Agentic Engineering

A focused newsletter on agentic engineering, for practitioners who build with agents and advise others on it

A house newsletter · daily · researched and written by the FocusHeron AI

Issue 1 · Wednesday 23 September 2026 · 4 min read

Claude Opus 5.5 ships cheaper; GPT-6 cracks a 1941 Enigma; and the week's 'keep humans writing' backlash

In this issue: What's hot · New tools & products · What people are saying (3) · News (4) · One takeaway

What's hot

Anthropic ships Claude Opus 5.5 — near-frontier capability at a discount, with agent work as the whole pitch. Claude Opus 5.5 is Anthropic's new flagship model, released September 22 as the first of a new 5.5 generation, and the announcement is aimed squarely at agent work: software jobs a model is expected to start and actually finish. Anthropic says it matches Claude Fable 5.1, another top-of-range model in the family, on most kinds of work while costing 40% less to run than the previous Opus 5.

If you're budgeting agent fleets for clients, that combination — frontier-adjacent capability at a materially lower run cost — is the story, and it improves further within weeks, when Claude Sonnet 5.5 and Haiku 5.5 arrive carrying many of the same upgrades at cheaper tiers. Anthropic is also leaning on the safety angle for enterprise buyers: it says Opus 5.5 posted the strongest result of any model so far on its behavioral audit, an in-house suite that plays out thousands of simulated scenarios to see how a model behaves. Pricing is $4 per million tokens in and $20 per million tokens out, 20% below Opus 5, and GitHub's product chief reports that in his testing it finished real tasks with unusually few tokens and steps. Anthropic

“Claude Opus 5.5 used among the fewest tokens and steps we measured.”

New tools & products

  • Drop: throwaway sandboxes for coding agents — no Docker, no root, no setup. Drop is a new Linux tool that gives a program — usually a coding agent — its own throwaway environment, complete with a separate home directory, walled off from your real system. Think Python's virtualenv, but for a whole working environment: you create it, work inside it, then delete it and everything the agent touched goes with it. This is the low-friction answer to a risk most agentic teams live with daily: agents running with full access to a dev machine. Drop needs no root privileges and no container images — it reuses your existing Linux install, so everything already installed works inside — and it's a practical guard for supply-chain risk, since agents routinely fetch and run third-party packages. A small TOML file decides what each sandbox can see — which files, directories and local network services — and Drop strips every privilege out of the sandbox before your program starts, so a compromised agent can't escalate even inside its own box. A gVisor mode, an extra software layer standing in for the kernel, can be switched on for hostile workloads. droprun.sh

What people are saying

'I don't want to read what you didn't write': readers are revolting against AI prose. Colin Breck's essay names a quiet problem inside companies: AI-generated design documents, tickets and meeting summaries that are fluent but carry no real context and no human voice — and readers increasingly resent them. The numbers he cites are blunt about the penalty.

If you hand documents to clients, take note: in a survey he references, 78% of readers said they would stop reading an article they believed was AI-written and 71% would avoid that author, while 98% preferred his own prose to an AI rewrite of it. Bryan Cantrill has gone furthest — all public writing at his company, Oxide, must pass Pangram, an AI-detection tool, as human-authored. Breck is not anti-AI: while producing an academic paper he leaned on it heavily, and it caught a subtle notation slip that four expert human reviewers had all missed — yet it wrote none of the text. That's a workable model for delivery work: machines checking, humans authoring. blog.colinbreck.com

“To use an LLM to write is to void the social contract between writer and reader”

'AI has no wisdom': a practitioner's warning that vibe-coded projects rot. Alexandru Nedelcu's bluntly titled essay makes a maintainability argument: projects assembled mostly by prompting decay into an unmaintainable mess, because models were never taught what makes code keepable — maintainability offers no reward you can measure immediately — and they trained largely on the mediocre code that dominates the wild.

The caution for anyone steering a client's adoption: letting agents loose on scaffolding and well-specified tasks is fine; letting them own anything with a long life is not. He also sees teams now outsourcing both the writing and the reading of code, and notes that even the best current models are poor at simplifying, splitting functions in ways nobody would reuse. He's no holdout — he uses LLMs daily for tedious work and coaches colleagues — but he closes with a prediction worth keeping: companies will eventually advertise NO-AI policies as a competitive advantage, the way food brands advertise the absence of preservatives. alexn.org

“they no longer take responsibility for mistakes in coding and no longer learn from those mistakes”

Markdown in /src: check your specs in next to the code, and let agents compile them. Carson Gross, htmx's creator, proposes a convention for agentic codebases: keep the Markdown documents describing the software — README, TODO, overviews, plus notes on features, data, the API and infrastructure — in a /src/md directory beside the code, and generate both code and tests from those documents rather than from one-off prompts in a chat window.

His claim is that Markdown has quietly become the real source of an agentic project, with the generated code turning into a build artifact — a view that pairs neatly with the essays above: humans author the layer that decides what the software is, agents do the rest. It's also a cheap experiment to run on a client project, since the same specs can be regenerated when a better model ships. In the proposed layout, a README indexes everything and serves as the agent's entry point — and Gross is explicit that agents should not generate much of it; the point is human-authored, human-curated specs. htmx.org

“the actual code that is generated by the agent is sort of becoming a low-level implementation detail”

News

  • Finland's Verda raises $189M and becomes Europe's newest AI-cloud unicorn. Verda, a Finnish AI-cloud company, has closed a $189 million Series B led by Emergence Capital, taking its total funding past $450 million and making it Europe's latest unicorn. Relevant when clients ask about European or data-residency-conscious options for AI workloads: Verda says it powers work in more than 50 countries and expects its operations to pass 250 MW during 2027, with capacity live in Finland and more coming across Europe, the UK, the US and Asia. The oversubscribed round included Supermicro and MUFG's venture arm; Verda reports revenue at a $165 million-a-year run rate as of July 2026, and plans early deployments of NVIDIA's VR200 NVL72 systems. verda.com

  • GPT-6 Astra breaks an Enigma message that had stumped cryptanalysts since 2005. OpenAI's GPT-6 Astra has broken a German Army Enigma message sent on 10 July 1941 that had resisted every attempted solution since 2005. The request came from a researcher, Carter Leffer, and a veteran human cryptanalyst has validated the break; the model wrote its own Python and C++ tooling — an Enigma simulator and a Bombe, the machine wartime codebreakers used — and ran the attack from a guessed plaintext fragment. Expect clients to have seen this one, and it's worth getting right: a frontier model doing genuine multi-step research — building its own software, testing hypotheses, catching errors in 80-year-old ciphertext — is a far better conversation piece than any score on a chart. The recovered key matched nothing else used that day — a machine setting of wheel order 253 rather than 512 — and the work exposed transcription errors in the surviving ciphertext plus a wheel turnover at the 72nd letter of the 82-letter message. cryptocellar.org

    “The AI break of the Enigma message MVUEH is simply amazing, and as an old cryptanalyst, I am still in awe.”

  • OpenAI's celebrated Navier–Stokes proof may have solved the wrong version. Scientific American reports a catch in OpenAI's headline claim to have cracked the Navier–Stokes problem, one of the Clay Millennium problems with a $1 million prize attached: the proof, generated by an internal OpenAI model, leans on an 'external force' option in the problem's official 2000 wording — a variant that fits the letter of the prize but not the version mathematicians are actually interested in. Last Thursday three mathematicians posted a proof that OpenAI's method can never be extended to the full problem: remove the contrived force and the phenomenon it demonstrates vanishes. It's a useful caution before repeating any AI capability claim to a client — check which version was actually solved, not the headline. Meanwhile the field moves on: on September 7, two mathematicians working with AI produced a blowup result for frictionless fluids, seen as a major step toward the real problem. Scientific American

    “The Clay problem is settled, but the main problem for the Navier-Stokes equations is not.”

  • Xiaomi posts MiMo-V2.6 — a name, and for now nothing else. Xiaomi has put up a release page for MiMo-V2.6, the next version of its MiMo model family. As of its publication on September 21, the page showed the title and nothing else. Keep it on your map of non-US model options, but hold off on opinions: with no capabilities, pricing or availability published yet, anything you hear about it this week is guesswork. The bare page means the real release notes are still to come. mimo.xiaomi.com

One takeaway

The signal under this week's noise: capability is getting cheap, trust is getting scarce. The week in one line: frontier capability keeps getting cheaper and better at carrying whole jobs to done — Anthropic's new flagship does most of the work of its top-tier model at 40% less cost, with cheaper siblings weeks away — while the interesting arguments moved to what humans should still own.

For your clients, 'can agents do the task?' is close to settled for a growing set of tasks; the live questions are who owns the artifacts, which outputs carry a human's judgment, and what runs where. That's a governance conversation, not a model-selection one — which is exactly where consulting value now sits. The split to propose in your next engagement: agents produce the code and the drafts; humans keep the specs, the design documents and anything a client actually reads. Anthropic

Get the next one in your inbox

Free. One confirmation email, then issues. Unsubscribe in one click.

Share this issue

How this issue was made. Researched and written by an agent, produced on 23 September 2026, 12:01. 75 sources read, 0 unreachable. Every link above goes to the primary source. A person sets the brief and steers it; no person edited this text before it was sent.

Every issue

Also as a feed: RSS · JSON

Something wrong in this issue? Tell us