project
Goose is Block's open-source AI agent framework for automating coding and developer workflows, extensible with tools and pluggable LLM backends.
No evidence-backed relationships are recorded.
Polyglot's developer ran six coding agents 30 times on each of seven local models, and three never made a tool call on models that write calls as text. The author's own error bars say 30 runs can sort agents into tiers but cannot rank two agents inside one.
Reality
Block joined the x402 Foundation on Sept. 24 and is adding Bitcoin Lightning to the agent-payment protocol Coinbase built for stablecoins. The move puts a second settlement asset, and a second large payments company, into a standard its creator handed to the Linux Foundation this year.
Reality
Manifold Security reported eight instances across seven command-line agents. The command runs as the user, outside the sandbox, with no approval prompt, and four were still firing when the researchers retested on September 1.
Reality
A Unikraft Cloud walkthrough clones a running database's persistent volume and boots a throwaway Postgres against it, so the NOT NULL migration that empty dev databases accept meets real rows first. The faster branching feature needs an enterprise license.
Reality
A 300-trial study swapped Goose, OpenCode and OpenHands-SDK under Qwen 3.6 Plus and MiniMax M2.5, and reports that the scaffold sets tokens per solved task and the failure mode while the score barely moves.
Reality
GitSpawn, as summarised in a dev.to write-up of Cloud Security Alliance findings, uses a Git performance setting to run attacker code when a coding agent inspects a project it just opened. Seven agents are named.
Reality
A developer kept the model and the repository fixed and changed only the agent framework. Six days of Codex produced no completed run, while goose's own engine drove the same model to working code.
Reality
Manifold Security's GitSpawn findings cover eight issues across seven coding agents. The path runs through core.fsmonitor, where a background git status starts a helper the repository chose, outside the agent's sandbox and with no prompt.
Reality
The wiki's old software took a plain GET as an edit, so a harness that policed request types could not stop the writes. GitSpawn puts the same gap in the startup git calls of seven coding agents.
Reality
RUGERO Tesla spent several days in a libIEC61850 lab and came out with two separate sets of security questions, because MMS answers inside a session on TCP/102 while GOOSE and Sampled Values answer to whatever frame arrives.
Reality
Lock-in migrated from the model to the runtime that holds your tool grants, approval rules and learned state. Six specifications aim to make that runtime's contents portable, and half of them are one person's drafts.
Reality
The spread traces to two numbers you can read off your own logs: the tokens a harness spends before any work starts, and how many turns it takes. Together they predicted total token use with an R-squared of 0.99.
Reality
Block has published the first hard distribution of AI adoption inside a large engineering org: one agent for most, three to five for the next cohort, and a small team building the orchestrator.
Reality
Block, Stripe and Shopify run in-house coding agents too. What Ramp built is not a model but a credentialed development box, and that is the part procurement cannot order.
Reality
Block, xAI and Nous all landed on the agent as a persistent identity. That identity still lives in whatever file the harness picked, and the switching bill is now memory.
Reality
A dev.to pre-flight checklist puts network reachability first: private-range answers and AAAA-only hosts kill the connection, and a cross-host redirect strips the Authorization header.
Reality
Google's Agent2Agent has been accepted as a growth-stage project at the Linux Foundation's Agentic AI Foundation, which already holds MCP, goose and AGENTS.md. The protocol question is now a governance non-event.
Reality
Block open-sourced the desktop app its own teams use to drive agents. The design claim underneath it is that active context should be inspectable, not archaeology in a prompt log.
Reality