Research Updates

Full re-research pass

Every cloned repo pulled and git-log-diffed since February; the 10 systems with no local repo re-researched on the web. Material orthogonal-component changes:

• Cline (v3.89.2): restructured into an embeddable layered SDK (@cline/{shared,llms,agents,core,sdk}) + a detached multi-client Cline Hub daemon brokering one shared session across IDE/CLI/browser. Orthogonal shifts from "VS Code-native plan/act" to the Hub session broker.
• ElizaOS (v2.0.3-beta): remote-mode plugins now run in isolated Bun subprocesses with a permissions manifest + RPC envelope; vector store no longer Postgres-only (sqlite-vec, in-memory). Drops the "only via pgvector" claim.
• Muaddib (v2.4.0): added a per-arc default-deny network trust boundary (in-room human approval) on top of the Gondolin micro-VM, plus a BYOK per-user cost/billing subsystem.
• NanoClaw (v2.1.x): v1→v2 rewrite — DB-as-IPC (a mounted SQLite DB with messages_in/messages_out as the sole host↔container channel), Chat-SDK bridge, pluggable AgentProvider.
• flue (v0.11.1): orthogonal reframed to the just-bash in-memory virtual sandbox as default isolation (container opt-in); added durable-execution / crash-recovery.
• NemoClaw: orthogonal sharpened to the transparent inference-routing proxy (keys stay host-side); flagged CVE-2026-24222 (prompt-injection env-var exfil at sandbox init).
• Plus version/scope refreshes: OpenClaw (2026.6.2, pluggable docker/ssh/openshell sandbox), Hermes (v2026.6.5), milady (v2.0, TEE + on-chain), Graphify (v0.8.39), smolagents (v1.26.0, WasmExecutor removed), takopi (v0.23.4), HOME23 (v0.6.0), aeon (multi-provider gateway), OpenClaw Managed Agents.

New systems added

• Durable execution & event sourcing: Centaur (durable ctx.step replay + iron-proxy credential firewall), ActiveGraph (the log is the agent), DBOS (orchestrator-less durable execution, Postgres-only), AxonIQ (event store for explainability).
• Isolation & observability: forkd (fork() for microVMs), Edera (Type-1 Xen per-agent kernel), AgentSight (eBPF observe-don't-contain), TaskForge (capability-request→approve→rebuild→resume).
• Cross-sectional: Company-Brain Patterns (Stripe Minions, Glean, Agentforce, Anthropic Dreaming, Notion, ChatGPT Enterprise) and brainpro (vendor-neutral per-task model routing).

Site

Renamed "Agent Frameworks" → Agents Hub. Restored the canonical krons gold/blue style across all pages (the shared /assets/ dir was missing, so pages had been loading an unstyled fallback).

Architecture shift: memory service → runtime contract

v3.4.0 (2026-06-05) repositions ContextLattice from "a memory service agents call into" to "a runtime contract agents inhabit." The public headline shifted from write-optimization / freshness framing to amnesia prevention: "Stop giving your agents amnesia and calling it workflow." The write-optimized control-plane core still holds — but the orthogonal claim is now the runtime contract, with context freshness secondary.

• Universal adapter lifecycle: a single contextlattice_agent_adapter implementing bootstrap, context-pack, checkpoint, handoff, event, complete — any runtime wires it once for durable handoff.
• Native runtime sessions: first-class sessions via /v1/agents/sessions with /telemetry/agents/runtime, and objective_runtime_state.v1 threaded across preflight / context-pack / Dream Mode.
• Compiled context packets + Skills Index: prompt-ready compiled context packages plus a surfaced Skills Index (commits #272, #274, June 2026) — the move from raw transcript replay to clean compiled packets for cleaner prompts and cross-agent handoff.
• Async-continuation steering (v3.4.21, 2026-06-13): agents can now steer the async slow-lane deep continuation, not just consume it.

Repo health

Currently v3.4.23 (2026-06-13). github.com/sheawinkler/ContextLattice is alive and very active — pushed 2026-06-14, 113 stars, 7 forks, Go primary lang, not archived; 30 GitHub releases spanning v3.3.x–v3.4.23 in roughly Feb–June 2026. v3.4.0 is the stable public agent-runtime-contract baseline; v4 stays a private tuning/experiment lane gated on benchmark/recall/soak.

Updated page: ContextLattice (v3.4.23)

Overview

Monthly reresearch of 9 agent framework repositories revealed significant activity in 3 systems: ElizaOS (2680 commits), Cline (55 commits), and smolagents (3 commits). The common theme: production hardening—isolation boundaries, credential management, containerized deployment, and operational observability.

ElizaOS: Isolation Hardening (2680 commits)

• AccountPool single source of truth: Eliminated dual-store divergence between UI config (milady.json) and runtime pools. AccountPool now owns all credential mutations with public CRUD API. Cross-provider account isolation enforced—each provider maintains independent priority namespace.
• Runtime composition extensions: @elizaos/agent harness package introduced with extended loadCharacters (JSON file + cwd support) and optional checkShouldRespond callbacks. Agent-Orchestrator + Plugin-Manager promoted to core bundles for multi-agent PTY delegation and runtime plugin loading.
• Docker dependency isolation: Agent skills re-linked per image, local embedding startup bounded with health probes, elizamaker/companion deps isolated in .dockerignore.ci. 599+ lines of connector simulator + mutation tests prove state isolation.
• Vault credential storage: @elizaos/vault introduced for credential mirroring—apiKeyRef replaces plaintext apiKey in configs. Android AOSP local inference wired with bun:ffi struct-by-value shim + KV chunking.
• Updated page: ElizaOS Architecture (v2.0.0-alpha.523)

Cline: SDK Migration & Observability (55 commits)

• Controller decomposition: 375+ line SdkController split into SdkMessageCoordinator, SdkSessionFactory, SdkSessionLifecycle, mode-specific handlers. Plan/Act mode switching triggers session rebuild with preserved history.
• Isolation boundary: Tool approval enforcement migrated to SDK toolPolicies. Follow-up message queueing prevents "already in progress" races. Subagent spawn events filter by parentAgentId to prevent parent chat flooding.
• Error handling: Typed RipgrepError + error_reason proto fields (CLINE-1814) for structured diagnostics. Workspace unavailability, ripgrep spawn failures surface via telemetry with individual enums.
• Memory observability: Periodic 5-minute heap snapshots + OOM capture via --heapsnapshot-near-heap-limit=1. CVE-2026-41242 protobufjs pinned to 7.5.5.
• Updated page: Cline — Distilled

smolagents: Security Hardening (3 commits)

• Pickle disabled by default: allow_pickle=False in remote executors reduces arbitrary object deserialization risk.
• Documentation clarity: Explicit warning that LocalPythonExecutor is NOT a security sandbox—mandate external sandboxes (E2B, Docker, Modal) for untrusted code.
• CI supply-chain hardening: GitHub Actions pinned to commit SHAs for reproducibility.
• Updated page: smolagents Architecture

No Activity (6 systems)

OpenClaw, NemoClaw, Milady, Hermes, HOME23, Graphify had 0 commits in April 2026. Pages remain current from April 16, 2026 analysis.

Overview

Cloned all 9 system repositories to /workspace/agent-research-sources/ and launched parallel deep code analysis using Explore subagents. Updated all research pages with current state findings integrated into existing orthogonal sections (not as "Recent Updates" sections).

What Changed Per System

• Hermes: Discovered smart model routing (cheap-model heuristics for simple queries <160 chars), parallel tool execution with 8-worker pool and safety gates, expanded from 11 to 16 messaging platforms (added iMessage via BlueBubbles, WeChat, WeCom), trajectory persistence for RL training, multi-instance isolation via ~/.hermes/profiles/, pluggable context engine with compression support
• ElizaOS: Updated to v2.0.0-alpha.176, corrected plugin count from 90+ to 35+ with action/evaluator/provider architecture, found WorldEngine for multi-agent coordination, trajectory logging for decision replay, trust scoring for relationship tracking, Web3-native integration (EVM chains, Solana, TEE trusted execution)
• HOME23: Expanded living brain details (20,000+ knowledge nodes with autonomous expansion), quantum-aware reasoning architecture, autonomous remediation workflows (self-healing system failures), PM2-managed one-command install, multi-modal understanding (vision/audio/code), continuous cognitive loops (think-dream cycles)
• Graphify: Updated with 25 language support via tree-sitter AST parsing, multimodal extraction (code/text/PDF/images), query-guided retrieval for targeted answers, 71.5x token efficiency maintained, Leiden clustering for natural module discovery
• OpenClaw: Confirmed 24+ channels (most of any system), manifest-first plugin architecture with plugin.json capabilities/hooks declaration, Pi framework details (@mariozechner/pi-coding-agent, not Claude Code wrapper), involuntary subagent injection mechanics (child results force-injected into parent without consent)
• NemoClaw: Added blueprint lifecycle (declarative workflow definitions), NVIDIA OpenShell container runtime integration, CUDA/TensorRT-LLM optimization for GPU acceleration, agent mesh for distributed multi-agent coordination with resource quotas, Landlock+seccomp+netns sandboxing stack
• Milady: Fully documented Electrobun desktop wrapper (cross-platform native app), progressive SSE streaming for real-time token-level display, PGLite embedded Postgres (WASM-based, zero-server local-first storage), BNB Chain native integration for NFT personas and DeFi features, character-driven personalities using ElizaOS core
• smolagents: Documented HuggingFace-native approach, CodeAgent writes Python directly (30% token reduction vs JSON tool calls), 11 model backends (OpenAI, Anthropic, HF Inference, local), Hub tool marketplace for community tool sharing, minimal dependencies for lightweight deployment
• Cline: VSCode extension with 30+ tools, streaming diff view for incremental changes, 40+ LLM providers via OpenRouter integration, MCP marketplace support, approval flow for dangerous operations, persistent task history across sessions

Main Hub Index Updated

System capability summaries on main hub page updated to reflect current state. All pages now document current implementation, not historical updates.