MCP Tasks: Async, Resumable Tool Calls Before July 28
MCP's 2026-07-28 release candidate locked on May 21. Tasks graduated to a first-class extension. Here is what every server author has 10 weeks to refactor.
Lab // Technical notes
Technical deep dives into AI agent engineering — architecture patterns, protocol internals, and the implementation details behind production-grade systems.
MCP's 2026-07-28 release candidate locked on May 21. Tasks graduated to a first-class extension. Here is what every server author has 10 weeks to refactor.
Microsoft's CVE-2026-26030 and CVE-2026-25592 turn one injected prompt into calc.exe. The tool registry is now the attack surface — here's the chain.
A2A v1.0 ships in April 2026 under the AAIF. Agent Cards, a five-state task lifecycle, and the orchestrator code that ties them together.
PASTE-style speculative tool execution cuts agent task time 48.5%. A working ~300 LOC harness over the Anthropic SDK with rollback and benchmarks.
CaMeL splits the LLM in two and wraps every value in a capability. 77% of AgentDojo tasks complete with provable prompt-injection defense.
Tool accuracy collapses ~40% past 80K tokens. Context folding runs 200-step agents in 10x less context. Working harness and Anthropic compaction inside.
Memory-augmented agents face 95% injection-success attacks that persist 365 days across sessions. The threat map and a layered defense stack.
Most teams shipping agents rely on manual testing. Here's how to build automated eval pipelines that gate deployments with real quality thresholds.
Context engineering is the top challenge for 57% of orgs running agents in production. The full stack, from system prompts to MCP, with code.
Single agents hit ceilings. How multi-agent architectures work in practice — orchestration patterns, failure modes, cost realities, working code.