AI News - 2026-08-29

Saturday’s digest is a quiet one — seven items, no arXiv feed (weekend skip). The one big story is a first-party supply cut: OpenAI says it will stop providing models to Cursor from November 12, after SpaceX’s acquisition, because it “cannot be confident that SpaceX will use our technology within our ToS” — the biggest coding-tool supply change since Cursor went mainstream, and a signal that any toolchain assuming OpenAI-everywhere needs a plan. Around it: a self-hosted AI gateway for cloud and local models, a Datalog-based agent-memory system that beats full-context on update-heavy tasks, a deterministic coding harness, GLM-5.3’s weights landing under an unusual hyperscaler-gate license, a no-orchestrator multi-agent math paper, and a first-party account of agent-driven exploit timelines.

Lead: OpenAI cuts off Cursor

• OpenAI to stop providing models to Cursor from November 12 — first-party statement: OpenAI “cannot be confident that SpaceX will use our technology within our ToS,” so GPT models leave Cursor in ~2.5 months. The biggest coding-tool supply change since Cursor went mainstream — expect Cursor to lean harder on Anthropic/open weights, and worth thinking through for any toolchain that assumed OpenAI-everywhere. (HN 546 · Techmeme)

Agent frameworks & tooling

• Pangolin 1.22 adds an AI Gateway — identity-aware proxy in front of both cloud APIs (OpenAI/Anthropic/Gemini/Bedrock) and self-hosted servers (Ollama/vLLM): virtual API keys, per-user spend budgets, session logs, and keyless pangolin configure claude for Claude Code/Codex over the tunnel — all in the Community Edition. Directly useful if you route agents through your own infra. (r/selfhosted)
• Lemmalog: turning LLM memory into Datalog — Jordy Zomer’s open-source experiment: the LLM extracts facts, a Datalog engine maintains what is currently true (retractions, provenance, validity intervals) instead of re-deriving state from a transcript. LongMemEval 0.463 F1, beats full-context on update-heavy tasks. The retrieval-vs-maintained-state split is the right frame for anyone building agent memory. (HN 163 · lobsters)
• Benzi: a harness that avoids reading source — new coding-agent harness feeds the model deterministic tool-call intelligence (compiler blast-radius, static analysis, three truth tiers) instead of raw code; claims 78.2% SWE-bench Verified at <$0.10/fix on V4-flash — developer-reported, unverified, treat as a design datapoint on the same harness-vs-model beat as yesterday. (r/ArtificialInteligence · topics)

Models & research

• Continued: GLM-5.3 weights live with a hyperscaler-gate license — day 8 of coverage (base specs in the Aug 27 digest). What’s new since the Flash release: the open weights are up on Hugging Face, but the license requires companies with $10B+ revenue over 12 months to pass Z.ai’s security review before hosting. A first for open-weight licensing — big-org self-hosting is now conditional, not free. (Techmeme · The New Stack · HN 706)
• Autonomous Mathematical Discovery in an Open-World Multi-Agent Environment — “the Station”: agents from different model families pursue a shared math research goal with no central coordinator or scripted pipeline, and produced genuinely novel results (new Kakeya-set families, 604-point kissing configurations, an improved Erdős minimum-overlap bound) with theorems plus full agent dialogues, proofs, and verification code released. Fresh Aug 24 submission; useful as a multi-agent-without-orchestrator design reference. (HN 108)

Industry

• Just a rumour of a bug is enough to find an exploit these days — Anil Madhavapeddy’s first-party account: his cohttp path-traversal PR drew probes within ~10 minutes of going public, and his own agent turned the rumor of the bug into a working exploit in under a minute. Mean time-to-exploit is now −7 days (exploitation precedes patch); marimo went advisory-to-exploit in 9h, Langflow in 20h. Embargo-based security response is dead for self-hosted software — assume disclosure equals exploit and ship fixes fast. (HN 330 · lobsters)