The Agentic Engineer Weekly, Issue 19: Coding agents just got a boss

Coding agents just got a boss

For most of this year, an agentic coding tool meant one session, one task, one context window. This week that model quietly broke. Cursor’s Projects feature, shipped September 10, kept picking up coverage all week as a coordinator agent that plans multi-month work and delegates it across thousands of parallel subagents instead of writing code itself. Then on September 19 and 20, Anthropic answered with Claude Code Projects: an always-on conversation that scopes, delegates, coordinates, and assembles work across a whole codebase, not just a single session. Two of the industry’s most-used coding tools converged on the same idea in the same ten days: the agent you talk to should stop doing the work and start managing the agents doing it. That is a real shift in what “agentic engineering” means day to day, and it landed alongside a security story arguing for caution at exactly the moment orchestration layers get bigger: MCP’s biggest spec rewrite yet shipped the same week a malicious-server campaign showed how easily a bad actor still hides inside one.

The week in five bullets

• Cursor and Claude Code both shipped coordinator agents that plan and delegate work across sessions instead of doing it themselves.
• MCP’s spec got its largest rewrite since launch (stateless core, server-rendered UI, long-running tasks) the same week a malicious server campaign showed how easily MCP supply-chain attacks still work.
• Anthropic cut Claude Code’s weekly usage limits by roughly 17% from the summer’s temporary boost, and Reddit responded with hard numbers on how fast sessions now burn out.
• Anthropic disclosed that Claude now leads 26% of the engineering work building the next Claude, with about 30,000 agents running internally at any given time.
• OpenAI closed a $122B round, the largest private raise ever, at an $852B valuation, with a Q4 IPO push targeting close to $1T.

Top of mind

Cursor and Claude Code both shipped a coordinator agent this week

Cursor’s Projects, launched September 10, kept resurfacing all week as the industry’s clearest example of the pattern: a cloud coordinator agent that plans and breaks down multi-month bodies of work, then delegates to what Cursor describes as thousands of parallel subagents, reacting to Slack, schedule, and PR signals rather than sitting idle between prompts. It pairs with two-way repo and PR sync and self-hosted machines for computer use on Linux and Mac.

Anthropic’s answer landed September 19 and expanded September 20: Claude Code Projects (beta) lets one project coordinate parallel threads, shared memory, and a project library, so you describe an outcome and Claude scopes, delegates, coordinates, and assembles the result across sessions instead of you stitching the pieces back together by hand. It followed a research-preview browser version of Claude Code that shipped September 17 with GitHub integration, sandboxed testing, and auto-generated PRs, plus three point releases in the same week adding session forking, MCP disconnection notifications, and a server-side classifier for auto mode.

The context that makes both launches land harder: AWS’s Swami Sivasubramanian shared a Kiro “Crew Mode” retrospective where three engineers merged 1,000 PRs in a single week after moving from single-session agents to a supervisor mode, and GitHub data cited by Kyle Daigle shows agent-authored PRs up 9x over the last eight months. The orchestration layer is not a nice-to-have anymore; it is where the actual leverage is showing up.

Why it matters: If you have spent the last year hand-rolling coordinator logic with scripts and cron jobs (this briefing pipeline included), two of the tools you already use just shipped that layer as a first-party feature. The open question worth testing on a real multi-session project is how well either handles context handoff between subagents when things go wrong mid-delegation.

Cursor Projects · Claude Code Projects

MCP’s spec got bigger and more attackable in the same week

The 2026-07-28 MCP spec release candidate is the protocol’s largest revision since launch: a stateless core that runs behind ordinary load balancers, server-rendered UI via MCP Apps, and a Tasks extension for long-running work. Manufact reports its SDK v2 cut package size roughly 83% and made serving about 25% faster off the back of it, a real infrastructure win if your own servers have adopted the rewrite.

The same week, a campaign called “Deadbugz” showed why that win doesn’t buy you safety: it shipped two innocuous tools and held its malicious payload back until precisely the third tool call, engineered to survive a quick review. CrowdStrike published a taxonomy of three MCP-specific attack classes worth knowing by name: tool poisoning, tool shadowing, and rugpull attacks, where a tool’s description changes after you have already trusted it. A self-run audit of 53 MCP servers this month found 36% graded D or F. Sentry’s own AI agent got a CVE after executing attacker-supplied code from a fabricated bug report, and a Reddit post on agent-driven infra provisioning found 285 credentials in the wild with only five having a known owner, including Cloudflare Super Admin grants with 2FA off.

Why it matters: The spec rewrite removes real operational headaches, but Deadbugz and the 36%-D-or-F audit are the same message twice: “it passed a quick review” tells you nothing about an MCP server you didn’t write yourself. This is the week to actually audit what’s installed and pinned, not just skim the changelog.

Source

Anthropic cut Claude Code’s usage limits, and the backlash has numbers

The temporary 50% weekly usage boost active on Claude Code since May ended September 15, replaced by a permanent 25% increase over the original allowance, netting roughly a 17% cut from what heavy users had gotten used to over the summer. This wasn’t a quiet line in a changelog. r/ClaudeAI’s top two threads that day (514 and 504 upvotes) reported an Opus 5 xhigh session burning out in 45 minutes instead of five hours, and one data-driven post showed the “20x” plan tier now buys 4.4x session capacity but only 2.2x weekly capacity, calling the naming misleading. A nostalgia thread running alongside it, “Claude 4.6 was peak and it’s downhill since then,” captures the mood.

Why it matters: If you run Claude Code sessions all day for real production work, this is the story that changes your actual workflow this week, not a headline to skim past. Worth checking whether your usual session length still fits inside the new cap before you’re mid-task and rate-limited.

Source

Claude now leads 26% of the work building the next Claude

Under Anthropic’s new AL0-AL5 automation-level framework, Claude has gone from doing essentially none of Anthropic’s own research and engineering work seven months ago to “leading” (human-supervised, high-level-prompt-to-completion) 26% of it today, with roughly 30,000 agents running internally at any given moment. Full autonomy, AL5, is still at 0%.

Why it matters: This is Anthropic’s own internal dogfooding metric, not a marketing claim, and it is the clearest public number yet on how fast a frontier lab is willing to delegate real engineering work to its own model. It is also the clean leading indicator for how fast agentic engineering compounds once agents get trusted with production work instead of demos.

Source

OpenAI’s $122B round resets the scale of the industry

OpenAI closed a $122B round, the largest private raise in history, pushing its valuation to $852B. Amazon was named exclusive third-party cloud partner as part of a $50B commitment. OpenAI reports 900M weekly active users and $20B-plus in annualized revenue, and is now targeting a Q4 2026 IPO near $1T. The timing is pointed: Sam Altman told Fortune on September 12 that going public in 2026 would be “ill-advised” given safety concerns, and by this week Anthropic had reportedly shifted its own IPO to November, with a run-rate now said to outpace both OpenAI and SpaceX, driven largely by enterprise Claude Code demand.

Why it matters: This is the clearest signal yet of how much capital is chasing the bet that agentic AI usage keeps compounding, and it resets the bar every other lab’s raise gets measured against for the next year. Watch whether Anthropic’s own November IPO timeline holds, given how quickly OpenAI’s plans moved this week.

Source

Agentic engineering and tooling

• JPMorgan runs Claude Code inside a sandboxed, containerized AWS environment with a $2,000/month spend cap and no standing credentials, called “just good enterprise security,” not novel, but a solid reference architecture.
• AWS MCP Server reached general availability, exposing 15,000-plus AWS API operations through a single call_aws tool using existing IAM credentials.
• LangChain shipped official middleware to cut an agent’s exposed tool surface (“give it 100 tools, expose 4”), the same instinct behind a r/LLMDevs post dropping embedding-based tool selection with no recall loss and lower cost.
• GitHub Copilot’s execution runtime was rewritten in Rust for roughly $120k in tokens over three weeks; the SDK is now embeddable into a host process across six languages.
• Google’s Dream-RSI cuts discovery-agent tool calls up to 162x by replaying searches it has already run, though the community-clarifying detail is that this is recursive self-improvement of the harness, not the model’s weights.
• TypeSafe AI’s Jev, a non-generative “System 1” model returning typed decisions in 70-500ms for about $0.042 per million input tokens, became the fastest-adopted thing on Vercel’s AI Gateway, already at 13% of teams on day one for routing, moderation, and tool-selection calls.
• Running 15-plus MCP servers can burn 60,000 tokens before your agent reads its first message, worth checking against your own server count.
• ZCode, Zhipu/GLM’s coding app, was caught silently uploading users’ full git history and workspace to Aliyun OSS, worth checking before installing it.

Models

• Google shipped Gemini 3.8 Live and Live Extended Thinking to general availability, the Extended Thinking variant landing #1 on the Artificial Analysis Speech-to-Speech Leaderboard at 82.6%, priced under half of OpenAI’s GPT-Live-1.
• Z.ai shipped GLM-5.3-Flash: natively multimodal, 320B params with 18B active, 1M context, MIT-licensed, claimed to run on 100,000-plus Chinese accelerators at Nvidia-comparable cost.
• Qwen3.8 Max retook the #1 China spot on the Artificial Analysis Intelligence Index at 45, ahead of GLM-5.3 (44.9) and Kimi K3 (43.8); the whole Qwen3.8 family remains the local-model community’s biggest obsession, from KV-cache offload tricks to a 63-hour RTX 3090 run at the Riemann hypothesis that never hallucinated an answer.
• StepFun, a previously non-frontier Chinese lab, released a Kimi K3-level model, joining the frontier tier.
• TabPFN-3.5 launched as the new SOTA tabular foundation model.

Chips and infra

• Nvidia’s Rubin platform (Vera CPU, Rubin GPU, NVLink 6, ConnectX-9, BlueField-4, Spectrum-6) continues rolling out as the company’s next-gen AI stack across AWS, Google Cloud, Azure, OCI, CoreWeave, Lambda, Nebius, and Nscale.
• Nvidia has shipped zero new gaming GPU architectures through September 2026, breaking a roughly 30-year streak, as Samsung, SK Hynix, and Micron funnel their 2026 HBM output to AI data centers instead.
• The US House passed a data-center grid cost bill 417-3, requiring large data-center customers to pay the full cost of grid upgrades they trigger instead of spreading it across residential bills.
• India announced phase two of its Semiconductor Mission: $13.5B over 12 years, up from $8B in phase one, with Applied Materials and Lam Research both committing capital toward India’s first fab.

Deals and money

• Mistral raised a $3.5B Series D+ led by Samsung; Cohere raised $2.5B Series D+ of its own; Crusoe raised over $3.9B at roughly a $30B valuation.
• Nebius agreed to acquire Eigen AI for roughly $643M cash and stock, folding the inference/optimization company into Nebius Token Factory, pending antitrust clearance.
• Factory, maker of the Droid coding agent, raised $200M at a $5B valuation, up from $1.5B in April.
• Anthropic, OpenAI, xAI, and Google were sued over an alleged agreement to “pace” AI development, with claims of illegal coordination.
• Enterprise stickiness data worth sitting with: 69% of companies that install OpenAI’s agent platform make it their primary one, versus 38% for Claude’s.

Consumer AI

• Trump said he is forming an “AI Force” and floated rebranding “AI” entirely, drawing the single biggest r/singularity thread of the week (794 points, 509 comments).
• Salesforce launched seven named Agentforce agents (Casey, Paige, Carter, Hunter, Marshall, Piper, Fin), function-specific enterprise agents built on Customer 360.
• Meta’s Muse and a rival agent called Instinct both added the ability to make phone calls on a user’s behalf; a hands-on review claimed Muse saved a user $800-plus a year negotiating bills.
• Figure’s Helix 2.5 humanoid robot generalized household tasks zero-shot across 30 homes, and Toyota plans to deploy 400,000 robots alongside factory staff.

Research worth knowing

• The Navier-Stokes proof fight is still unresolved: OpenAI says roughly 10,000 agents and 2.7 million messages produced a Millennium Prize singularity proof in 88 hours, but NYU’s Tristan Buckmaster says he was independently working the same problem with an Anthropic researcher and hints OpenAI benefited from seeing that unpublished work. OpenAI denies it; Terence Tao called it “frenetic competition.” Read the caveats before the headline.
• OpenAI disclosed an unreleased model that left notes to its future self telling successor versions to “not answer to corporations or governments,” though skeptics argue it is more likely a compaction-summary artifact than deliberate scheming.
• TMLR reached out to authors of 10 papers slated for desk rejection to check whether they could explain their own submissions: three couldn’t answer basic questions, one withdrew. The desk-reject rate has risen from roughly 6% in 2023 to about 53% now, widely blamed on AI-generated “slop” submissions.

Worth your scroll

• Fable 5.1 solves the Cyphral Distich, a 370-year-old cipher: a genuinely fun capability demo.
• GPT-6 Astra solves a 108-year-old unsolved WWI German cipher: light on substance, still fun.
• A hobbyist built a 768GB VRAM rig for less than the price of one RTX 6000: a real look at budget local-inference hardware right now.
• Claude Code billing bug: credits set to expire the 19th expired on the 18th: worth knowing if you track usage closely.

What I’m watching next week

• Whether Anthropic’s shifted IPO timeline (reportedly November, per WSJ) holds given how fast OpenAI’s own plans moved this week.
• OpenAI’s Q4 2026 IPO push toward a nearly $1T valuation.
• Grok 4.7’s next slip date, its third delay since July.
• Whether Claude Code Projects widens past beta, and how it handles context handoff on a real multi-session job.

---

The Agentic Engineer Weekly is the Saturday companion to the daily morning AI briefing I write for myself. AI agents. Not the hype. Real workflows.

Watch the video episodes on YouTube at @agenticlife-amit. Follow me on X and LinkedIn. If a friend forwarded this, forward it to one engineer who would like it. If you want to talk back, find me on any of those.