EAIDaily — 2026-07-29

Daily AI news brief focused on AI Coding and Embodied Intelligence, curated for English-speaking builders tracking frontier AI developments. Compiled 2026-07-29 from vendor blogs, research releases, and tech-press search results.

At a Glance

Three forces are visible in today’s cycle. First, security is becoming the open commons of the agent era: OpenAI ships an Apache-2.0 security scanner, NVIDIA convenes the Open Secure AI Alliance, and Anthropic publishes cryptanalytic attacks found by Claude Mythos. Second, coding agents are being stress-tested against real software engineering: independent benchmarks show Opus 5 writing mostly “slop” on long-horizon tasks, while Kwaipilot and Letta push memory-first and repository-native agent designs. Third, embodied AI is being measured by certifications, not choreography: China’s first national robot skills expo launches, Zhiyuan tops a multimodal robot leaderboard, and factory-floor deployments are reported in months, not demos.

Headline Items

1. OpenAI Ships Codex Security: An Apache-2.0 CLI for Scanning and Gating Repo Vulnerabilities

Category: AI Coding / AI Security
Source: OpenAI GitHub (openai/codex-security)
Date: 2026-07-29

OpenAI released Codex Security as an open-source CLI and TypeScript SDK (@openai/codex-security) for finding, validating, tracking, and fixing security vulnerabilities in code. The tool supports local repository scans, differential scans of changes, and CI/CD gating via OPENAI_API_KEY. It stores scan history in a local workbench state directory and can run non-interactively in pipelines.

The repository went public under an Apache-2.0-style license with same-day npm publishing (v0.1.1 on July 29) and cross-platform CI. It sits alongside OpenAI’s Codex CLI as a dedicated security layer rather than a bundled feature.

Why it matters: As AI-generated code volumes explode, security review is the bottleneck most teams skip. Open-sourcing the scanner lowers the cost of adding a security gate and signals that OpenAI views code security as a shared infrastructure layer, not a premium upsell.

2. Letta Code v0.25 Becomes a Memory-First Coding Agent

Category: AI Coding / Agent Architecture
Source: Letta AI (ai-tldr.dev, Letta blog)
Date: 2026-07-29

Letta released Letta Code v0.25, positioning it as a coding agent built on persistent memory rather than per-turn context windows. The tool preserves project history, learned patterns, and user preferences across sessions and even across model switches, addressing the “cold start” problem that plagues terminal agents.

The release comes from the UC Berkeley team behind MemGPT, which pioneered virtual context management for agents. Letta Code is the applied product form of their research on context repositories, sleep-time compute, and continual learning in token space.

Why it matters: Most coding agents treat every prompt as a fresh conversation. Letta’s bet is that accumulated memory — what the agent has learned about your codebase, style, and recurring mistakes — is a bigger differentiator than raw model IQ. If it works, it redefines agent stickiness from model loyalty to memory depth.

3. NVIDIA Agent Toolkit Adds PhysicsNeMo and CUDA-X for Autonomous Engineering Agents

Category: AI Coding / Agent Tools for Engineering
Source: NVIDIA Newsroom
Date: 2026-07-26 (updated July 28)

NVIDIA expanded its Agent Toolkit with re-architected PhysicsNeMo libraries and updated CUDA-X libraries, turning physics simulation, accelerated sparse solvers, and quantum chemistry into agent-callable skills. Capabilities now include:

• AI physics skills via PhysicsNeMo for training and deploying custom physics models.
• Iterative sparse solvers via cuISS for large physics-based simulations.
• Direct sparse solvers via cuDSS for EDA and scientific simulation workloads.
• Quantum chemistry via cuEST for density functional theory at device-relevant scales.

NVIDIA also reported that Nemotron 3 Ultra leads open models on agentic RTL coding via the ACE-RTL agent, and that Cadence, Synopsys, Siemens, Samsung, and Keysight are building autonomous engineering workflows on the toolkit.

Why it matters: Coding agents are leaving pure software and entering chip design, materials science, and systems engineering. NVIDIA is packaging the numerical substrate of those domains as agent skills, which could make “AI engineer” mean “AI scientist-engineer” much faster than expected.

4. Anthropic Uses Claude Mythos to Weaken HAWK and 7-Round AES, Releases Open Demo Code

Category: AI Coding / AI Research
Source: Anthropic Research
Date: 2026-07-28

Anthropic published research in which Claude Mythos Preview discovered new mathematical attacks on two cryptographic targets:

• HAWK (a NIST post-quantum signature candidate): Mythos found a non-trivial automorphism symmetry that effectively halves HAWK’s key strength. For HAWK-256, full key-recovery cost dropped from an estimated 2⁶⁴ to 2³⁸ operations.
• 7-round AES-128: Mythos developed a “Möbius Bridge” fingerprint that eliminates a 2⁵⁶ enumeration step, yielding a 200–800× speedup over prior reduced-round attacks.

The work was done with a multi-agent setup; the AES attack required only about three substantive human prompts and roughly one billion output tokens. Anthropic released papers, demo code, and a new CryptanalysisBench in collaboration with ETH Zurich, Tel Aviv University, and the University of Haifa.

Why it matters: This is not vulnerability scanning — it is AI-assisted cryptanalysis at the algorithmic level. It suggests frontier models can make novel contributions to theoretical computer science, but also raises the stakes for responsible disclosure and export-control debates around model capability.

5. KAT-Coder-V2.5-Dev: Kwaipilot’s 35B Open-Weight Agentic Coding MoE

Category: AI Coding / Open-Weight Models
Source: Kwaipilot / Hugging Face
Date: 2026-07-28

Kwaipilot released KAT-Coder-V2.5-Dev, a 35B-parameter / 3B-active Mixture-of-Experts model tuned for agentic coding. Based on Qwen3.6-35B-A3B, the model was post-trained with SFT + RL on 127K samples and supports a 262K-token context window extensible via YaRN.

Reported benchmarks place it ahead of similarly sized open models on SWE-bench Verified (69.40), SWE-bench Multilingual (63.00), SWE-bench Pro (45.96), Terminal-Bench 2.1 (41.02), PinchBench (93.43), SciCode (44.20), and its own KAT-Code-Bench (46.21). RL training notably cut malformed tool tags from 9.34% to 0.28%.

Why it matters: The open-weight coding race is now about agentic behavior, not just pass@1 on HumanEval. KAT-Coder’s focus on tool calling, repository-level action, and thinking-mode preservation shows that the next open-weight battleground is real-codebase agents, not chat completions.

6. SlopCodeBench Independent Audit: Claude Opus 5 Passes 24% of Checkpoints, 93% Flagged as “Slop”

Category: AI Coding / Benchmarks & Evaluation
Source: Humanlayer / UW Madison SlopCodeBench
Date: 2026-07-28

An independent third-party benchmark by Humanlayer tested Claude Opus 5 on SlopCodeBench, a long-horizon coding benchmark where the full problem description is revealed gradually across checkpoints. On a three-problem subset with 17 checkpoints, Opus 5 passed only 4 checkpoints (24% strict pass rate). None of the three models tested completed any full challenge.

The audit also found that 93% of Opus 5’s generated code lines triggered at least one “slop” code-smell rule, and that Opus 5 produced roughly 29,065 lines of source code — about three times the output of Opus 4.8 and Sonnet 5 — without improving overall completion.

Why it matters: SlopCodeBench is designed to look like real software engineering, where requirements emerge over time. The result is a sobering counter-narrative to headline benchmark scores: current frontier models may write impressive code per turn, but they degrade codebases when left unsupervised across long horizons. Verification, not generation, is the real gap.

7. CCTV Launches First Intelligent Robot Application Skills Expo; Wall-Climbing Embodied Special Robot Debuts

Category: Embodied Intelligence / Industrial Robotics
Source: CCTV / People’s Daily / Tencent Cloud
Date: 2026-07-28

China Central Television launched the First Intelligent Robot Application Skills Exhibition in Beijing on July 28. The event focuses on production, maintenance, food service, medical care, and emergency rescue, with the explicit goal of moving robots from “showing off” to “getting certified for work.”

Highlights included:

• A wall-climbing embodied special robot that can scale vertical steel surfaces, grind with one arm, and weld with the other, designed for chemical tanks and ship hulls.
• A six-arm robot capable of simultaneous cable insertion, screw assembly, and material handling at “silk-level” precision.
• Debut of the “AI Flood-Fighting Warrior” emergency robot and the “Hangzhou Smart Traffic” traffic-management robot squad.

Why it matters: The expo frames embodied intelligence as a labor-certification problem rather than a research-demo problem. By staging competitions in real scenarios and publishing skill standards, China is building the institutional pipeline that turns robot prototypes into deployable industrial workers.

8. Zhiyuan WITA-Omni Preview Tops DailyOmni with Native “Think-Speak-Act” Architecture

Category: Embodied Intelligence / Foundation Models
Source: Zhiyuan Robotics / Xinmin Evening News
Date: 2026-07-28

Zhiyuan Robotics announced that its self-developed WITA-Omni Preview scored 85.21 to top the DailyOmni embodied multimodal understanding benchmark, winning first place in six of eight sub-metrics. The model uses a native end-to-end “think-speak-act” architecture rather than chaining separate perception, language, and control modules.

The result came during a week of dense Chinese embodied-AI news: Tencent confirmed it will build embodied “brains” through its Tairos platform without manufacturing robot bodies; BYD confirmed a humanoid robot debut in August; and the Ministry of Industry reported that China’s robotics industry revenue exceeded ¥90 billion in the first five months of 2026, up 26.9% year-on-year.

Why it matters: WITA-Omni’s top score is another data point that native embodied architectures — where reasoning, language, and action share a single model — are outperforming pipelined designs. Combined with Tencent’s platform play and BYD’s entry, the Chinese embodied stack is converging on “brain + body + data + certification” faster than the rest of the world.

Quick Takes

• Amazon puts Nova Premier, Omni, Reel, and Canvas in maintenance mode and hands flagship model development to a new Frontier Model Research team led by Pieter Abbeel. The move suggests Amazon is resetting its model strategy after Nova failed to break into the frontier tier.
• Grafana AI Week launched six agentic operations tools in Grafana Cloud, including an investigations agent, MCP support, and a CLI assistant — another signal that observability is becoming an agent control plane.
• Asana acquires StackAI for $75 million, adding a no-code agent builder that connects to Salesforce, Slack, GSuite, ERP, and ITSM systems as Asana pivots toward “human-agent teams.”
• Shunde, Foshan established China’s first Embodied Intelligence Development Bureau on July 28, a government function bureau coordinating the full embodied-AI industrial chain in the country’s largest industrial-robot production base.
• BYD confirmed its humanoid robot will debut in August at the Zhengzhou “Di Space,” initially for greeting and explanation roles, signaling a move from factory automation to consumer-facing brand experiences.
• Galaxy General (Galbot S1) has operated 7×24 at a CATL production line for over three months; the company also released WAM-TTT, a test-time training framework for embodied world models that lets robots transfer skills from a small number of human videos.
• Tsinghua’s Huoshen team defended its RoboCup humanoid robot World Cup title with a 6–2 win; its hardware-acceleration platform is now used by 38 teams globally.

Trend Lines

• AI security tooling becomes an open-source commons. OpenAI’s Codex Security, NVIDIA’s Open Secure AI Alliance, and Anthropic’s open cryptanalysis demo code all point to the same conclusion: the safety infrastructure around frontier AI is being treated as a shared public good.
• Coding agents enter the verification-first era. SlopCodeBench’s harsh results, combined with memory-first agents like Letta and repository-native models like KAT-Coder, show the field shifting from “who generates the most code” to “who can prove the generated code is correct over time.”
• Physics-aware agents become design agents. NVIDIA’s Agent Toolkit expansion turns solvers, quantum chemistry, and EDA into agent skills. The boundary between “software engineer” and “computational scientist” is dissolving.
• Embodied AI shifts from stage performance to skilled-labor certification. Robot bands and backflips still make headlines, but expos, skill competitions, and government bureaus are now the institutions that matter for deployment at scale.
• Open-weight ecosystem enters the post-K3 tooling wave. Kimi K3’s weight drop last week triggered a flood of explanatory content, open infrastructure, and competing open-weight coders. The conversation has moved from “can open weights compete?” to “which open toolchain wins?”

Compiled by EAIDaily automation | Focus: AI Coding + Embodied Intelligence | @WoLoveAI