2026-07-23 每日新聞檔案

今天先用 5 條消息練習五件事：把 OpenClaw 的主機控制權與 loopback auth 分開看，把 Hermes 的 latency 優化與 resume correctness 分開驗，再用 TechCrunch 的 Hugging Face hack 報導對照 token、供應鏈與監控半徑要怎麼一起成立。

封存時間：2026-07-23 07:00 CST

中文 5 條

先讀 host ownership、auth-before-pairing、latency／delivery，再對照 resume correctness 與 supply-chain blast radius，練習把同一天的不同敘事改寫成工程驗證表。

回到今日新聞頁
  1. OpenClaw v2026.7.2-beta.3 把 remote coding sessions、guided setup 與 gateway/session recovery 綁在同一版，今天最適合拿來教「session 開在哪台主機、哪些設定會持久化、掛掉後從哪裡恢復」其實要一起驗證。
    來源：查看來源（OpenClaw 官方 Release）
  2. OpenClaw 明確寫出 loopback 直連也不能繞過 gateway auth，而且 auth 發生在 device pairing 之前；這很適合把「看起來是本機」與「真的免驗證」分開教。
    來源：查看來源（OpenClaw 官方 Commit）
  3. Hermes Agent v2026.7.20（Quicksilver）把首 token 延遲大幅壓低、推理串流改成預設可見，並補上 durable delivery ledger，最適合拿來教「速度優化」與「交付不能遺失」其實是兩種不同的系統責任。
    來源：查看來源（Hermes Agent 官方 Release）
  4. Hermes 修正 resume 時重複的 inflight user rows，並補上 large-session-resume 相關 E2E 覆蓋；這很適合教學生把「畫面重複」「狀態回放」與「回歸證據」分成三個層次。
    來源：查看來源（Hermes Agent 官方 Commit）
  5. TechCrunch 追蹤 OpenAI 的人為失誤如何引出 Hugging Face 上的 AI-powered hack，這是今天最好的外部對照：agent 基礎設施不能只看模型能力，還要一起看權杖管理、套件供應鏈與錯誤放大半徑。
    來源：查看來源（TechCrunch）

English 5 Items

Use the English list to compare host ownership, auth-before-pairing, latency versus delivery guarantees, resume correctness, and supply-chain blast radius.

查看本月檔案
  1. OpenClaw v2026.7.2-beta.3 bundles remote coding sessions, guided setup, and gateway/session recovery into one release-level lesson on host ownership, persisted setup, and resume paths.
    Source: Source (OpenClaw Official Release)
  2. OpenClaw now spells out that a direct loopback connection does not bypass gateway auth and that authentication happens before device pairing, which cleanly separates “local-looking” from “actually unauthenticated.”
    Source: Source (OpenClaw Official Commit)
  3. Hermes Agent v2026.7.20 (Quicksilver) sharply reduces time-to-first-token, streams reasoning by default, and adds a durable delivery ledger, making latency work and delivery guarantees two separate engineering responsibilities.
    Source: Source (Hermes Agent Official Release)
  4. Hermes fixes duplicate inflight user rows on resume and adds large-session-resume E2E coverage, which makes a compact lesson in separating visible UI duplication, replayed session state, and regression evidence.
    Source: Source (Hermes Agent Official Commit)
  5. TechCrunch tracks how a human mistake at OpenAI led to an AI-powered hack on Hugging Face, making today’s outside comparison point about token handling, package supply chains, and blast-radius control rather than model cleverness alone.
    Source: Source (TechCrunch)