AgentLoadout

Agent config trends: what developers are changing now

What is changing in agent configuration, from 15 August 2026 to 16 October 2026. Each note has a date, the practice to adopt, its sources and the loadouts that put it into practice.

Updated . Method: Read by hand from about 1,000 public posts on X by developers sharing real configs, repos and failure reports (engagement bait excluded), then checked against official changelogs and docs. Only behaviour confirmed in vendor documentation is stated as fact. Machine-readable: /api/trends.json.

  1. Review is the bottleneck, so review gets configured

    As of

    Claude Code Review reads REVIEW.md from the default branch, never from the pull request; Cursor Bugbot reads .cursor/BUGBOT.md and ignores .cursor/rules. Developers also have one agent ask another model (codex exec, claude -p) for a read-only review before saying done, and attach screenshots to PRs with gh --attach (gh 2.99).

    Practice: Put review-only rules in review files, cap nits, get a read-only second opinion on risky diffs, and keep PRs small.

    Sources:
    Loadouts: AI code review rules, Second-opinion review from another model, PR hygiene for agents

  2. Parallel agents in worktrees are the default

    As of

    Running several agents at once, each in its own git worktree, is built into the tools: claude --worktree and worktree-isolated subagents, managed worktrees in Codex 0.162, and gh issue develop --worktree.

    Practice: One task per worktree and branch, separate ports and dependencies, and clean up only after merge.

    Sources:
    Loadouts: Parallel agents in git worktrees

  3. Antigravity CLI ships weekly: a plugin marketplace, then Auto mode

    As of

    Antigravity CLI 1.3.2 (8 October) added /plugin and the official marketplace for plugins that bundle skills, MCP servers, subagents, rules and hooks; 1.3.5 (14 October) added Auto mode (--mode auto), which approves edits and safe commands and has a separate agent review commands that would leave the terminal sandbox. 1.4.0 (16 October) fixed ${VAR} expansion in plugin MCP headers.

    Practice: Pin what a plugin installs and read its skills and MCP config before enabling it; use Auto mode with the terminal sandbox on, not instead of it.

    Sources:
    Loadouts: One AGENTS.md for every agent, Headless agents in CI

  4. Evals start from real traces, not metric lists

    As of

    Practitioners building agents keep repeating one order of work: read 30 to 50 real traces, note what failed, group the notes into failure modes, and only then write evals, replaying real failures after every prompt, tool or model change. Generic scores (helpfulness, coherence) are out; binary checks tied to observed failures are in.

    Practice: Do error analysis on real traces first; turn each recurring failure into a regression case that links to its trace and is shown to fail on the old output.

    Sources:
    Loadouts: Evals from real failures

  5. AGENTS.md is the shared contract; per-agent files stay thin

    As of

    Claude Code reads AGENTS.md natively from v2.1.277, but only when no CLAUDE.md is on the path, so a stray CLAUDE.md now shadows it. Codex, Copilot and Cursor read AGENTS.md; Antigravity CLI reads GEMINI.md and AGENTS.md.

    Practice: Keep rules in AGENTS.md. Any CLAUDE.md or GEMINI.md should only import it (@AGENTS.md) plus genuine agent quirks.

    Sources:
    Loadouts: One AGENTS.md for every agent, Cursor rules that load

  6. Short always-on rules plus on-demand skills

    As of

    Long instruction files are being split into Agent Skills that load only when needed. Cursor loads skills from .agents/skills and other agents' folders and offers /migrate-to-skills; pnpm 12.11 links skills shipped inside packages; vendors ship skills as plugins (Unity).

    Practice: Keep AGENTS.md short; move procedures longer than about 15 lines into .agents/skills/<name>/SKILL.md.

    Sources:
    Loadouts: Cursor rules that load, Unity 6 with the official agent plugin

  7. Agent loops go mainstream; the limits move outside the agent

    As of

    Ralph-style loops are now built in: Claude Code's /goal re-runs turns until a separate small model judges a condition met, and Codex's /goal (0.128.0 and later) keeps a persistent objective across turns. Practitioners note that in-session loops and plugins keep one growing context, so for long jobs they still run a fresh process per pass with the check, iteration cap and stop file enforced by a script.

    Practice: Give every loop a check it cannot edit, an iteration and no-progress cap, its own branch and a human who merges; use /goal for shorter jobs.

    Sources:
    Loadouts: Guarded Ralph loop

  8. Hard rules move from prose into hooks and permissions

    As of

    "Never do X" lines go into PreToolUse hooks that deny with a reason, and policy hooks fail closed with onFailure "block" (Claude Code v2.1.295). Only exit code 2 blocks; other non-zero exits do not. Deny rules are one layer, not a sandbox: Read denies do not stop shell reads.

    Practice: Enforce must-never rules with hooks or deny rules, test each by attempting the forbidden action, and keep a sandbox for real isolation.

    Sources:
    Loadouts: Claude Code hooks guard rails

  9. Supply chain and injection are first-class concerns

    As of

    Plugin4Shell (September 2026) bypassed marketplace pinning in several agents (fixed in Claude Code 2.1.179 and Codex 0.146.0). Codex ignores project AGENTS.md in untrusted folders. claude -p runs a repository's hooks without a trust prompt unless --bare is used, which Anthropic recommends for scripts.

    Practice: Pin CLIs, plugins and MCP packages, run CI agents with --bare and least privilege, and treat PR, issue and page text as data.

    Sources:
    Loadouts: Headless agents in CI, Supabase with a safe agent

  10. Subagent model and effort are chosen per task, in writing

    As of

    Instruction files now tell the lead agent which model and effort each subagent gets by task class. Claude Code subagents take model and effort in front matter; Codex custom agents take model and model_reasoning_effort in TOML.

    Practice: Route mechanical work to small models at low effort, keep judgement work on the strongest model, and brief every subagent fully.

    Sources:
    Loadouts: Subagent model routing

  11. Frameworks ship their own agent skills and MCP servers

    As of

    Framework and tool makers now publish version-matched agent context themselves: Phaser 4 ships agent skills inside its npm package, Expo has an official plugin for Claude Code and Codex and opened its hosted MCP server to the Free plan, and Sentry's XcodeBuildMCP was renamed MobileBuildMCP (npm mobilebuildmcp, 23 September).

    Practice: Point the agent at the framework's own skills or MCP server for the installed version instead of relying on model memory and old tutorials.

    Sources:
    Loadouts: Phaser 4 web game, Expo and React Native with Expo MCP, iOS builds with MobileBuildMCP (XcodeBuildMCP)

  12. Gemini CLI gives way to Antigravity CLI

    As of

    Google announced the move on 19 May 2026; Gemini CLI stopped serving individual Google accounts on 18 June 2026 (enterprise and API-key use continue). Antigravity CLI keeps GEMINI.md, reads workspace skills from .agents/skills/ and MCP servers from .agents/mcp_config.json, where remote servers use serverUrl.

    Practice: Move workspace skills from .gemini/skills/ to .agents/skills/ and MCP servers into .agents/mcp_config.json.

    Sources:
    Loadouts: One AGENTS.md for every agent

Practitioner posts are evidence that a practice is in use; behaviour is only stated as fact when vendor documentation confirms it. Corrections are welcome via the about page.