🔨 The Anvil

Sunday, September 13, 2026

12 stories · Standard format

Generated with AI from public sources. Verify before relying on for decisions.

🎧 Listen to this briefing or subscribe as a podcast →

The coastal crisis in Southern California is escalating as Orange County manages continuous storm-driven property damage in Dana Point and Laguna Beach. In the software domain, engineering platforms are prioritizing secure runtime boundaries, with Anthropic patching permission bypasses in its CLI and new agent frameworks embedding cross-session memory.

AI Developments

Nous Research Releases Hermes Agent with Cross-Session Memory and Multi-Platform Gateway

Nous Research launched Hermes Agent on Sunday, an open agent framework featuring an automated learning loop, skill creation, and persistent cross-session memory. Built to run across terminal sandboxes like Docker, Modal, and Vercel Sandbox, the system integrates a multi-platform gateway connecting Telegram, Slack, Discord, WhatsApp, Signal, and CLI interfaces to over 300 underlying language models.

Hermes Agent addresses the state management bottleneck in open-source agentic workflows by embedding continuous skill acquisition directly into the execution runtime. Decoupling the messaging frontend from isolated execution sandboxes allows agents to maintain long-horizon task context without exposing local environments to untrusted inputs. This provides product builders with a practical blueprint for self-improving, multi-interface background automation.

Verified across 1 sources: Nous Research

Alibaba Introduces Qwen-UI-Agent for Multi-Platform Real-Device Control

Alibaba unveiled Qwen-UI-Agent on Saturday, a multimodal foundation model engineered to control GUI workflows across mobile, desktop, web, and search environments. The model scored 82.1% in MobileWorld and achieved a 92.2% task success rate on a physical testing rig containing over 100 Android devices. The architecture features direct CLI execution, trajectory reinforcement learning exceeding 100 steps, and safety pauses for sensitive operations.

Evaluating GUI agents on physical hardware environments rather than synthetic browser simulators bridges the reliability gap for real-world application automation. By incorporating long-horizon reinforcement learning and hardware-level interaction, Qwen-UI-Agent provides a foundation for cross-platform task execution. The inclusion of interactive confirmation triggers for high-risk actions establishes an essential safety pattern for enterprise agent deployments.

Verified across 1 sources: Xix AI

Newport Beach & Orange County

Orange County Activates Emergency Operations as Dana Point and Laguna Beach Red-Tag Homes

Following Friday's Emergency Operations Center activation we covered, Orange County continues to manage severe coastal erosion from Hurricane Marie's south swells. On Saturday, additional oceanfront homes along Dana Point's Beach Road were red-tagged, bringing the local total to 10—up from the nine we noted previously. In Laguna Beach, where we tracked six homes being yellow-tagged, City Manager Dave Kiff estimated public infrastructure damage to the Aliso Beach parking lot at $500,000.

Sustained sand loss along the Orange County coastline is shifting from an acute weather event into a structural threat against high-value real estate and vital regional transit corridors, including the coastal rail line. While municipal leaders push for a county-wide emergency declaration to unlock state and federal disaster funds, county supervisors remain divided over potential impacts on homeowner insurance rates and municipal borrowing. The crisis forces property owners and city engineers into costly, continuous boulder revetment projects to stabilize fragile bluff lines.

Verified across 4 sources: NBC Los Angeles · Los Angeles Times · The Cooldown · MyNewsLA

Newport Beach Prepares $1.5M Standalone Mail-In Election as Registrar Refuses Ballot

Following the estimated $1.5 million cost projections we covered for Newport Beach's November 3 special election, the City Council voted Friday to proceed with an independent mail-in process. The move comes after Orange County Registrar Bob Page formally declined to manage the election on short notice, forcing City Clerk Lena Shumway to handle the logistics for the resident-sponsored charter initiatives on term limits, district elections, and public meeting oversight.

Managing a municipal election independent of county election infrastructure introduces administrative risks around voter roster verification, multi-language ballot distribution, and overseas vote processing. The $1.5 million price tag creates significant fiscal drag for a city-level special election, driven by judicial enforcement of signature deadlines. City Attorney Aaron Harp is coordinating remaining legal challenges before superior court judges ahead of the November date.

Verified across 1 sources: Orange County Register

State Requests $500K Monthly Fines Against Huntington Beach Over Housing Rezoning

California Attorney General Rob Bonta filed a court motion on September 8 requesting $500,000 in monthly state penalties against Huntington Beach, arguing the city failed to execute mandatory zoning changes required by its updated housing element. Huntington Beach has until October 14 to complete the requisite zoning adjustments ahead of an October 2 court hearing on the proposed fines.

The state's escalation to monthly financial penalties tests the legal limits of charter city autonomy against California's mandatory housing element laws. If granted by Judge Katherine Bacal, $500,000 monthly assessments create severe municipal budget exposure while establishing an enforcement template for non-compliant cities across Orange County. The outcome dictates whether projected residential zoning changes will be forcibly enacted across contested coastal parcels.

Verified across 1 sources: medianewssource.com

AI Coding & Design Tools

Claude Code 2.1.268-2.1.270 Patches Symlink Permission Bypasses and Adds Plugin Evals

Adding to the ongoing Claude Code CLI updates we've been tracking, Anthropic released versions 2.1.268 through 2.1.270 on Saturday. The patches close critical security gaps where deny rules were silently bypassed via symlinks or complex single-line expressions. The updates also introduce `claude plugin eval` for executing scored test suites alongside terminal compatibility fixes across WezTerm and kitty. Simultaneously, Codex CLI 0.154.0 added GPT-6 Astra integration, while Gemini CLI 0.59.0 deployed SSRF prevention.

When AI coding agents operate with local shell and filesystem access, permission boundary regressions present immediate risks to internal codebases and environment variables. Closing symlink bypasses ensures that scoped deny rules hold firm when agents execute complex multi-file edits. For engineering leads, the addition of structured plugin evaluation suites allows teams to programmatically audit custom agent skills before deploying them into CI/CD pipelines.

Verified across 3 sources: Releasebot · GitHub · DEV Community

Cognition Post-Trains SWE-2 Model on Kimi K3, Cut Inference Costs 64%

Cognition released SWE-2 on Sunday, a coding model post-trained via reinforcement learning from Moonshot AI's 2.8-trillion parameter Kimi K3 base model. Operating exclusively within Devin Desktop and CLI environments, SWE-2 scored 50.0% on FrontierCode 1.1 Main—matching Claude Fable 5.1 while lowering token costs by 64%—and scored 92.8% on Terminal-Bench 2.1.

SWE-2 demonstrates that applying specialized reinforcement learning over massive open base models can produce frontier-level software engineering performance at significantly reduced operational costs. By embedding length-weighted reward penalties into the RL pipeline, Cognition managed to curb agent over-exploration on simple tasks. However, encapsulating the model strictly inside Devin's proprietary harness highlights an industry trend where high-efficiency models are locked behind integrated platform environments rather than exposed as standalone APIs.

Verified across 2 sources: Juicy Talk · Block AI Report

OpenDesign Releases Local-First AI Design Studio Built on Local Coding Agents

OpenDesign released an open-source, local-first design studio on Sunday for macOS and Windows that executes directly on top of installed AI CLI tools like Claude Code, Cursor, and DeepSeek Harness. The desktop app generates web and mobile prototypes by enforcing a package's `DESIGN.md` rules as a strict brand contract, supporting 151 design systems alongside video generation via HeyGen's HyperFrames framework.

OpenDesign eliminates the gap between cloud design canvases and local code repositories by generating native CSS and component trees directly inside project directories. Parsing version-controlled `DESIGN.md` specifications ensures that generative UI iterations adhere strictly to established brand tokens and layout constraints. For design engineers, this local-first approach allows rapid visual prototyping without leaving terminal-based development loops.

Verified across 1 sources: GitHub

Spokane & North Idaho

Post Falls Police Arrest 15 Under Idaho's First Municipal 287(g) ICE Partnership

The Post Falls Police Department announced on Saturday that it has arrested 15 individuals for federal immigration violations following the implementation of its 287(g) agreement with Immigration and Customs Enforcement (ICE). Thirteen of the arrests occurred during initial job site checks and officer training sessions conducted in late August, marking the first municipal-level 287(g) enforcement partnership active in Idaho.

The operational rollout of 287(g) authority in Post Falls establishes a precedent for local law enforcement agencies in North Idaho to directly execute federal immigration checks. Performing compliance audits and arrests at local commercial job sites directly impacts regional construction labor pools and subcontractor operations. The initiative reflects a broader shift toward localized enforcement collaboration across the Inland Northwest.

Verified across 1 sources: KHQ

Spokane Incorporates Evacuation Route Gridlock into Plan Spokane 2046 Draft

Following the severe traffic bottlenecks we tracked when the Old Trails Fire jumped into the Indian Trail neighborhood, Spokane planning officials announced Saturday that wildfire evacuation mitigation is being formally integrated into the Plan Spokane 2046 draft. The inclusion responds to resident petitions demanding residential development moratoriums until road capacity is expanded, with public comment open through October 2.

Integrating wildfire evacuation metrics directly into municipal land-use planning creates a legal mechanism to cap housing development in suburban wildfire interface zones. For regional builders in the Inland Northwest, secondary access road requirements and evacuation capacity assessments will become mandatory prerequisites for subdivision approvals. The public hearings scheduled for November will establish how Spokane balances housing density targets against disaster management protocols.

Verified across 1 sources: Spokane Public Radio

Iran Conflict

Commercial Vessel Struck in Strait of Hormuz as Houthi Attacks Shut Down Saudi Pipeline

Following the Houthi drone attack on the Saudi East-West pipeline we covered yesterday, the Middle East energy conflict expanded Sunday as a commercial vessel was struck by a projectile near Qeshm Island in the Strait of Hormuz. The strike resulted in one death and three injuries, according to UK Maritime Trade Operations and Iranian state media. Meanwhile, Iraq dismissed its military commander in Maysan province after confirming the drone launches targeting Saudi energy infrastructure originated from Iraqi territory.

The simultaneous disruption of maritime transit through the Strait of Hormuz and cross-peninsula pipeline capacity eliminates key redundancy channels for Middle Eastern crude exports. Daily vessel transits through Hormuz dropped by 50% on Thursday, driving Brent crude higher and adding steep war-risk surcharges to global maritime freight. The confirmation of drone launches from eastern Iraq underscores the widening multi-front nature of the conflict, complicating regional de-escalation efforts.

Verified across 10 sources: Reuters · Times Now News · Sky News · CBS News · Gulf News · CNN · Al Jazeera · The Hill · India Today · Anadolu Agency

OSINT & Intelligence

Anthropic Threat Intelligence Details State-Aligned Exploitation of Claude for Military Reconnaissance

Anthropic published a comprehensive threat intelligence report detailing state-aligned misuse of Claude between December 2025 and August 2026. Findings reveal Russian actor GTG-20006 used Claude to rebuild malware after detection, while freelance developers used Claude Code to design autonomous targeting software for kamikaze drones using Ukrainian combat footage. Iranian-linked entities used the platform for naval targeting recommendations and propaganda generation, while Houthi-held accounts in Yemen attempted to troubleshoot guided-rocket test failures.

The report demonstrates how general-purpose AI models are being co-opted across live intrusion lifecycles and physical weapons development. For security teams and OSINT researchers, platform telemetry and conversational logs are becoming vital intelligence sources for identifying emerging kinetic threats. This operational reality forces AI vendors to enforce strict execution monitoring and automated behavioral detection to prevent dual-use capabilities from accelerating adversary tempos.

Verified across 6 sources: InfoSec Today · The Hack Academy · InfoSec Today · Crypto Briefing · Times of India · Cyber Intelligence Brief


The Big Picture

Protocol Standards Reframe Agent Plumbing into Unified Runtimes Developer infrastructure is rapidly converging around the Model Context Protocol (MCP) to replace bespoke API wrappers with standardized, discoverable tool channels.

Developer Tooling Shifts to Isolated Parallel Execution CLI tools and desktop IDEs are incorporating worktree isolation and multi-backend sandboxes to support asynchronous subagent swarms without repository collisions.

Coastal Swells Drive Multi-Jurisdictional Municipal Interventions Compounding shoreline erosion along Orange County has escalated from isolated beach closures to coordinated emergency declarations across Dana Point, Laguna Beach, and County operations.

Red Sea and Persian Gulf Maritime Attacks Strain Energy Supply Lines Simultaneous drone and projectile strikes across Saudi pipeline infrastructure and commercial vessels near the Strait of Hormuz continue to throttle crude transit and drive maritime insurance surcharges.

Frontier AI Misuse Telemetry Converts Models into Observability Sensors Model providers are leveraging fine-grained prompt and tool telemetry to track state-aligned cyber reconnaissance, weapons simulation, and automated malware iteration before kinetic deployment.

What to Expect

2026-09-14 Northwest Power and Conservation Council holds public hearing on Ninth Northwest Power Plan at Spokane City Hall.
2026-09-23 Pre-orders close for The Spokesman-Review's Spokane Complex fire record book.
2026-10-02 Orange County Superior Court hearing on requested $500,000 monthly fines for Huntington Beach housing non-compliance.
2026-10-02 Public comment period closes for Plan Spokane 2046 draft comprehensive plan incorporating wildfire evacuation routes.
2026-11-03 Proposed court-ordered Newport Beach special election date for resident-sponsored charter initiatives.

Every story, researched.

Every story verified across multiple sources before publication.

🔍

Scanned

Across multiple search engines and news databases

331
📖

Read in full

Every article opened, read, and evaluated

119

Published today

Ranked by importance and verified across sources

12

— The Anvil

🎙 Listen as a podcast

Subscribe in your favorite podcast app to get each new briefing delivered automatically as audio.

Apple Podcasts
Library tab → ••• menu → Follow a Show by URL → paste
Overcast
+ button → Add URL → paste
Pocket Casts
Search bar → paste URL
Castro, AntennaPod, Podcast Addict, Castbox, Podverse, Fountain
Look for Add by URL or paste into search

Spotify isn’t supported yet — it only lists shows from its own directory. Let us know if you need it there.