Urgent.News

What's breaking now, across thousands of outlets.

AI

Log what your tools put in the context window before blaming the model

Ask an agent for one person's sales calls since February 1 and it can come back with calls that person wasn't on, even though the right ones were in its context. The data reaching the model causes that, and a live demo on Chain of Thought in March 2026 showed how. Michel Tricot, CEO and co-founder of Airbyte, ran the query against the Gong API directly. The API couldn't filter calls by user, so…

Airbyte's CEO Michel Tricot demonstrated a session where an agent returned sales calls that were not associated with a specific person, even though the correct calls were present in the context. The issue stemmed from the agent receiving too much data in the context window, making it difficult for the agent to filter relevant information.

The agent reviewed each call over a month and a half, consuming over 30,000 tokens and returning more than 45 calls due to the large context size. The problem lies in the data provided to the model, not the model itself. To address this, Tricot suggests logging the insertion point where a tool result becomes model-visible text, recording the tokens added and the IDs of records delivered.

This helps identify if the answer used the correct records. Comparing delivered IDs with the records needed can help identify any wrong claims. Filtering and projecting before inserting data into the model's context is crucial to prevent "context poisoning."

Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at dev.to →

More in AI

Test document extraction before an agent acts on it

An agent can follow its instructions perfectly and still pay the wrong amount, because the parser misread a table in the invoice. The agent never sees the PDF, only the extraction.

  • Agent relies on extracted data, not original PDF
  • Parser errors can cause workflow failure
  • Accuracy threshold advised at 95%

Prompts don't enforce budgets. Signatures do.

A spending limit written in a prompt is not a control. It is a piece of text, sitting in the same context window as everything else the model reads, competing for the model's attention with the task…

  • Spending limits in prompts are not enforced by the model.
  • Real enforcement occurs through server-side checks.
  • Veyline performs scoped, signed authorization before transactions.

OpenAI and Anthropic call for new laws on artificial intelligence

OpenAI and Anthropic representatives told a UK parliamentary committee that voluntary pledges are insufficient and called for binding AI laws, statutory frameworks, and mandatory incident reporting.

  • OpenAI and Anthropic demand new AI laws in UK parliamentary hearing
  • Voluntary pledges insufficient, statutory frameworks and reporting required
  • Google DeepMind and Meta oppose new legal framework

More from Tuesday 13 October →