Notes from a CTO who has to put agents into production. Every post says what I ran, what it cost, and whether I'd use it.
MCP skills ship in the official TypeScript SDK 2.4. I ran them, and a hostile server's prompt injection still came back verified: true. Here is why.
Kimi K3.1 Pro: 3T-class, weights promised for Nov 4, not shipped. Price, hardware maths, reactions, and Anthropic SDK code that follows Moonshot's docs.
The Goose programming language has no GC and no lifetimes, and an AI wrote its compiler from a human design. I tried it for an hour. What to trust.
Matt Pocock skills explained: what all 27 plugin skills do, who can call each, how to install, what critics say, and how it compares to GSD and BMAD.
Recursive Flint is an Apache-2.0 coding model, 39.8B parameters with 2.5B active. Can a 48 GB Mac be your local coding agent? RAM math and a 1-hour test.
The DeepInfer inference engine is DeepSeek's open-source Apache-2.0 serving code. What the README gives you, what it leaves out, and what I would steal.
The deslop model, qwen3-4b-deslop, is a free Apache-2.0 fine-tune that drops em dashes and "not X, but Y". How it was built and what its score hides.
The Postgres 19 delay explained: 8 to 10 features reverted in beta, release now Nov 19, and what AI code review costs a small team.
