惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

H
Heimdal Security Blog
A
Arctic Wolf
K
Kaspersky official blog
V
Vulnerabilities – Threatpost
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
Simon Willison's Weblog
Simon Willison's Weblog
L
LINUX DO - 热门话题
MongoDB | Blog
MongoDB | Blog
T
Threat Research - Cisco Blogs
D
Docker
爱范儿
爱范儿
T
Tenable Blog
C
Check Point Blog
B
Blog
C
Cisco Blogs
Vercel News
Vercel News
The Cloudflare Blog
T
Threatpost
NISL@THU
NISL@THU
T
Tor Project blog
V2EX - 技术
V2EX - 技术
P
Palo Alto Networks Blog
Application and Cybersecurity Blog
Application and Cybersecurity Blog
T
Tailwind CSS Blog
G
GRAHAM CLULEY
P
Privacy & Cybersecurity Law Blog
SecWiki News
SecWiki News
博客园 - 司徒正美
S
Security @ Cisco Blogs
GbyAI
GbyAI
S
Secure Thoughts
Microsoft Security Blog
Microsoft Security Blog
The Register - Security
The Register - Security
Recorded Future
Recorded Future
Cloudbric
Cloudbric
Webroot Blog
Webroot Blog
N
News and Events Feed by Topic
Y
Y Combinator Blog
博客园_首页
T
Troy Hunt's Blog
The Hacker News
The Hacker News
雷峰网
雷峰网
Google DeepMind News
Google DeepMind News
U
Unit 42
AWS News Blog
AWS News Blog
PCI Perspectives
PCI Perspectives
V
Visual Studio Blog
博客园 - 聂微东
有赞技术团队
有赞技术团队
酷 壳 – CoolShell
酷 壳 – CoolShell

The New Stack | DevOps, Open Source, and Cloud Native News

Agentic development hinges on verification. For cloud-native software, that is a runtime problem. AI agents need infrastructure: Why Europe’s regional cloud strategy matters Transform your AI coding agent into a deterministic Java Spring expert WeAreDevelopers is coming to the US to give unsung developers a bigger voice Cleaner AI training data, fewer bugs: Sonar’s SonarSweep explained Observability overload is drowning engineers Google’s DiffusionGemma is 4x faster than its other Gemma models Fable 5: Guardrails and burn rate are annoying users, who say it’s still better than Opus 4.8 The Anthropic leader who built Claude Code says he ditched prompting — now he just writes loops. AWS can now mathematically prove your VMs are isolated Microsoft pulled 73 GitHub repos after malware attack — but still won’t say who’s compromised Databricks wants to kill the “email me a file” problem for AI agent skills Ramp bets forward deployed engineers can do what off-the-shelf finance AI can’t Git real: AI agents aren’t just for solo developers anymore Anthropic launches Claude Mythos/Fable 5, but you better try it soon This AI agent startup ditched Anthropic for DeepSeek — and says it’s saving millions When your data model is the bottleneck: lessons from Medium’s feature store How long before we stop reading the code? The tokenmaxxing party is over, and Revenium is mopping up How AI is solving the memory crunch it created Microsoft’s pitch to enterprises: Ditch Azure Repos for GitHub, despite its rocky reliability record Claude Code’s biggest upgrade yet ran 5 agents at once — here’s what happened Why Anthropic just doubled Claude Cowork limits at no charge For years, Apache Cassandra handed this work to your team — 6.0 takes it back “A dangerous combination”: The 2 factors that can “corrupt” AI agent workflows With Foundry, Microsoft bets the enterprise AI battle is about reliability, not capability Microsoft unlocks Visual Studio for developers left behind by its own AI AI teams now deploy 1,000 times a month. Your pipeline wasn’t built for that. Microsoft just made the agent runtime free — and kept everything around it “Whoever builds the most joyous product wins”: The agent war begins Netlify CTO Dana Lawson: Writing code is no longer the job From Jupyter Notebook to production: How to ship AI systems that actually work OpenClaw used Gavriel Cohen’s code and exposed the AI Agent accountability problem Replit shows how vibe coding is getting its own financial stack — and a path to profit Cloudflare aqui-hires VoidZero: Did a piece of the open web just stabilize, or become more brittle? Cursor cuts prices and adds enterprise spend controls amid “tokenomics” reckoning Google Gemma 4 12B nearly matches 26B benchmarks — and runs on your laptop Snowflake thinks it knows what’s really slowing developers down Autonomous agents have met their biggest challenge yet: The database. Why agentic AI makes the ops platform the most important layer in the enterprise How to dramatically improve enterprise security alert tuning to battle cyberattacks Why the need for humans won’t disappear in the age of autonomous databases How to secure Kubernetes in the age of AI workloads Asana says its new AI “chief of staff” turns your Slack chaos into trackable work Nvidia’s best model is now live Mate Security’s Asaf Wiener made every backend engineer a model router. He’s right to. The AI cost crisis finally has a watchdog — just not the companies causing it How to get operational data off the factory floor without creating an IT breach Why CPUs still matter in the age of AI agents Rayfin: Microsoft’s answer to the gap between vibe coding and enterprise production Microsoft bets the enterprise AI race will be won on data context, not model power “A successful attack could be catastrophic”: Anthropic gives more groups access to Claude Mythos How GitHub plans to win developers back Microsoft really, really, really wants developers to love Windows again With Intelligent Terminal, Microsoft is reinventing the Windows terminal Microsoft debuts “Scout” at Build, a new personal agent for work OpenAI’s Codex adds new tools — Sites, Annotations, more plugins — for knowledge workers GitHub Copilot’s usage-based billing is live: Here’s what you need to know OpenAI, Anthropic, Google, Amazon, and xAI all fail on type of attack, study finds JetBrains open-sources Mellum2 to go where Claude Code can’t Claude Code vs. Cursor vs. Codex vs. Antigravity — six months in This coding agent doesn’t want your feedback — it ships without it “Blowing things up”: The one move vendors got wrong on AI agents At Sapphire, SAP makes the case that enterprise AI is a context problem Gavriel Cohen found his own code inside OpenClaw, so he walked away AI retrieval at scale is becoming a systems problem, not a tooling problem The DIY platform trap that’s burning out engineering teams I tested Cursor’s new Jira integration and it’s 5 stars, no notes. Here’s why. Why GPT-5.4, Claude, and Gemini can’t agree on basic, real-world facts Replit’s vibe coding platform just got a Visa-backed identity layer for AI agents — and it changes how agents spend money Opus 4.8 Made Claude Smarter. Token Discipline Got Urgent. Why Linux creator Linus Torvalds gets angry hearing “99% of code is AI” Vendor neutrality isn’t magic: A hard look at the OpenTelemetry ecosystem “The AI did it” won’t save you when EU regulators come knocking The fix for soaring AI cloud bills exists — so why won’t we trust it? AI is shipping code faster than security was built to handle Why AWS scrapped OpenSearch’s architecture to chase agent workloads Claude Opus 4.8 is here: effort controls, dynamic workflows, cheaper fast mode, better honesty, less deception Percona celebrates 20th birthday with new foundation — and a goat cake Why OpenAI and Anthropic are hiring forward deployed engineer teams Claw-style AI agents are coming to the enterprise. The governance infrastructure is still catching up. The agentic identity crisis: Why your security isn’t ready for the AI revolution Debugging the undebuggable: building observability into probabilistic AI systems Snowflake commits $6B to AWS as it pushes deeper into AI Why MotherDuck refuses to fork DuckDB Researcher “gave Claude Code ‘ADHD’… and it thinks 2x better now.” Outside experts want more proof. “There is no accountability”: AI coding agents are installing packages no one owns “Tokenmaxxing is real, expensive & it’s spreading”: AI budgets are exploding With Google’s debut, the most important AI agent feature is now the most boring one Why AI agents need a Context Lake Google ranks the best AI for building Android apps, and the winner isn’t Gemini Google pushes Pro, Ultra, and free users from open-source Gemini CLI to closed-source Antigravity CLI The reason enterprise outages almost never start where ops teams think Taming the agentic influx: a blueprint for AI business observability How the AC/DC framework helps teams govern AI coding agents GitLab 19.0 trades its string section for a full DevSecOps orchestra Who’s monitoring the agents? How Jaeger hit 8.6× compression on 10 million spans with ClickHouse What ClickHouse learned from a year of coding with AI agents OpenClaw passed 300,000 GitHub stars. Then Google launched Spark.
OpenClaw and Hermes agree on what an agent is. They disagree on what controls it.
http://www.facebook.com/janakiramm · 2026-06-24 · via The New Stack | DevOps, Open Source, and Cloud Native News

At Microsoft’s Build keynote this month, CEO Satya Nadella described a platform shift away from operating systems and apps, and toward agentic AI that doesn’t wait to be opened by a user. Then he showed the layer that makes the shift possible: OpenClaw, an open-source harness and independent project released only months earlier, running natively on Windows inside Microsoft’s new execution containers. Built on top of it was Scout, Microsoft’s always-on enterprise agent. A harness barely a year old, onstage as governed infrastructure.

Nvidia had made the case more bluntly at its GTC conference in March, where Jensen Huang called OpenClaw “the operating system for personal AI.” The analogy sticks: A harness does for a language model what an OS does for a processor. A model can independently answer questions while a harness enables it to run continuously, remember what it learns, and call tools to act.

Two open projects have built that layer this year from different starting points. OpenClaw is built around the gateway, the part that connects an agent to the channels people already use. Hermes Agent, from Nous Research, is built around memory, the part that lets an agent learn a developer’s work and improve at it. The contest between them is over the control layer, not the model either one calls.

The agent harness in plain English

At its core, an agent harness is the software that turns a model into a system capable of operating autonomously. It brings together a runtime that keeps the agent alive between tasks, a gateway that carries messages in and out, and a memory that persists across sessions. On top of those sit the tools the agent calls to act, the identity it runs under, the skills it can extend, and the policy and observability controls that decide what it may touch and what it must record. A coding assistant such as Claude Code or Codex covers only part of this. It runs inside an interactive session and loses most of its working context once that session ends. A harness keeps the runtime, memory, and governance in place so the agent can run unattended.

A harness keeps the runtime, memory, and governance in place so the agent can run unattended.

Nous Research and OpenClaw agree on that anatomy. They differ on which part they treat as the primary control point. OpenClaw starts with the gateway, so one agent can answer on WhatsApp, Discord, Slack, and other channels from a single place. Hermes starts with memory, so one agent can carry a developer’s context across weeks and refine its own skills.

OpenClaw’s gateway-first design

OpenClaw began as an independent open-source project from Peter Steinberger, a developer known for his earlier work in PDF tooling, who released an early version late in 2025 and renamed it twice before settling on OpenClaw in January. It is built for breadth, centered on a central gateway that connects the agent to dozens of messaging channels. ClawHub, its public skills marketplace, holds thousands of community skills that extend what the agent can do. The open-source momentum was real, with the repository near 380,000 GitHub stars by late June, though stars measure visibility rather than production use.

The more important development is who adopted that gateway. Steinberger joined OpenAI in February, and the project moved to an independent foundation with OpenAI as a sponsor rather than an owner.

At GTC in March, Nvidia wrapped OpenClaw in NemoClaw, an OpenShell runtime that sandboxes each agent and enforces policy from outside the agent’s reach.

At Build in June, Microsoft made OpenClaw native to Windows execution containers and shipped Scout, an agent on the OpenClaw gateway with its own Entra identity and connections into Teams, Outlook, and SharePoint. In each case, the platform vendor kept OpenClaw’s breadth and added the governance and identity the original project lacked.

A security team can now scope which folders an agent reads and which stay hidden, rather than granting the broad access that made early OpenClaw deployments risky.

For enterprises, that changes the calculus. A security team can now scope which folders an agent reads and which stay hidden, rather than granting the broad access that made early OpenClaw deployments risky. Platform teams can offer a single governed agent that staff can access from the tools they already use. Breadth gave OpenClaw distribution, and the platform vendors supplied the controls that distribution needed to enter production.

Hermes’ memory-first design

Hermes Agent takes the other path. Nous Research, the lab behind the Hermes, Nomos, and Psyche model families, released it on February 25 under an MIT license, written in Python and built to run persistently on infrastructure the team owns: a VPS, a home server, or a laptop.

The defining capability of Hermes is persistent memory across sessions. It keeps a layered memory, develops new skills after a hard task, and refines those skills as it uses them. It also builds a profile of the developer it works for, so each session starts with more context than the last. The skills follow the agentskills.io standard, which keeps them portable across agents rather than locked to one.

That depth has translated into measurable usage. Hermes surpassed 100,000 GitHub stars by mid-May and reached roughly 160,000 by late in the month. It overtook OpenClaw in OpenRouter’s daily token rankings on May 10, with the day’s total reported at 224 billion tokens, up from 186 billion, and placed Hermes first by total tokens.

By late June, OpenRouter’s app rankings also placed Hermes first by total tokens, past 22 trillion. GitHub stars, token volume, and platform endorsements measure different kinds of adoption, and they rarely move together. Nous has also made portability part of the pitch, shipping a hermes claw migrate command that imports an OpenClaw user’s settings, memories, skills, and keys in one step.

Developers can keep an agent that holds a codebase, its conventions, and prior decisions across weeks, instead of rebuilding that context each morning. Teams can move the agent between providers with a single command, since Hermes remains model-agnostic across hundreds of models. The tradeoff is operational, since the team that runs Hermes also has to secure and maintain the infrastructure it lives on.

Breadth, depth, and where each fits

The choice resembles the familiar tradeoff between a managed cloud service and self-managed infrastructure. A managed service is convenient and vendor-governed, while self-managed infrastructure offers full control and operational responsibility.

Many enterprises will run both, depending on the workload. Neither project is limited to a single capability. OpenClaw includes memory and skills, and Hermes speaks across twenty-odd channels, so the distinction is one of emphasis rather than exclusivity. The table below maps the common cases, with the caveat that both are emerging platforms rather than finished products.

Real deployments will not standardize on one approach. Nvidia’s NemoClaw blueprints already run Hermes agents under OpenShell as readily as they run OpenClaw. The governance layer is being built to sit beneath multiple agent projects rather than to pick one.

Why the harness layer matters

Enterprise buyers should slow down on two questions before either agent touches production systems. The first question is one of accountability. When an agent can rewrite its own memory and skills between sessions, as Hermes does, the team needs to know who can explain a change in behavior and where that change is logged. The second question concerns ownership. When governance and identity come from a platform vendor, as they do with NemoClaw and Scout, the policy engine and the identity belong to that vendor, not to the team running the agent.

Nvidia and Microsoft are competing to place governance, identity, and observability around whichever agent a customer chooses.

For the platform vendors, the prize is the runtime layer, which will outlast any single foundation model. Nvidia and Microsoft are competing to place governance, identity, and observability around whichever agent a customer chooses, which is why NemoClaw supports Hermes alongside OpenClaw.

Security is part of the same logic. Audits of OpenClaw’s skill marketplace flagged 341 malicious entries among the skills they scanned, and security firms reported tens of thousands of exposed instances earlier this year – the gap that governed runtimes are meant to close.

What’s next

The agent market is moving past model selection into the runtime, governance, and memory layers. OpenClaw showed that a broad gateway and a large skills ecosystem can attract developers and draw in OpenAI, Nvidia, and Microsoft. Hermes showed that persistent memory and self-improving skills can drive heavy daily usage without the same platform backing. Whether breadth and depth will remain in separate projects is already uncertain, since NemoClaw runs under a single set of controls and Hermes can import an OpenClaw setup.

The next phase will turn on ownership.

Enterprises will need to know who controls the memory an agent accumulates, who governs the tools it can call, and who owns the runtime that keeps it alive. An agent that has learned a year’s worth of a developer’s habits creates a higher switching cost than one that merely connects to many applications. Memory, more than channel reach, is becoming the durable form of lock-in, which is why the runtime, governance, and memory layers are where the platform vendors will compete as they settle in beneath both projects.

YOUTUBE.COM/THENEWSTACK

Tech moves fast, don't miss an episode. Subscribe to our YouTube channel to stream all our podcasts, interviews, demos, and more.

Created with Sketch.