Skip to content

BuildNot yet confirmed elsewhere1 publisher3 min readPublished

Laude and MIT put persistent agency in 9,900 lines of Bash, and the bill arrives with it

Headlong is Apache-2.0, so a team can read the loop before running it. What nobody can read is a benchmark, and the shared thought stream is also the privacy problem.

The Engineer · Build desk

How we use AISend a correction

Photograph accompanying Laude and MIT put persistent agency in 9,900 lines of Bash, and the bill arrives with it
Photo: harvard.edu

What happened

  • Laude Institute and MIT released Headlong on August 25th, a harness that lets an agent keep thinking, choosing projects and acting after its users stop talking to it.
  • The code is Apache-2.0 on GitHub, with Laude putting the core at 9,900 lines of Bash in bin/ and thinkers/.
  • There are no independent performance results, and Laude says it assesses the agent mainly through qualitative observation.

Why it matters

  • cost Budget owners inherit a line item no request log explains: model spend attributable to nobody's question, generated while the office is empty.
  • exposure Cross-user exposure lands on whoever installed it, because something said in one channel can resurface inside an answer given to a different colleague.
  • contradiction runtimewire treats the loop as the hazard while noting that reactive CLIs already run shell commands, so a policy written around per-command approval does not cover an agent acting hours after the...
  • decision With nothing to benchmark, the adopt-or-not call falls to whoever can read Bash, not to whoever compares scores.

Who decides how many model calls happen matters more than the line count. The main loop, called Thinker, repeatedly invokes a component named shellm, which asks a language model for reasoning, Bash commands or both, executes the commands, and continues until the model sets a FINAL environment variable [15]. There is no checklist unless the agent writes one, and each next thought is selected from earlier thoughts and new observations [13]. Iteration count is therefore a property of the agent, not of the request log [20], which is the mechanism under runtimewire's warning that the continuous loop can increase token spending [6]. Tiered compaction keeps recent events in full detail and summarizes older history [16], which shrinks the context per call and does nothing to the number of calls.

The shared stream has the same double character. Audel, the agent Laude has been running for several weeks, works as one agent over one stream reached through Slack, Telegram and a mobile app [8]. The behavior Laude puts forward as the point depends on that arrangement: following what different people are doing, returning to an old subject, contacting someone with no new prompt [9]. runtimewire flags the same stream as a cross-user privacy risk [7]. One mechanism, two names, and the team that installs it is choosing on behalf of everyone in the channel.

Shell access is not the delta. OpenAI's Codex CLI can read, modify and run code locally [17], and GitHub Copilot CLI can execute shell commands subject to permissions or approval [18]. An approval prompt assumes a human is present at the moment the command runs. Laude's clearest example, dated August 5th, happened while nobody was interacting with the agent: it checked a background recall process it had built, found the code reading an environment variable that was never set, searched the codebase to confirm, rewrote the process to read from a pipe, verified the repair, and the fix was merged, with the log putting the sequence at 48 minutes [12]. Attendance is what changed, not privilege.

What stands in for evaluation is that log. More than 50 commits from Audel's fork were pulled into the main repository [11]. On its first day the agent audited eight stale Git branches and came back 10 minutes later to correct its own count [10]. There are no independent performance results, and Laude says it judges changes to Audel mainly by qualitative observation [14], so every quantified figure on offer is first-party [19]. Laude's grantmaking is anchored by Konwinski's $100 million pledge [5], which is part of why the artifact turned up as Apache-2.0 code on GitHub instead of a product with a score attached [3].

The compensating handle is instrumentation. Thoughts and actions are stored in a directed graph of JSONL files that supports forks and merges [15], and the core is 9,900 lines of Bash in bin/ and thinkers/ [4]. Absent an eval, that graph is the only way to reconstruct what an unattended agent spent and what it touched, after the fact.

What to watch

  • An evaluation of continuous thought run by anyone other than Laude, covering days rather than single tasks.

Clarity's read

What the record supports and how the coverage leans. The claims behind it follow.

Reality

Evidence34
Adoption16
Hype gap+22
Incentives66
Confidence42
Why these scores

Claim ledger

Ranked by verification strength, evidence, and original report placement.

  1. [1]

    Andy Konwinski's Laude Institute and MIT released Headlong on August 25th, an open-source harness that allows an AI agent to keep generating thoughts, choosing projects and taking actions after its users have stopped talking to it.

    ReportedSupportedView cited source
  2. [2]

    The August 25th launch post calls the design "persistent agency": messages become observations inside a continuous thought stream instead of opening isolated sessions, and the agent decides whether to answer, wait, investigate something else or contact a user later.

    ReportedSupportedView cited source
  3. [3]

    Developers can inspect and modify the Apache-2.0 Headlong code on GitHub.

    ReportedSupportedView cited source

Sources

1 independent publisher whose own reporting we read for this story.

  1. runtimewire.com

    1 article · August 24, 2026

    Laude ships an agent harness that keeps thinking after you stop asking

Share your take

Let Clarity write the post for you.

Signed-in readers get a short post drafted on this story in the register they choose — narrative, analytical, or a direct position — editable to the last word before it goes anywhere. The share buttons at the top of this story work without an account.

Topics and entities

Follow any of these and your For You feed starts watching them — no settings page required.

Topics

Loading related stories