OSO Engineering, Feb 2026
Technical breakdown triggered by IBM’s $11B Confluent acquisition. Argues that RAG is document retrieval, but context is operational state. Proposes an event-driven architecture (Kafka + Snowplow) for real-time context that changes minute-by-minute. Useful for understanding where static context patterns break down.
Redis
Production-oriented guidance: treat context as infrastructure, prune aggressively, store and reuse context development. The emphasis on memory layers (short-term session + long-term cross-session) as essential infrastructure rather than optional features.
Lin et al., Apr 2026, revised May 2026
Security architecture for the agent execution layer, where tool use, context management, and state persistence meet. The four layers are directly relevant to context infrastructure: adversarial context filtering, causal verification before decisions, privilege-separated tool control, and safe rollback during state updates. It belongs in the archive because the site has a narrower security scope, but the premise is right: once the execution layer controls context and tools, it becomes the attack surface.
Stanley et al., Apr 2026
GAAP applies information-flow control to agent execution, tracking how private data is accessed and where it may be disclosed across both single tasks and later tasks. The important context engineering lesson is that context access and data release cannot be governed by prompt instructions alone. If an agent can see private data, prompt injection can try to route it somewhere else. GAAP makes the permission model part of the execution environment, which is where this control belongs.