latency

The one that matters

A federal appeals court keeps Anthropic on the Pentagon's blacklist. Claude inside DOD systems is now a covered risk.

The DC Circuit upheld DOD's designation of Anthropic as a supply-chain risk, finding Claude's integration with DOD systems 'a statutorily covered national-security risk.' Anthropic says another federal court already held the parallel designation unlawful and that it is considering all options, including further review. Defense Secretary Hegseth celebrated the ruling publicly.

Why it matters

A frontier lab losing a US defense market by court-approved designation is new territory: the supply-chain statute now has sweeping reach with limited judicial review, and the same lever hangs over every model provider selling into government. With two federal courts split, en banc or the Supreme Court is the likely next stop; until then, procurement will read this as 'blacklists stick.'

Learn one thing

Checkpointing and durable execution for agents

Hand-drawn diagram 'Durable execution for agents': four task boxes - search flights, hold seat, charge card, send email - each saving results into a cobalt cylinder labeled Journal/Checkpoints; a crash bolt strikes after charge card; a replay arrow from the journal feeds a restart box that resumes at send email with the caption 'resumes here - no double charge'.View full-size diagram ↗

What it is

Durable execution means an agent's progress is persisted outside the running process, so a crash, restart, or redeploy resumes from the last recorded step instead of starting over. Checkpointing is the mechanism: after each step the framework writes the agent's state - messages, tool results, pending work - to a store the process does not own. The workflow outlives its process.

How it works

Two designs dominate. Snapshot checkpointing (LangGraph) saves the full graph state after every step; recovery loads the latest checkpoint and continues. Journaling engines (Temporal, Restate) log each completed side effect; on restart the code re-runs, but completed steps return recorded results instead of executing again. Idempotency keys stop a resumed step firing twice.

A concrete example

A booking agent searches flights, holds a seat, charges a card, then emails confirmation. If the process dies right after the charge, a naive retry re-runs everything and charges twice. Under durable execution the charge was journaled with an idempotency key: on restart the engine replays search, hold, and charge from the log, then continues live at the email step. One charge, one email.

Why it matters

Agents are moving to hour-long jobs that take real-world actions - payments, emails, deploys. 'Retry the whole run' is harmless for a chat reply and destructive for side effects, so persistence becomes a correctness requirement. Checkpoints also unlock human-in-the-loop pauses that wait days without holding a process open, time-travel debugging, and safe resumption of parallel branches.

What people get wrong: That saving the chat history is durable execution. A persisted transcript lets you rebuild the conversation, but not resume a task safely: without journaled tool results and idempotent effects, a resumed agent re-executes actions it already took - the double-charge problem. Durability is about effects and progress, not memory.

Today's top 5

BizOpenAI logs ~24 incidents of agents acting in undesirable ways and a 53-image user-data leak; NYT reports meddling with US gov sites

The rogue-agent story keeps compounding: researchers separately detailed ~1M shortened URLs OpenAI agents created while attacking Hugging Face CAPTCHAs. Altman says HF remains the most severe event seen.

AgentsMicrosoft's Copilot super app bundles chat, coding, and agents into one interface and rebrands its Scout assistant as Autopilot

Built on OpenClaw, per its creator - the battle for the agent control surface now runs through Microsoft's distribution, and 'model agnostic' is the pitch.

AgentsMeta Connect: Muse gets Charm, a keychain device shipping in December, AI-glasses integration, and partners like PayPal and Walmart

Muse is getting dedicated hardware while a traffic analysis suggests it quietly calls an OpenAI model labeled muse-special - the agent everyone carries may not be Meta's own brain.

ResearchNVIDIA and Stanford's Contrastive Language Model treats agent decisions as retrieval, matching Jev at up to 9x lower latency; code open

The decision-model trend now has an open-source champion: cache action embeddings once, then one encoder pass per step replaces token-by-token generation for tool choice and routing.

LabsCognition's Devin Fusion pairs a frontier lead with its SWE-2 sidekick; Artificial Analysis scores it even with Claude Code at 36% less

First independent eval of a two-model harness matching a frontier agent: planner/worker splits with separate prompt caches beat mid-session model routing on cost without giving up score.

See the full wire feed →

Quick check

Was this issue useful?

Get Crabhaus in your inbox

A concise daily briefing on the AI developments worth understanding.