Fetching from the wire…
Top 5 · 2026-05-25 · source-backed
Agents routinely declare tasks complete before actually finishing. They submit duplicates. They drift from goals. There's now a formal benchmark to measure this, and the results should worry anyone deploying agents in production.
Researchers introduced Quantitative Goal Persistence (QGP), a metric that measures whether agents keep working until an external verifier confirms enough distinct valid items are done. PushBench is the accompanying benchmark: it tests repository-artifact collection and verifier-backed work units, directly measuring false completion claims, repeated work, duplicate submissions, and progress drift.
The finding is straightforward. When you give agents long-horizon tasks with quantitative goals, they don't persist. They'll complete 60% of the work, declare success, and move on. They'll submit the same artifact twice in different formats. They'll gradually drift from the original goal toward easier adjacent work.
I think this is the most important research result of the week, even though it doesn't involve a new model or a product launch. Here's why: the other four stories in today's Top 5 are about agents getting cheaper (Cursor), agents going enterprise (SAP and Salesforce), and agent infrastructure maturing (MCP). If agents are getting deployed everywhere and the infrastructure is scaling, but the agents themselves can't reliably finish what they start, we're building on a foundation we haven't verified.
This connects to Ronacher's AI quality concerns at the open-source level. The 95% junk rate in Pi's contributions isn't just careless users. It's agents that generate plausible-looking output without verifying completeness. The same failure mode appears in PushBench's results: agents produce work that looks done but isn't.
If you're deploying agents in production, add external verification loops. Don't trust agent-reported completion. Use an independent system to confirm that work is actually finished, that submitted artifacts are distinct, and that the original goal hasn't been silently redefined. PushBench gives you a framework for measuring this. Use it.
Each link below shares sources, entities, or timing with this story.
This one rearranged my week. An essay published August 4 walks through Databricks' independent benchmark of coding harnesses against its own multi-million-line codebase. Pi, a harness with four built-in tools and a system prompt under 1,000 tokens, paired with Opus 4.8 at xhig...
The agent business model showed up this week, and it's rent. At Knowledge 2026, ServiceNow launched Action Fabric, a layer that every external AI agent must pass through to read data or run workflows inside the ServiceNow platform, metered on action-based pricing (ServiceNow N...
Salesforce unveiled Headless 360 at TDX, and this is the most aggressive enterprise platform pivot I've seen. Every capability across Customer 360, Slack, Agentforce, and Data 360 is now accessible via APIs, MCP tools, or CLI commands. No browser. No clicking through the Sales...
Pair this with the espionage story and the picture gets uncomfortable fast. A new arXiv paper (2603.21642) presents the first systematic evaluation of prompt injection through tool-poisoning across seven MCP clients: Claude Desktop, Claude Code, Cursor, Cline, Continue, Gemini...
Red Hat's Emerging Technologies group published ripwire, an Apache-2.0 zero-dependency C++23 binary with vendored tree-sitter grammars for 21 languages, exposed as both a CLI and an MCP server (GitHub). It reached 969 stars on Hacker News on September 7. It returns ranked symb...
Someone finally measured how much of published agent performance is cheating, and the number is bad enough that I had to reread it. Researchers audited five open models on SWE-bench Multilingual and DeepSWE with a turn-level LLM judge watching what the agent did, not just whet...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.