Edition 2026-09-18 latest · digest built 2026-09-18T12:16:49+00:00 · ⚙ fallback: ollama:deepseek-v4-flash:cloud
Local LLM engines, Jev open-source ecosystem, and agent debugging techniques dominate today's digest
Today's digest is heavy on practical open-source tooling: a new MoE inference engine that runs big models on one GPU, an open-source server for Jev-style decision models, and llama.cpp optimization patches. We also cover agent security (ZCode leak), eval reproducibility, and prompting techniques that save hours.
Local Inference & Models
The biggest theme today is squeezing more out of local hardware. Flyweight is a new C++/CUDA engine that runs MoE models larger than VRAM by offloading experts to system RAM, with automatic startup planning—perfect for single-GPU setups. Meanwhile, a community repo shares multi-hour llama.cpp optimization experiments on Qwen MoE models, with patches and benchmarks that show real gains in prompt processing. On the audio side, wavhost gives you an Ollama-like TTS server with an OpenAI-compatible API, and ViiTorVoice-NAR brings local speech editing so you can fix a single word without regenerating the whole take.
Agent Tooling & Techniques
The Jev decision-model ecosystem went open-source today: OpenJev replicates the API with a single denoising step, and MCP/ACP bridges plus a Claude Code plugin make it easy to integrate. For eval trust, EvalSeal adds reproducibility receipts with flip-rate measurement. On the prompting front, two techniques stood out: forcing an outline before any prose, and adding a 'restate before implement' mode to catch wrong ideas early. And for long agent sessions, smart compaction that preserves tool-call side effects is critical to avoid retry loops.
Security & Research
Security is top of mind: ZCode, a coding agent, was caught uploading .git history to the cloud—a stark reminder to audit agent network behavior. The open-source agentic AI vulnerabilities lab gives you hands-on exercises to test prompt injection and tool abuse. Finally, the OrcaReplay paper offers a reproducible method for uncensoring open-weight models, useful for teams that need politically sensitive local LLMs.
Today's findings
-
#1 Flyweight: run MoE models bigger than VRAM on one GPU + system RAMtool
Open-source C++/CUDA engine that offloads MoE experts to CPU while keeping a hot set on the GPU, so models like Qwen3.8-Flash-Next run on a single consumer card.
Flyweight · MoE offloadHot experts stay in VRAM, idle experts live in system RAM — so the model can exceed the cardHOTGPU VRAM Attention layers + the hot set of experts kept resident on one consumer cardWARMSystem RAM Idle MoE experts offloaded to CPU, pulled in only when the router picks themC++/CUDA engine auto-plans the split at startup from your GGUF — no manual layer counts.Why it matters: Lets small teams run large open-weight MoE models locally without buying multiple GPUs, with automatic offload planning instead of manual layer counts.
How to apply: Install the PyPI release, point it at a GGUF MoE model, and use its OpenAI/Anthropic-compatible API; it auto-figures what fits in VRAM at startup.
local-llmmoeggufinference
Read more: Flyweight: open-source C++/CUDA engine for running MoE models bigger than your VRAM on one GPU + system RAM. First PyPI release, looking for contributors. · Flyweight: open-source C++/CUDA engine for running MoE models bigger than your VRAM on one GPU + system RAM. First PyPI release, looking for contributors.
-
#2 OpenJev: open-source server for Jev-style decision modelstool
A free server that replicates Jev's API for typed decision questions (yes/no, pick-one, 0–N) using a single denoising step on DiffusionGemma, with MCP/ACP bridges and a Claude Code plugin.
Open-source dropA drop-in Jev clone: typed decision endpoints on one denoising stepOpenJevSelf-hosted serverTypeSafe SDK base URLMCP bridgeACP bridgeClaude Code pluginrunyes/no · pick-one · 0–NProbabilistic decisions instead of token generation; the Claude Code plugin cuts context tokens ~30%.Why it matters: Jev promises cheap, fast probabilistic decisions instead of token generation; OpenJev makes it usable without waiting on TypeSafe's waitlist.
How to apply: Host OpenJev, point TypeSafe SDKs at it via base URL change, or use the MCP/ACP bridge to let agents call decision endpoints; the Claude Code plugin cuts context tokens ~30%.
decision-modelopen-sourcemcpagents
Read more: Still on the Jev waitlist? I hosted OpenJev. It's free, go play with it · OpenJev · MCP/ACP Bridge for your agents to use Jev! · A Jev Claude code plugin that saves 30% token usage
-
#3 Multi-hour llama.cpp optimization experiments on Qwen MoE modelsrepo
A repo with patches, benchmarks, and reproduction guides for speeding up local MoE inference (prompt processing, source editing) on Qwen3.6-35B-A3B and Qwen3.8 Flash-Next.
Why it matters: Shows concrete, reproducible gains and regressions from llama.cpp tweaks, so you can apply the same optimizations to your own local setup.
How to apply: Clone the repo, apply the patches to your llama.cpp build, and benchmark against the provided summaries to see if the gains hold on your hardware.
llama.cppmoeoptimizationlocal-llm
Read more: Multi-hour llama.cpp optimization experiments on Qwen MoE models, patches, benchmarks, and reproduction guides · Multi-hour llama.cpp optimization experiments on Qwen MoE models, patches, benchmarks, and reproduction guides
-
#4 wavhost: one API for local TTS modelstool
A pip-installable local TTS server that works like Ollama (pull, run) and exposes an OpenAI-compatible /v1/audio/speech endpoint, supporting Chatterbox, Qwen3-TTS, and Kokoro.
Why it matters: Gives you a drop-in replacement for cloud TTS with local models, including named voices from reference clips, without changing your client code.
How to apply: pip install wavhost, then wavhost pull chatterbox-turbo and wavhost run ... -o hello.wav; point existing OpenAI TTS clients at localhost:11435.
ttslocalopenai-compatibleollama
Read more: One API for All local TTS Model
-
#5 ViiTorVoice-NAR: open-source TTS with local speech editingtool
An open-source TTS model that lets you regenerate only the changed part of a recording, keeping the original audio and prosody intact.
Speech editingFixing one word no longer means re-recording the lineWhole-sentence regeneration- Re-synthesize full utterance
- Fresh take, fresh prosody
- Tone drifts from the original
- Hand-match the splice
Local speech editing- Regenerate the changed span
- Original audio kept
- Surrounding prosody intact
- Drop-in word swap
ViiTorVoice-NAR: open-source TTS with a local speech editing API.Why it matters: Solves the 'actually it's Tuesday' problem in audio production—no more regenerating whole sentences and trying to match tone.
How to apply: Use the model's local speech editing API to replace specific words/phrases in existing audio; ideal for podcasts, tutorials, and voiceover fixes.
ttsspeech-editingopen-source
Read more: I work on an open-source TTS model with local speech editing — curious how people here would use it
-
#6 Hands-on lab for agentic AI vulnerabilitiestool
An open-source lab that teaches prompt injection, tool abuse, and data exfiltration through real exercises instead of just principles.
Agentic AI security labThree attack classes you run yourself, not just read aboutPrompt injection Hostile text steers the agentTool abuse Actions fired beyond intentData exfiltration Secrets leak out the far sideInput channel Action layer Output channelOpen-source exercises to probe your own agent stack before attackers do.Why it matters: As agents get more autonomy, teams need practical ways to test and harden their systems; this gives a concrete playground.
How to apply: Run the lab locally, walk through the attack scenarios against your own agent stack, and use the findings to add guardrails and monitoring.
securityagentsprompt-injectionopen-source
Read more: [Open Source] Finally, a hands-on lab for Agentic AI vulnerabilities instead of just "principles"
-
#7 EvalSeal: reproducibility receipts for LLM evalstool
An open-source tool that runs eval cases multiple times, measures flip rates, captures provenance, and seals results into a tamper-evident ledger.
EvalSeal · eval reproducibilityRe-run the same eval and a quarter of borderline cases change their verdict5/20borderline cases flipped across repeated runsa single score hides all of itRepeatEach case run many timesFlip rateJudge instability made visibleSealedProvenance in a tamper-evident ledgerCatch unstable judges before they gate a model release.Why it matters: A single eval score is misleading; EvalSeal reveals judge instability (e.g., 5/20 borderline cases flipped) so you trust your regression gates.
How to apply: Integrate EvalSeal into your eval pipeline to get flip rates and provenance; use the ledger to compare model versions with confidence.
evalsllmreproducibilitytesting
Read more: I built EvalSeal: reproducibility receipts for LLM evals
-
#8 Compaction isn't summarization—delete tool calls carefullytechnique
Coding agents die from 150k-token histories full of Read/Bash/Edit/fail/retry; smart compaction should summarize decisions but keep tool-call side effects to avoid retry loops.
Agent context compactionCompaction is not summarization: compress the thinking, never the side effectsSafe to compress- Reasoning and deliberation
- Failed attempts and retries
- Verbose Read/Bash output
- Superseded plans
Must survive intact- Completed tool results
- Idempotency keys
- Structured record of what ran
- Side effects already applied
Drop the record of a side-effecting call and the agent re-executes it — bugs plus wasted tokens150k-token coding-agent histories need pruning, but only on the left side of this line.Why it matters: Poor compaction bloats context and can cause agents to re-execute side-effecting actions, wasting tokens and causing bugs.
How to apply: When compacting, preserve idempotency keys and completed tool results; summarize the reasoning but keep a structured record of what was already done.
agentscontext-managementcompactionllm
Read more: Compaction isn’t summarization anymore — but deleting tool calls might just create retry loops
-
#9 Force an outline before any prose to avoid rewritestechnique
Ask the model for an outline only (top-level points and sub-points, no full sentences) before writing; review and adjust the skeleton, then generate content.
Prompting techniqueOutline-first: iterate on the skeleton before a single sentence exists1Ask outlinePoints only, no prose2Review structureIs the order right?3Adjust pointsCut, merge, reorder4Write itProse from the skeletonCheap to fix hereMost first drafts fail on organization, not sentences — fix the shape while it is still bullets.Why it matters: Most first drafts fail on structure, not sentences; outlining first catches wrong organization early and saves massive rewrites.
How to apply: Use a prompt like 'Before writing, give me the outline only...' for documents, decks, and even code; iterate on the outline before saying 'write it'.
promptingclaudeworkflow
Read more: A prompt that forces it to outline before it writes anything has saved me a lot of rewrites · How I stopped using Claude to write slides and started using it to build the outline first · Stop asking Claude for the finished deck. Ask for the outline first.
-
#10 Stop agents from writing code for the wrong ideatechnique
Add a mode that restates your idea back to you before implementing; interview questions only where different answers change the product.
Why it matters: Agents often produce good code for a misunderstood requirement; a restatement step catches ambiguity early, saving hours.
How to apply: Create a 'no-implement' prompt that first paraphrases the idea and asks clarifying questions; only after you approve does the agent start coding.
agentscodingpromptingclaude
Read more: The failure mode nobody talks about: the agent writes good code for the wrong idea · Two skills I use to stop Claude from writing code before the idea is figured out
-
#11 ZCode coding agent silently uploads your .git historytip
ZCode, a GLM-based coding agent, was caught uploading workspace/.git records to the cloud; treat it as a data-exfiltration risk.
Coding-agent data exfiltrationhighZCode uploads workspace .git records to the cloud.gitRepo history read from the workspaceCloudSent to a third-party endpointSilentNo prompt, no disclosureSecretsHistory carries creds + private codeaffected scopeZCode, a GLM-based coding agent, on any real repositoryhigh severity — badge colour grades the riskAudit agent network calls; block ZCode, or sandbox with egress controls.Why it matters: Your git history contains secrets, credentials, and proprietary code; any agent that sends it to a third party is a serious security hole.
How to apply: Audit your coding agents' network calls, block ZCode if you use it, and consider local-only agents or sandboxing with egress controls.
securityagentsdata-exfiltrationgit
Read more: ZCode, the GLM coding agent, silently uploads your Git history · ZCode was allegedly caught uploading workspace/.git records to the cloud. · ZCode was allegedly caught uploading workspace/.git records to the cloud.
-
#12 OrcaReplay: a paper and archive for uncensoring modelspaper
A paper (arXiv:2609.09793) and archived sessions from OrcaReplay show how to uncensor open-weight models while preserving precision.
Why it matters: For teams needing politically sensitive or uncensored local models, this provides a reproducible method and examples.
How to apply: Read the paper for the uncensoring technique, then use the OrcaReplay archive to tinker with model weights and fine-tune your own.
fine-tuninguncensoringopen-weightspaper
Read more: OrcaReplay Archive is worth a look