OpenClaw vs Hermes Agent: Features, Local Models and the Security Record
How OpenClaw and Nous Research's Hermes Agent compare on architecture and local models, plus the major 2026 CVEs and a hardening checklist for both.
Category desk
AI Security
Coverage of AI application security, model abuse, agentic systems, and data exposure.
Claude Opus 5.5 Is Anthropic's Strongest Cyber Model Yet, So Most Security Work Goes to Opus 4.8
Opus 5.5 out-exploits Mythos 5.1 in Anthropic's own cyber tests and costs 40% less to run than Opus 5. Blocked security requests fall back to Opus 4.8.
Grok 4.7 Matches Claude Fable 5.1 Max — on SpaceXAI's Own Scorecard
SpaceXAI's launch table shows Grok 4.7 edging Claude Fable 5.1 Max on DeepSWE at a fraction of the price. On an independent harness, the gap is 29 points.
Architecting Zero Trust for MCP: Mitigating Tool Poisoning, Sampling Injection, and Capability Forgery in Agentic Systems
Model Context Protocol (MCP) lacks cryptographic capability attestation. We analyze tool description poisoning, sampling hijacking, and zero-trust proxy design.
Structured Output and Constrained Decoding: Making LLMs Return Valid JSON
Prompting for JSON gets you high-90s reliability; a grammar-driven token mask gets you a guarantee. The mechanism, the real costs, and where it still fails.
Agent Harness Architecture: How Coding Agents Actually Execute Tools
A mechanism-first breakdown of the runtime that wraps a model: the loop, tool schemas, sandboxing, context strategy, permissions, and injection defence.
Best Local AI Models to Run on Your DGX Sparks
From one Spark to four: the open-weight model to serve at each node count, with measured decode, prefill and context figures from Mia's AI Lab recipes.
The Agent Control Plane: Engineering Runtime Authorization for MCP and AI Tool Calls
Prompt injection resists a model-layer fix. Inside the agent control plane: workload identity, brokered credentials and blast-radius caps at the tool call.