Latest site update Oct 14, 2026 Evidence-firstCited sources visibleEditorial guardrails active

Source & Verification Ledger

Every entry shows who published the source, what kind of evidence it is, when KyenAI last checked it, when editorial review is due, and which guide or article relies on it. A review-due label is a maintenance signal—not a claim that the underlying source is false.

Evidence coverage

One ledger for guides and articles

Product documentation is scheduled for review every 14 days; announcements and independent reporting every 30 days; standards, research, and primary records every 90 days.

Sources
84
Publishers
25
Guides covered
20
Articles covered
12
Review due
10
Verification needed
59
Superseded
0

How to read the ledger

High confidence means an official publisher, primary record, or standards body owns the source. Medium confidence marks independent reporting or preprint research that still needs direct attribution. “Last checked” uses a source-level verification date only when one is recorded for that exact source-and-page use. Editing a page does not refresh its evidence, and checking a shared source for one page does not verify another page that cites it. “Next review” is KyenAI’s editorial schedule, not the source’s expiration date. A source remains visible if it is later superseded so readers can audit historical claims.

CursorVerification needed

Organizations for Cursor Enterprise

Source type
Official announcement
Confidence
High
Published
Jun 3, 2026
Last checked
Oct 14, 2026
Next review
Nov 13, 2026
Cadence
30 days
Superseded
No record
Used by
Microsoft Visual Studio CodeVerification needed

Choose and use an agent harness

Source type
Independent reporting
Confidence
Medium
Published
Not recorded
Last checked
Oct 14, 2026
Next review
Nov 13, 2026
Cadence
30 days
Superseded
No record
Used by
  • AI Coding Agent Harness Engineering: A Practical Integration GuideGuide · checked Oct 14, 2026Current official guide distinguishes harness, model, permissions, and execution target, and documents Copilot, Claude, Codex, and Cloud targets in VS Code.Conclusion: Harnesses remain distinct in tools, models, permissions, customizations, and review workflows; worktree isolation is not itself a security boundary.Change note: Added to anchor the IDE-specific integration and portability cautions.
  • AI Coding Agents Comparison: Codex, Claude Code, Cursor, and CopilotGuide · verification neededCurrent official comparison of harness targets, execution locations, permissions, customizations, and review workflows in VS Code.
OpenAIVerification needed

Harness engineering: leveraging Codex in an agent-first world

Source type
Official announcement
Confidence
High
Published
Not recorded
Last checked
Oct 14, 2026
Next review
Nov 13, 2026
Cadence
30 days
Superseded
No record
Used by
  • AI Coding Agent Harness Engineering: A Practical Integration GuideGuide · checked Oct 14, 2026Official engineering case study on repository legibility, tools, feedback loops, mechanical architecture checks, and agent autonomy; company-reported results are not generalized benchmarks.Conclusion: The source explicitly emphasizes repository knowledge, executable checks, and observable UI/log feedback as harness investments.Change note: Added as a primary reference for practical harness design.
  • Loop Engineering for AI Coding Agents: Stop Rules & VerificationGuide · checked Oct 14, 2026Official engineering account of repository context, legibility, architecture checks, UI/log feedback, and agent workflows.Conclusion: The post frames harness work as designing environments, context, and feedback loops around agents; it is an internal case study, not a universal benchmark.Change note: Added as the primary source for the distinction between a repeating loop and the surrounding harness.
  • AI Coding Agents Comparison: Codex, Claude Code, Cursor, and CopilotGuide · verification neededOfficial engineering case study on repository context, tool feedback, verification, and increasing agent autonomy.
GitHubVerification needed

GitHub Copilot custom instructions support matrix

Source type
Official documentation
Confidence
High
Published
Not recorded
Last checked
Sep 8, 2026
Next review
Sep 22, 2026
Cadence
14 days
Superseded
No record
Used by
OpenAIVerification needed

Use AGENTS.md with Codex

Source type
Official documentation
Confidence
High
Published
Not recorded
Last checked
Sep 8, 2026
Next review
Jul 28, 2026
Cadence
14 days
Superseded
No record
Used by
AGENTS.mdVerification needed

AGENTS.md open format and supported-agent ecosystem

Source type
Standards or methodology
Confidence
High
Published
Not recorded
Last checked
Jul 19, 2026
Next review
Oct 17, 2026
Cadence
90 days
Superseded
No record
Used by
AnthropicVerification needed

Claude Code memory documentation

Source type
Official documentation
Confidence
High
Published
Not recorded
Last checked
Jul 14, 2026
Next review
Jul 28, 2026
Cadence
14 days
Superseded
No record
Used by
AiderVerification needed

Aider documentation

Source type
Official documentation
Confidence
High
Published
Not recorded
Last checked
Not yet verified
Next review
After first verification
Cadence
14 days
Superseded
No record
Used by
AnthropicVerification needed

Claude Code autonomous workflow update

Source type
Official announcement
Confidence
High
Published
Not recorded
Last checked
Not yet verified
Next review
After first verification
Cadence
30 days
Superseded
No record
Used by
  • Codex vs Claude CodeGuide · verification neededOfficial note on Claude Code surfaces, checkpoints, subagents, hooks, and background work.
AnthropicVerification needed

Claude Code CLI reference

Source type
Official documentation
Confidence
High
Published
Not recorded
Last checked
Not yet verified
Next review
After first verification
Cadence
14 days
Superseded
No record
Used by
  • Codex vs Claude CodeGuide · verification neededOfficial reference for permission flags, headless runs, session continuation, and MCP configuration.
AnthropicVerification needed

Claude Code overview

Source type
Official documentation
Confidence
High
Published
Not recorded
Last checked
Not yet verified
Next review
After first verification
Cadence
14 days
Superseded
No record
Used by
AnthropicVerification needed

Claude Code overview

Source type
Official documentation
Confidence
High
Published
Not recorded
Last checked
Not yet verified
Next review
After first verification
Cadence
14 days
Superseded
No record
Used by
AnthropicVerification needed

Claude Code subagents

Source type
Official documentation
Confidence
High
Published
Not recorded
Last checked
Not yet verified
Next review
After first verification
Cadence
14 days
Superseded
No record
Used by
ClineVerification needed

Cline overview

Source type
Official documentation
Confidence
High
Published
Not recorded
Last checked
Not yet verified
Next review
After first verification
Cadence
14 days
Superseded
No record
Used by
CursorVerification needed

Cursor Cloud Agents

Source type
Official documentation
Confidence
High
Published
Not recorded
Last checked
Not yet verified
Next review
After first verification
Cadence
14 days
Superseded
No record
Used by
CursorVerification needed

Cursor for iOS

Source type
Official documentation
Confidence
High
Published
Not recorded
Last checked
Not yet verified
Next review
After first verification
Cadence
14 days
Superseded
No record
Used by
GitHubVerification needed

About GitHub Copilot CLI

Source type
Official documentation
Confidence
High
Published
Not recorded
Last checked
Not yet verified
Next review
After first verification
Cadence
14 days
Superseded
No record
Used by
GitHubVerification needed

Cloud and local sandboxes for GitHub Copilot now in public preview

Source type
Official announcement
Confidence
High
Published
Jun 2, 2026
Last checked
Not yet verified
Next review
After first verification
Cadence
30 days
Superseded
No record
Used by
GitHubVerification needed

GitHub Copilot coding agent

Source type
Official announcement
Confidence
High
Published
Not recorded
Last checked
Not yet verified
Next review
After first verification
Cadence
30 days
Superseded
No record
Used by
GoogleVerification needed

Gemini CLI

Source type
Official documentation
Confidence
High
Published
Not recorded
Last checked
Not yet verified
Next review
After first verification
Cadence
14 days
Superseded
No record
Used by
OpenAIVerification needed

Introducing the Codex app

Source type
Official announcement
Confidence
High
Published
Not recorded
Last checked
Not yet verified
Next review
After first verification
Cadence
30 days
Superseded
No record
Used by
OpenCodeVerification needed

OpenCode intro

Source type
Official documentation
Confidence
High
Published
Not recorded
Last checked
Not yet verified
Next review
After first verification
Cadence
14 days
Superseded
No record
Used by
Tom's GuideVerification needed

Tom's Guide Codex vs Claude Code practical comparison

Source type
Independent reporting
Confidence
Medium
Published
Not recorded
Last checked
Not yet verified
Next review
After first verification
Cadence
30 days
Superseded
No record
Used by
  • Codex vs Claude CodeGuide · verification neededPublic practical app-building comparison used as an external example, not KyenAI benchmark data.
GitHubReview due

Adding custom instructions for GitHub Copilot

Source type
Official announcement
Confidence
High
Published
Not recorded
Last checked
Sep 8, 2026
Next review
Aug 13, 2026
Cadence
30 days
Superseded
No record
Used by
GitHubReview due

GitHub Copilot custom instructions

Source type
Official announcement
Confidence
High
Published
Not recorded
Last checked
Sep 8, 2026
Next review
Oct 8, 2026
Cadence
30 days
Superseded
No record
Used by
  • AGENTS.md Template for Codex, Node.js, Python & MonoreposGuide · checked Sep 8, 2026Official repository instruction reference for Copilot workflows.Conclusion: .github/copilot-instructions.md remains GitHub's repository-wide instructions path for Copilot.Change note: Rechecked the Copilot baseline before keeping the cross-tool recommendation.
arXivReview due

Configuration Smells in AGENTS.md Files

Source type
Research paper or preprint
Confidence
Medium
Published
Not recorded
Last checked
Jul 19, 2026
Next review
Oct 17, 2026
Cadence
90 days
Superseded
No record
Used by
arXivReview due

Evaluating AGENTS.md: Are Repository-Level Context Files Helpful for Coding Agents?

Source type
Research paper or preprint
Confidence
Medium
Published
Not recorded
Last checked
Jul 19, 2026
Next review
Oct 17, 2026
Cadence
90 days
Superseded
No record
Used by
arXivReview due

Proof-or-Stop: Don't Trust the Agent, Trust the Evidence

Source type
Research paper or preprint
Confidence
Medium
Published
Not recorded
Last checked
Jul 19, 2026
Next review
Oct 17, 2026
Cadence
90 days
Superseded
No record
Used by
arXivReview due

Stop Hand-Holding Your Coding Agent: Engineering the Loops that Replace Step-by-Step Prompting

Source type
Research paper or preprint
Confidence
Medium
Published
Not recorded
Last checked
Jul 19, 2026
Next review
Oct 17, 2026
Cadence
90 days
Superseded
No record
Used by
GitHubReview due

MCP server debugging guide

Source type
Official documentation
Confidence
High
Published
Not recorded
Last checked
Jul 19, 2026
Next review
Aug 2, 2026
Cadence
14 days
Superseded
No record
Used by
AnthropicCurrent

Harness design for long-running application development

Source type
Official announcement
Confidence
High
Published
Not recorded
Last checked
Oct 14, 2026
Next review
Nov 13, 2026
Cadence
30 days
Superseded
No record
Used by
  • AI Coding Agent Harness Engineering: A Practical Integration GuideGuide · checked Oct 14, 2026Official case study on decomposing coding tasks, structured handoffs, and planner/generator/evaluator roles for long-running application work.Conclusion: Anthropic presents a multi-agent approach as one case study and recommends testing harness assumptions and adding only load-bearing complexity.Change note: Added as an independent vendor perspective; not treated as a universal architecture mandate.
AnthropicCurrent

Scaling Managed Agents: Decoupling the brain from the hands

Source type
Official announcement
Confidence
High
Published
Not recorded
Last checked
Oct 14, 2026
Next review
Nov 13, 2026
Cadence
30 days
Superseded
No record
Used by
  • AI Coding Agent Harness Engineering: A Practical Integration GuideGuide · checked Oct 14, 2026Official description separates session history, the harness loop/tool router, and the sandbox execution environment.Conclusion: Supports separating the model/harness/sandbox interfaces and revisiting assumptions as models improve.Change note: Added as a source for the architecture-layer definitions.
CursorCurrent

Data Use & Privacy Overview

Source type
Official documentation
Confidence
High
Published
Jun 9, 2026
Last checked
Oct 14, 2026
Next review
Oct 28, 2026
Cadence
14 days
Superseded
No record
Used by
  • Cursor Enterprise Data Retention & Security: What Admins Must VerifyArticle · checked Oct 14, 2026 · 6 cited passagesCited by Security & Governance coverage.Conclusion: With Privacy Mode enabled, Cursor states customer data is not used for training and providers use ZDR agreements, subject to abuse-detection and non-ZDR model exceptions.Change note: Rechecked the September 3, 2026 data-use page and retained abuse-detection and non-ZDR model exceptions.
CursorCurrent

Security

Source type
Official documentation
Confidence
High
Published
Apr 24, 2026
Last checked
Oct 14, 2026
Next review
Oct 28, 2026
Cadence
14 days
Superseded
No record
Used by
  • Cursor Enterprise Data Retention & Security: What Admins Must VerifyArticle · checked Oct 14, 2026 · 6 cited passagesCited by Security & Governance coverage.Conclusion: Cursor lists current security attestations, enterprise administration controls, Privacy Mode behavior, and trust-portal evidence as of its August 25 update.Change note: Rechecked Privacy Mode and linked enterprise administration areas; the source still displays its August 25, 2026 update date.
CursorCurrent

What's New in Cursor — Latest Updates & Release Notes

Source type
Official announcement
Confidence
High
Published
Oct 6, 2026
Last checked
Oct 14, 2026
Next review
Nov 13, 2026
Cadence
30 days
Superseded
No record
Used by
  • Cursor Enterprise Data Retention & Security: What Admins Must VerifyArticle · checked Oct 14, 2026 · 2 cited passagesCited by Security & Governance coverage.Conclusion: The changelog documents Oct 6 remote control for local agents and Sep 23 Rollouts and Security Review; Enterprise remote control is off by default and admins may enable it.Change note: Added a dated table that separates these current workflow features from retention claims and existing security controls.
  • AI Coding Agent Harness Engineering: A Practical Integration GuideGuide · checked Oct 14, 2026Official changelog dated October 6 and September 23, 2026 for Enterprise remote control, deployment health monitoring, and PR security review.Conclusion: Enterprise remote control is opt-in by admin; Rollouts and Security Review are described as Teams/Enterprise features. Product behavior may vary by plan and rollout.Change note: Added current UI-to-review and delivery signals as vendor-specific examples, not generic harness guarantees.
HarnessCurrent

Harness Software Delivery Platform

Source type
Independent reporting
Confidence
Medium
Published
Not recorded
Last checked
Oct 14, 2026
Next review
Nov 13, 2026
Cadence
30 days
Superseded
No record
Used by
  • AI Coding Agent Harness Engineering: A Practical Integration GuideGuide · checked Oct 14, 2026Vendor product page describing Harness's software-delivery platform; product claims and plan coverage require procurement verification.Conclusion: Confirms the separate Harness product/company context; it is not evidence that generic harness engineering requires this vendor.Change note: Added only to disambiguate the company name from the engineering concept.
TypeSafe AICurrent

Introducing System One Models & Jev

Source type
Independent reporting
Confidence
Medium
Published
Not recorded
Last checked
Oct 14, 2026
Next review
Nov 13, 2026
Cadence
30 days
Superseded
No record
Used by
  • AI Coding Agent Harness Engineering: A Practical Integration GuideGuide · checked Oct 14, 2026Vendor announcement describing Jev as a typed decision model; performance, reliability, and pricing claims are vendor claims and must be validated on the team's own workload.Conclusion: The vendor describes structured decision outputs rather than code or prose generation; the guide treats outputs as probabilistic signals, not authorization.Change note: Added to distinguish optional decision-model use from coding-agent generation and deterministic controls.
SECCurrent

Space Exploration Technologies Corp. Form 8-K

Source type
Primary filing or record
Confidence
High
Published
Jun 16, 2026
Last checked
Sep 12, 2026
Next review
Dec 11, 2026
Cadence
90 days
Superseded
No record
Used by
  • Did SpaceX Buy Cursor? $60B Deal Status and TimelineArticle · checked Sep 12, 2026 · 13 cited passagesCited by AI Coding Agents coverage.Conclusion: The June filing documents the signed transaction and its original closing conditions; it is superseded for current closing status by the August 14 completion filing.Change note: Kept as historical agreement evidence; added the August 14 completion filing as the current legal status source.
SECCurrent

Space Exploration Technologies Corp. Form 8-K: Completion of Acquisition

Source type
Primary filing or record
Confidence
High
Published
Aug 14, 2026
Last checked
Sep 12, 2026
Next review
Dec 11, 2026
Cadence
90 days
Superseded
No record
Used by
  • Did SpaceX Buy Cursor? $60B Deal Status and TimelineArticle · checked Sep 12, 2026 · 10 cited passagesCited by AI Coding Agents coverage.Conclusion: The filing states that the merger became effective on August 14, 2026 and Cursor became a wholly owned subsidiary of SpaceX.Change note: Replaced the pending-closing status with the confirmed completion status.
MCPCurrent

MCP authorization security considerations

Source type
Standards or methodology
Confidence
High
Published
Not recorded
Last checked
Sep 8, 2026
Next review
Dec 7, 2026
Cadence
90 days
Superseded
No record
Used by
  • MCP Server Security Checklist: 25 Controls for AI Agents — OAuth, Least PrivilegeGuide · checked Sep 8, 2026Official security considerations for token passthrough, SSRF, session threats, and local server compromise.Conclusion: The draft security considerations explicitly cover token passthrough, audience validation, SSRF, token theft, and secure transport.Change note: Kept the source labeled as draft and avoided presenting KyenAI launch controls as protocol mandates.
MCPCurrent

MCP authorization specification

Source type
Standards or methodology
Confidence
High
Published
Not recorded
Last checked
Sep 8, 2026
Next review
Dec 7, 2026
Cadence
90 days
Superseded
No record
Used by
  • MCP Server Security Checklist: 25 Controls for AI Agents — OAuth, Least PrivilegeGuide · checked Sep 8, 2026Official requirements for HTTP authorization, protected resource metadata, tokens, scopes, and audience validation.Conclusion: HTTP authorization requires protected-resource discovery and audience-bound token validation.Change note: Rechecked authorization language and retained transport-specific caveats.
MCPCurrent

MCP debugging guide

Source type
Standards or methodology
Confidence
High
Published
Not recorded
Last checked
Sep 8, 2026
Next review
Dec 7, 2026
Cadence
90 days
Superseded
No record
Used by
  • MCP Server Connected but No Tools? 8 tools/list ChecksGuide · checked Sep 8, 2026Official guidance for stdio logging, paths, environment variables, initialization, transport debugging, and client logs.Conclusion: The guide continues to separate configuration, transport, initialization, and protocol failures.Change note: Rechecked and aligned the eight-layer fault tree.
MCPCurrent

MCP Inspector

Source type
Standards or methodology
Confidence
High
Published
Not recorded
Last checked
Sep 8, 2026
Next review
Dec 7, 2026
Cadence
90 days
Superseded
No record
Used by
  • MCP Server Connected but No Tools? 8 tools/list ChecksGuide · checked Sep 8, 2026Official client-independent tool for inspecting server connections, capabilities, tools, schemas, calls, and notifications.Conclusion: Inspector remains the independent way to determine whether the server exposes expected tools before debugging a specific client.Change note: Rechecked for the minimal-reproduction workflow.
  • MCP Server Security Checklist: 25 Controls for AI Agents — OAuth, Least PrivilegeGuide · checked Sep 8, 2026Official interactive workflow for validating resources, prompts, tools, notifications, and protocol exchanges.Conclusion: MCP Inspector remains the client-independent validation path for discovery and invocation behavior.Change note: Rechecked the validation workflow for the September refresh.
MCPCurrent

MCP security best practices

Source type
Standards or methodology
Confidence
High
Published
Not recorded
Last checked
Sep 8, 2026
Next review
Dec 7, 2026
Cadence
90 days
Superseded
No record
Used by
  • MCP Server Security Checklist: 25 Controls for AI Agents — OAuth, Least PrivilegeGuide · checked Sep 8, 2026Official guidance for least privilege, token security, SSRF, sessions, and local server compromise.Conclusion: The guidance continues to require explicit trust boundaries and covers token, SSRF, session, and local-server risks.Change note: Rechecked for the September security refresh; KyenAI operational controls remain clearly labeled.
MCPCurrent

MCP tools specification

Source type
Standards or methodology
Confidence
High
Published
Not recorded
Last checked
Sep 8, 2026
Next review
Dec 7, 2026
Cadence
90 days
Superseded
No record
Used by
  • MCP Server Connected but No Tools? 8 tools/list ChecksGuide · checked Sep 8, 2026Defines tool discovery, tools/list, tool schemas, and list-change capability behavior.Conclusion: A tools-capable server declares the capability and responds to tools/list; listChanged governs dynamic refresh notification.Change note: Rechecked the current draft tools specification and preserved draft status.