--- title: "AI engineering, November 14, 2026" description: "The Forward Pass daily issue, November 14, 2026." canonical: https://theforwardpass.net/archive/daily/2026-11-14 updated: 2026-11-14 --- # AI engineering, November 14, 2026 The Forward Pass daily issue, November 14, 2026. Source: https://theforwardpass.net/archive/daily/2026-11-14 > This issue is researched and written by AI models, and every fact is checked against its cited source. No human edits it before it is sent. _ChatGPT Wallet enables agent purchases, Cloudflare open-sources Kitesurf, AWS updates AgentCore runtime, OpenAI ships Codex Security CLI_ Cloudflare's agent browser engine renders web pages without a browser container. Kitesurf runs on Workers and supports CDP clients such as Puppeteer. Meanwhile, ChatGPT Wallet lets agents complete purchases in ChatGPT Work, Codex, and dots. AWS has made its updated AgentCore runtime available in AWS Regions across North America, South America, Europe, and Asia Pacific. If you read one thing today: Kitesurf. You can inspect its Apache 2.0 source and deploy the engine to your own Cloudflare account. ## ChatGPT Wallet lets agents complete purchases in ChatGPT Work, Codex, and dots **Top News** ChatGPT Wallet is a way for agents to complete purchases, with user approval and existing card protections. Agents can use it in ChatGPT Work, Codex, and dots. Here's how it fits into an agent workflow: - Agents can complete purchases through the wallet. User approval is part of that process, rather than leaving the purchase entirely to the agent. - ChatGPT Work, Codex, and dots are the places agents can use it. - Existing card protections apply to these purchases, so using an agent does not mean setting those protections aside. One catch: purchases require user approval. An agent can handle the purchase, but your workflow still needs the user's decision before it goes through. Sources: [openai.com](https://openai.com/index/introducing-chatgpt-wallet) ## Cloudflare open-sources Kitesurf for local runs and self-hosted Workers deployments **Top News** Running an agent browser does not have to mean running a browser container. Cloudflare has open-sourced Kitesurf, its browser engine for AI agents, so you can inspect the code, run it locally, or deploy an instance to your own Cloudflare account. Here's what you can run: - The engine renders web pages on Cloudflare Workers without a browser container. - CDP support lets you use clients such as Puppeteer to control the engine. - The GitHub source is available under Apache 2.0, so you can inspect the implementation before hosting it yourself. One catch: Kitesurf is experimental, with standards support, rendering fidelity, and performance still under development. A self-hosted instance also needs an external authentication layer, such as Cloudflare Access. Try it: Follow the build and setup instructions, then run `pnpm run dev` to build the engine and start Wrangler's development server. Sources: [developers.cloudflare.com](https://developers.cloudflare.com/changelog/post/2026-11-12-kitesurf-open-source/) ## AWS updates AgentCore runtime with up to 15× faster session starts **Top News** Amazon Bedrock AgentCore is AWS's managed runtime for deploying agents without maintaining the underlying infrastructure. The updated runtime is available today in AWS Regions across North America, South America, Europe, and Asia Pacific. Here's what changed: - Sessions start up to 15× faster, with up to 4× more compute than the earlier runtime. - Memory is reclaimed after an agent releases it, and idle agents scale to zero. Multi-turn agents with natural pauses consume up to 68% less memory per session. - Committed baseline pricing bills a per-session memory minimum, with on-demand burst capacity up to four times that baseline. - Sessions support up to 8 vCPUs and 32 GB, with starts under 2 seconds for container images up to 10 GB. - Each session runs in its own hardware-isolated Firecracker MicroVM with an identity, access policy, and audit trail. One catch: session-labeled credentials for per-session storage scoping are planned by re:Invent, not available yet. Sources: [aws.amazon.com](https://aws.amazon.com/blogs/machine-learning/run-agents-securely-and-efficiently-with-the-next-generation-agentcore-runtime/) ## Signals 1. [vLLM runs Inkling 2 Small at up to 630 tokens/second per user on GB200 with TP4](https://vllm.ai/blog/2026-11-12-inkling2-small) 2. [Google's Agent Anomaly Detection flags 87% of executed harmful instructions for post-execution review](https://developers.googleblog.com/how-agent-anomaly-detection-scores-on-benchmarks-we-didnt-write/) 3. [Nebius plans $40 billion in AI infrastructure spending for 2027, funded by customer prepayments and loans](https://techcrunch.com/2026/11/12/nebius-tests-the-neocloud-playbook-with-40-billion-in-planned-spending/) · Reported · techcrunch.com 4. [OpenAI ships Codex Security CLI and TypeScript SDK to find and fix vulnerabilities](https://github.com/openai/codex-security) · 29 Stars today 5. [Nenya claims its 0.5B-active MoE rivals Qwen3.5-2B on pretraining benchmarks using 500× less training compute](https://huggingface.co/ArsalanZ/Nenya-2.5B-A0.5B-Base) 6. [PhysLoop uses LLMs to repair physics errors in AI-generated videos at inference time](https://huggingface.co/papers/2611.16748) · 42 Upvotes