PrismML crams a 27B agentic model into 3.9GB — it runs offline on an iPhone 17 Pro.
​​​​​​​​​​

$ ai-news --date 2026-07-15 | mail

AI News — Wednesday, July 15, 2026

// the most viral AI topics of the last 24 hours, curated for your stack

$ cat top-story.md

PrismML Ships Bonsai 27B — a Frontier-Class Agentic Model That Fits on an iPhone

Caltech spinout PrismML released extreme-quantization builds of a 27B-class model built on Qwen3.6 27B: a 3.9GB 1-bit version and a 5.9GB ternary version, both retaining 90–95% of full-precision benchmark performance with vision, tool-calling and full agentic reasoning intact — no higher-precision fallback needed. The 1-bit build runs locally on an iPhone 17 Pro; the ternary build hits 163 tok/s on an RTX 5090 and 87 tok/s on an Apple M5 Max. It's Apache 2.0 licensed and hit #1 on Hacker News.

Why it matters: proof that frontier-grade agentic capability now fits fully offline on consumer hardware — a preview of how far quantization could be pushed on your own vLLM-served models beyond Gemma.

// source: Hacker News (#1, 497 pts) / PrismML

## 📦 Models & Releases

DeepSeek Sets July 24 Deadline to Retire Legacy API Model Names

DeepSeek's API changelog confirms the old deepseek-chat/deepseek-reasoner aliases stop working after July 24; callers must switch to the explicit deepseek-v4-pro/deepseek-v4-flash model strings. Why it matters: a one-line fix, but anyone with a script or self-hosted integration still pointing at the old names will see silent breakage after the cutoff. // DeepSeek API docs

## 🛠️ Tools & Repos

Juggler — a Tree-Based Visual GUI for Coding Agents

A new open-source desktop app from the creator of JUCE/Tracktion that replaces the linear chat transcript with an editable, branching tree of agent sessions — every tool call, approval and context item stays inspectable, with a JS plugin architecture and support for Claude, OpenAI, Gemini and Ollama. Why it matters: a genuine alternative to CLI-first agents for anyone who wants to visually branch/backtrack sessions and audit exactly what an agent did to their codebase. // Show HN (202 pts)

React Doctor — Deterministic Static Analysis for AI-Written React Code

A scanning tool (13.8k stars) that catches state, performance, security and accessibility issues in React codebases, installable both as a CI check and as a skill agents can use to learn from and auto-fix flagged issues. Why it matters: a concrete guardrail against the specific bugs agents tend to introduce in vibe-coded frontends — pairs naturally with a Claude Code skills workflow. // GitHub Trending

AgentCall — Lets Coding Agents Join Your Video Calls

An open-source skill (MIT, 110 stars) that lets Claude Code, Cursor, Gemini CLI and 30+ other agent frameworks join Google Meet/Zoom/Teams as real participants — speaking via TTS, reading live transcripts, and sharing screens while keeping full coding context. Why it matters: a working extension of the "agent as teammate" pattern beyond the terminal, worth a look if you experiment with agent skills or MCP-style integrations. // Hacker News

## 🤖 Agents & MCP

Claude Code v2.1.209 & v2.1.210 Harden Worktree Isolation and the Agent Tool Against Prompt Injection

Two releases on July 14 fix isolation:'worktree' subagents that could mutate the main repo's git state, harden the Agent tool against indirect prompt injection from content a subagent reads, add a live elapsed-time counter on long tool calls, and warn on risky Write/NotebookEdit/Glob permission rules at startup. Why it matters: closes real gaps — worktree git leakage and prompt-injection exposure — that matter directly to anyone running many parallel or background agents. // Claude Code changelog

OpenAI Codex Starts Encrypting Sub-Agent Prompts, Killing Local Audit Logs

A Codex CLI update now encrypts parent-to-sub-agent task messages client-side for multi-agent runs, so developers can no longer inspect what tasks were delegated between agents in their own session logs — sparking a 413-point Hacker News debate over trade-secret protection versus auditability. Why it matters: a live case study in the security-vs-observability tension for multi-agent orchestration, directly relevant to anyone debugging Claude Code subagent or MCP delegation. // Hacker News (413 pts)

Cursor's Zero-Click git.exe RCE Goes Public After 7 Months of Silence

Researchers disclosed that Cursor auto-executes any git.exe binary planted at a workspace's root the moment a project is opened — no click required — after reporting it privately in December and getting no fix across 197+ subsequent releases. Why it matters: a sharp reminder to sandbox agent/IDE execution against untrusted repos, whichever coding agent you use. // Mindgard, via Hacker News

## 🏠 Self-Hosting & RAG

vLLM v0.25.1 Patches a Silent-Corruption Bug in Fused RMSNorm+Allreduce

A patch on top of v0.25.0 fixes a dtype-mismatch guard in fused RMSNorm+allreduce quantization that could silently corrupt output on multi-GPU setups, and defers a hard crash when system FFmpeg is missing for TorchCodec. Why it matters: if you're running quantized Gemma across multiple GPUs on the new Model Runner V2 default, this is a low-risk, recommended update — the corruption was silent, not a crash. // vLLM GitHub Releases

New Paper: SHEAF Adapts Vector-Search Beam Width Per Query Instead of a Fixed Setting

SHEAF estimates how hard a query is by comparing two cheap shallow probe searches, then sets beam width per-query for HNSW/graph-based ANN indexes — needed beam widths varied over 32x across queries on SIFT1M. Why it matters: directly applicable to tuning Qdrant's ef_search/hnsw_ef adaptively instead of one fixed value, spending extra compute only on queries that actually need it. // arXiv (cs.IR)

New Paper: GRASP Trains an Agent to Pick Semantic vs. Keyword Search vs. Paragraph Reading Per Step

An RL-trained policy for agentic RAG that learns when to run semantic search, keyword search, or just read a paragraph for local verification, beating single-step retrieval and prompting-based agentic RAG baselines on multi-hop QA. Why it matters: a concrete blueprint for adding an adaptive retrieval-tool-choice layer on top of a Qdrant+Gemma RAG pipeline instead of a fixed hybrid-search ratio. // arXiv (cs.IR)

## 🎬 Worth Watching

Das japanische Hype-KI-Modell im Test (German-language)

A German-language hands-on benchmark test of Japan's buzzy new AI model — likely Sakana AI's Fugu orchestration system, which recently claimed to beat GPT-5.5 and Gemini 3.1 Pro on SWE-Bench Pro — plus a second contender. Why it matters: a useful signal on a non-US frontier approach even without German fluency — the benchmarks and demos carry across the language barrier. // The Morpheus Tutorials

## 📰 Worth Reading

Are We Offloading Too Much of Our Thinking to AI?

An essay questioning whether routinely delegating decisions to AI erodes independent judgment, using Ken Liu's fiction about an assistant that gradually colonizes its user's life as a framing device. Why it matters: a reflective counterweight to daily "AI makes you more productive" coverage, worth a read for anyone leaning heavily on agents. // Hacker News (405 pts)

How to Stop Claude From Saying "Load-Bearing"

A developer builds a Claude Code MessageDisplay hook that intercepts and rewrites the model's overused stock phrases ("load-bearing," "honest take") into custom alternatives via regex. Why it matters: a fun but genuinely instructive example of how far hook customization can go in Claude Code — directly reusable in your own settings. // Hacker News (469 pts)

Nadella: Enterprises "Pay Twice" When They Feed Proprietary Data Into Frontier Models

Microsoft's CEO warns that companies using closed frontier models pay in tokens and in the proprietary knowledge they leak through prompts, and argues for retaining data ownership via orchestration layers and open-source models. Why it matters: a strategic argument, from Microsoft's own CEO, in favor of exactly the kind of self-hosted vLLM+Qdrant stack this reader already runs. // TechCrunch

$ echo "automatically researched on 2026-07-15"
> ai-news · news.reichenberg.ruhr

[ unsubscribe ] [ view in browser ]