KDCube
← AI Industry News

Agent Runtimes Go Open and Swappable — and MCP Writes Get a Referee

DeepSeek open-sourced Harness, an MIT-licensed agent runtime where the model, tools, sandbox, and agent loop are all swappable plugins, while Cloudflare's WriteGuard beta puts a policy-and-audit referee in front of MCP write tools. With the MCP 2026-07-28 spec now stateless and Cloudflare's Kitesurf browser built just ...

Lead signal

Highlights

  • DeepSeek open-sourced Harness under MIT — an agent runtime where the model adapter, tool registry, sandboxes, sessions, and even the agent loop are all swappable plugins; its provider catalog already spans Anthropic, OpenAI, Bedrock, Azure, and Google's Gemini Enterprise Agent Platform, not just DeepSeek. (The New Stack)
  • Cloudflare's WriteGuard (private beta) drops a policy/attribution/audit referee in front of MCP write tools, sorting each call into risk tiers and blocking critical actions before the server's handler ever runs. (Cloudflare)
  • Kitesurf, Cloudflare's agent-first browser, runs in V8 isolates on Workers, uses 3–7× less CPU and memory than Chromium, and speaks CDP to Puppeteer, Playwright, or any MCP client. (Cloudflare)
  • The MCP 2026-07-28 spec is final: protocol-level sessions and the initialize handshake are gone, so servers can sit behind ordinary HTTP load balancers. (MCP)

Key Signals

  1. DeepSeek Harness makes the runtime a plugin tree The New Stack, Aug 13, 2026

    Harness ships as an MIT-licensed developer preview that decouples the agent loop from any one model or vendor — model, tools, sandbox, filesystem, and orchestration are all replaceable. For teams standardizing many agentic apps, that's a portability lever against runtime lock-in, though the README warns of breaking changes ahead. (The New Stack)

  2. Write governance becomes the next agent frontier Cloudflare, Aug 18, 2026

    WriteGuard classifies every MCP invocation as read, contained write, or critical, applies tool-specific policy without touching the underlying server, and logs agent activity next to user identity. It extends the identity-and-payments thread from recent issues into the harder question of what an agent is allowed to change. (Cloudflare)

  3. Agents get a browser built only for them Cloudflare, Aug 6, 2026

    Kitesurf strips tabs, extensions, and pixel-perfect rendering, keeping just what an agent needs for screenshots and HTML extraction — free in Browser Run beta today, with an open-source release promised. Cheaper, stateless browsing lowers the cost floor for web-acting agents. (Cloudflare)

Why It Matters / What To Watch

  1. Runtime portability is turning into a procurement checklist item.
    • Evaluate swappable-provider runtimes like Harness before committing a fleet to one vendor's agent loop; the plugin surface is where you'll live. (The New Stack)
    • The final MCP spec pushes session state out of the transport and into explicit tool-minted handles — audit any server that leaned on Mcp-Session-Id or the initialize handshake before upgrading. (MCP)
  2. After identity and payments, write scopes are the new deployment gate.
    • Pilot WriteGuard-style risk tiering before handing agents write credentials to databases, GitHub, or SaaS — attribution and pre-execution blocking are the controls auditors will ask for. (Cloudflare)
    • For grounding, note AWS's newly published pattern: a Strands agent on Bedrock AgentCore queries a Stardog semantic layer over Aurora and Redshift with no ETL, exposed either as a direct SPARQL tool or an MCP gateway target. (AWS)

Quick Links