Morning Briefing — 08/07/26

Verification cutoff: August 7, 2026, morning edition.

Executive Summary

Three items merit 10–15 minutes this morning. First, save the new Agent Plugins 1.0.0 specification and try wrapping one small existing skill: it is the first serious vendor-neutral packaging effort spanning skills and MCP servers, although the specification is still labeled a working draft. Second, download CSTA’s 2026 PK–12 Computer Science Standards and its 2017 crosswalk; the revision gives AI, cybersecurity, ethics, human-centered design, and high-school specialties substantially clearer curricular homes. Third, inspect Deno’s new celld project if self-hosted Durable Objects are relevant—but treat its three-commit repository and evolving compatibility surface as a laboratory, not infrastructure.

Action Queue

1. Package one tiny skill with Agent Plugins 1.0.0

Urgency: This week
Importance: ★★★★★

What it is: Agent Plugins 1.0.0 is a vendor-neutral package format for distributing agent extensions. A plugin is a directory with a required plugin.json manifest and optional skills/ and mcp.json components. The launch group includes AWS, Anysphere/Cursor, GitHub, Microsoft, OpenAI, and Vercel; listed clients include ChatGPT/Codex, Cursor, GitHub Copilot, Kiro, and VS Code.

Why it matters: Existing work with Codex skills and MCP can become easier to move, inspect, teach, and version if clients converge on one directory contract. The immediate value is the packaging convention—not a promise that installation, permissions, credentials, or runtime behavior are already identical everywhere.

Recommended action: Read the minimal manifest and standard layout, then wrap one harmless, read-only skill in a test plugin. Keep it free of credentials and external write actions. Validate the directory in one compatible client and record where that client still requires its own installation or permission steps.

Status: Specification v1.0.0 and public authoring guide verified August 7, 2026. The specification explicitly remains a Working Draft.
Deadline: None.
Cost: The specification and authoring guide are free. No registration, certificate, badge, or regular price. Compatible clients and hosted MCP services may have separate costs.
Requirements: Text editor, a plugin directory, plugin.json, and optionally an existing SKILL.md or MCP server. Testing requires a compatible client. Authentication and credential handling remain client-managed.
Official links: Agent Plugins specification · Build an Agent Plugin · Compatible clients

2. Save the 2026 CSTA standards and crosswalk

Urgency: This week
Importance: ★★★★★

What it is: CSTA’s newly released 2026 PK–12 Computer Science Standards replace the 2017 edition with grade-level foundational progressions, five concepts, twelve practices, and advanced high-school specialties in AI, cybersecurity, data science, game development, physical computing, and software development. AI is integrated across the foundational concepts rather than isolated as a single topic.

Why it matters: This is directly useful for beginning-technology curriculum planning. It separates algorithms from programming, strengthens systems and security, and makes ethics, social responsibility, inclusive collaboration, computational thinking, and human-centered design explicit practices rather than optional discussion topics.

Recommended action: Download the full standards and the 2026-to-2017 crosswalk. Spend ten minutes marking one current assignment against the new Programming, Systems & Security, and Computing & Society expectations; note any missing student practice, especially ethics or human-centered design.

Status: Final 2026 standards, interactive display, downloadable resources, and crosswalk verified August 7, 2026; the official PDF is dated July 16, 2026.
Deadline: None announced.
Cost: Free to view and download under CC BY-NC-SA 4.0. No registration, certificate, badge, or regular price.
Requirements: Browser or PDF reader. Applying the standards requires access to the relevant course objectives or assignments.
Official links: 2026 CSTA PK–12 Standards · Downloads, crosswalk, and implementation resources · Interactive standards display

3. Inspect `celld`; do not deploy it publicly yet

Urgency: No deadline
Importance: ★★★☆☆

What it is: Deno’s Apache-2.0 celld is a self-hosted daemon that runs Cloudflare Workers and Durable Objects on owned machines. Each object uses its own SQLite database and replicates to an S3-compatible bucket; nodes coordinate through the bucket without a separate control plane or consensus service.

Why it matters: It is a compact example of self-hosted stateful edge architecture and may eventually offer a useful route for durable, sharded services outside Cloudflare. It also intersects Linux, containers, object storage, SQLite, and resilience design.

Recommended action: Read the README plus the linked limitations and security pages. If the model is useful, run only the version check or a disposable single-node example with synthetic data. Do not expose peer HTTP publicly, store personal or student data, or treat compatibility with Cloudflare Workers as complete.

Status: Repository, Apache-2.0 license, container instructions, and security warnings verified August 7, 2026. The repository showed only three commits, and its README says the runtime and compatibility surface are still evolving.
Deadline: None.
Cost: Source code is genuinely free and open source. Compute, an S3-compatible bucket, storage, and network traffic may incur provider charges; no single regular price applies.
Requirements: Linux x86-64 or ARM64 for the published container, Docker or a source build, S3-compatible object storage and credentials, and esbuild for Worker projects. Multi-node peers require a trusted private network or encrypted overlay such as WireGuard or Tailscale.
Official link: denoland/celld

AI

The Agent Plugins specification standardizes the package boundary around skills and MCP servers, but not the complete trust boundary. A portable plugin can still behave differently depending on how each client installs it, prompts for permission, stores secrets, and runs subprocesses.

Open Source

Deno’s celld is Apache-2.0 and unusually explicit about its unfinished compatibility surface. That candor is useful: open source permits inspection and modification, but it does not turn a three-commit distributed system into mature infrastructure.

GitHub Discoveries

The denoland/celld repository is worth saving for architecture study. Its “one SQLite database per object, S3-compatible bucket as durable truth” design is more interesting today than its deployment readiness.

Linux & Self-Hosting

The celld documentation warns that peer HTTP does not terminate TLS and should remain on a trusted private network or encrypted overlay. Bucket credentials effectively confer fleet-administrator access. Those two constraints should precede any experiment.

TLDR’s August 7 editions surfaced Agent Plugins and celld; a CSTA chapter digest surfaced the new standards. All three leads were checked against the original specification, publisher, association, and source repository before inclusion. The read-only Spam and Trash recovery pass found no exceptional ICYMI item.

Teaching Corner

Use the CSTA 2026-to-2017 crosswalk and resources for a short faculty or student exercise: choose one familiar programming assignment, identify the content concept it teaches, then add one explicit practice—ethical analysis, inclusive collaboration, computational thinking, or human-centered design. This demonstrates why “learning to code” is necessary but not sufficient computer science education.

PKb Candidates

A portable plugin format standardizes packaging; it does not automatically standardize installation, authorization, credentials, or sandboxing.
Treat a specification’s maturity label as more informative than its version number: “1.0.0” can still be a working draft.
AI belongs across algorithms, data, systems, programming, and society—not only in a standalone AI unit.
Open source is an inspection advantage, not a production-readiness claim.
In distributed self-hosting, object-store credentials and peer-network exposure are part of the security perimeter.

Trends Worth Watching

Agent ecosystems are moving from client-specific folders toward portable packages, while agent clients retain their own security and runtime decisions. In teaching, the new CSTA standards similarly move beyond tool use toward durable concepts, practices, and sociotechnical judgment. Both shifts favor explicit structure over informal convention.

Evening Briefing — August 6, 2026 — actively exploited self-hosting vulnerabilities, WebMCP, and GitHub’s paused Kimi K3 rollout.
Morning Briefing — August 6, 2026 — task-scoped agent security and Cloudflare OS.
Evening Briefing — August 4, 2026 — Kotlin in BlueJ and coding-agent evaluation.

Sources Consulted

The official Agent Plugins specification, authoring guide, client list, and launch announcement; CSTA’s official standards, PDF, interactive display, and implementation resources; Deno’s official celld repository and documentation; current technology newsletters used only for discovery; Grumpy Old Geeks show notes; and a read-only Gmail Spam/Trash recovery pass. No unchanged item from the previous evening edition was repeated.

Written on August 7, 2026