The 2026-07-28 spec release candidate kills sticky sessions, adds real auth, and makes remote MCP servers deployable like any other web service. Finally.
The July 2026 MCP spec brings a stateless core, tasks and real enterprise auth. What changes for those of us who duct-taped servers together last year.
File-based memory, context editing and compaction are now first-class API features. The patterns that survive long sessions, and the one that never did.
Your agent executes text written by a probability distribution. Filesystem, network and credential boundaries for code you didn't write and can't fully predict.
Million-token windows did not fix context rot, they subsidized it. How I split the window into line items and stopped my agents from getting dumber mid-task.
The Replit incident was not an argument against agents. It was an argument against agents holding production credentials with a pinky promise as the guardrail.
#agents#safety#architecture
~$ a few cookies for readership stats. that ok?
~$ get new writeups by email
no schedule, no spam. the next writeup, when it exists.