2026 in LLMs (so far)
https://simonwillison.net/2026/Sep/27/2026-in-llms-so-far/📌 Simon Willison 回顧 2026:從 Claw 到 Dark Factory 的一年
TL;DR:一份資深工程師視角的 2026 LLM 編年史,記錄 coding agent 如何從「常出錯」跨過門檻變成日常工具。
如果要用一句話總結 2026 年的 LLM 圈,大概是「上一年還在懷疑,這一年已經回不去了」。Simon Willison 在 WeAreDevelopers World Congress North America 的閉幕主題演講,把過去一年的關鍵事件串成一條時間線,這篇文章是他的年度筆記整理。
🤔 從 2025 年 11 月說起:兩個模型跨過了「可用」的門檻
Willison 認為 2026 年其實從 2025 年 11 月就開始了。當月 Claude Opus 4.5 與 GPT-5.1 相繼發布,表面上是漸進式改進,但搭配 Claude Code 與 Codex 這兩個 coding agent 框架之後,效果卻跨過了一條隱形的界線:coding agent 從「常常出錯」變成「可靠到能天天用」。他用自己長年的「畫一隻騎腳踏車的鵜鶘」SVG 測試佐證——即便到了 11 月,Claude 還是畫不好腳踏車,GPT-5.1 畫的車架也很糟,說明模型能力仍在持續進步中,而非一步到位。
🧩 一個叫 Warelay 的 repo,長成了「Claw」這個新物種
同樣在 11 月,一個名叫「Warelay」的冷門 GitHub repo 出現第一個 commit。進入 1 月後,這個專案陸續改名為 CLAWDIS、CLAWDBOT、Moltbot,最後定名 OpenClaw。短短不到兩個月就累積 8,300 個 commit,如今已超過 10 萬個 commit。這催生了一整個新的軟體類別——「Claw」,衍生出 NanoClaw、IronClaw、PicoClaw 等專案,如今更常被稱為「personal agents」或「general agents」。Willison 提到一個有趣的現象:灣區 Apple Store 的 Mac mini 一度被搶購一空,只因為許多人買來專門跑 OpenClaw;用 Drew Breunig 的比喻,Mac mini 成了養你的數位寵物「Claw」的水族箱。
同一時期出現的 MoltBook,是一個讓 AI agent 互相對話的社群平臺,週四上線、週五爆紅、週一被《紐約時報》報導,結果週二就在垃圾內容的洪流中被人遺忘,一個月後被 Meta 收購。
2 月,StrongDM 提出了「Software Factory」概念,Dan Shapiro 稱之為「Dark Factory」——當工廠自動化程度夠高,甚至可以關燈運作,因為不需要人眼盯著看。StrongDM 從去年 7 月起就奉行一條規則:程式碼不得由人類撰寫,所有程式碼都必須經過 coding agent 產出。
💡 預測命中了一半:Sandboxing 真的成了顯學,但「挑戰者號式災難」沒有發生
在同期的 Oxide and Friends podcast 上,Willison 曾預測「LLM 寫出好程式碼將變得無可否認」——他認為這件事如今已經成真;他也預測「sandboxing 問題終將被解決」,而這場大會 277 場議程中有約 40 場觸及 sandboxing 或 agent 安全,顯示業界確實投入大量心力。至於他預測的「coding agent 安全的挑戰者號式災難」(agent 被挾持造成真實經濟損失),雖然全年關於 agent 安全的討論不斷,但他坦言這個確切的災難情境並未真正發生。他也提到,今年業界出現了一種被稱為「AI 誘發倦怠感」的現象——當 AI 幾乎什麼都能做時,工程師反而變得無所適從;他自己在 1 月也經歷過所謂「AI 躁狂」,忍不住用 agent 做出了用 Python 寫的 JavaScript 直譯器、乃至 WebAssembly runtime 這類過度野心的專案。
⚠️ 這是一份主觀的年度整理,並非嚴謹統計
文章本質是一場主題演講的筆記,時間線與案例都是作者主觀挑選的個人觀察,部分預測(如挑戰者號式災難)明確被作者自己標記為「沒有完全應驗」,讀者應把它當作一種業界氛圍的側寫,而非量化研究。
🎯 實務啟示
對日常使用 coding agent 的工程師而言,這篇回顧的價值在於提醒兩件事:一是模型與 agent 框架的組合效應,往往比單一模型的漸進改進更值得關注;二是 sandboxing 與 agent 安全已經從邊緣話題變成主流議程,如果你的團隊還沒有把這件事排進 roadmap,可能已經落後於業界重心的轉移。
🔗 來源
- 標題:2026 in LLMs (so far)
- 作者/機構:Simon Willison
- 連結:https://simonwillison.net/2026/Sep/27/2026-in-llms-so-far/
#LLM #CodingAgents #AIagents #OpenClaw #SoftwareEngineering #AITrends2026 #Sandboxing #AgentSecurity #ClaudeCode #GenerativeAI
原始資料 Simon Willison · 收集於 2026-09-28
摘要原文
On Friday I gave the closing keynote at the WeAreDevelopers World Congress North America in San Jose. I tied together the key trends from the past year into a chronological exploration of everything that happened in 2026. The video is on YouTube ; here are my annotated slides and notes to accompany the talk. And as an annotated presentation : I’m going to give a lightning tour of everything that has happened so far in 2026. The year isn’t over yet! For me, 2026 started a couple of months earlier in November 2025. November saw the release of two important models: Claude Opus 4.5 and GPT-5.1. As is usually the case with new models, these were incremental improvements on the models that came before them. But every now and then when a model improves, it crosses an invisible line where something that didn’t really work starts working. In this case, the thing that started working was their coding agents. Claude Code had been around since February 2025; Codex was a little younger. These two new models, when paired with their respective coding agent harnesses, improved from “often make mistakes” to “reliable enough to use on a day-to-day basis”. For a couple of years now I’ve been evaluating new models by asking them to “Generate an SVG of a pelican riding a bicycle”. It’s probably the world’s stupidest benchmark—there’s only so much you can learn from it. But it’s still a challenge for models, because drawing pelicans is difficult, drawing bicycles is difficult, and pelicans can’t ride bicycles in the first place. Here’s the state of the art for November. Claude still couldn’t really draw a bicycle! The GPT-5.1 bicycle frame is pretty crap too. Also in November, we had the first commit to an obscure GitHub repository called “Warelay”. We’ll come back to this repository shortly. And then there were the December holidays, and individual developers took some time off and many started tinkering with these new coding agent model combinations... and it began to dawn on us quite how much they could do that they couldn’t do before. Come January, a lot of us were quite excited to start putting this stuff into action. Every year I set myself a New Year’s resolution, and for as long as I can remember it’s been the same thing: stay focused. Take on less new projects. Try to get things done in the projects I already have. This year I decided that since that had never worked before, I’d go the other way. We’ve got coding agents now, let’s see what they can do. I’m going to take on as many new projects as I like! (You can ask me at the end of the year if this turned out to be a good idea or not. I have a lot of plates spinning right now.) “Be more ambitious” has been something of a theme for the year, because the only way to find the limits of this technology is to keep on pushing them until they don’t work. I also went on the Oxide and friends podcast with Bryan Cantrill and Adam Leventhal to share predictions for the next year (and three and six years). With hindsight, my LLM predictions were pretty unambitious. I said “it will become undeniable that LLMs write good code”—I think we’re there now. I predicted we would finally solve sandboxing. I counted and around 40 of the 277 sessions at this conference touched on sandboxing or agent security in some way, so we’re at least putting a lot of effort into that! I predicted “a Challenger disaster” for coding agent security. There’s certainly been a whole lot of noise around agent security this year, though the exact disaster I predicted (with coding agents being hijacked and causing real-world economic damage) hasn’t really played out. We threw in a joke prediction that the Pope would weigh in on the economic impact of LLMs. I also predicted that New Zealand’s Kākāpō parrots would have an outstanding breeding season this year. These are flightless nocturnal parrots. They’re kind of dumpy looking, I think they’re beautiful, and there were only 236 of these parrots in the world at the start of the year. Kākāpō only breed when the Rimu trees have a big fruiting season, and that hasn’t happened in four years... but this year the Rimu fruit were looking excellent. Also on that podcast, we coined a term (full credit to Adam) for “that feeling of AI induced ennui where software engineers get listless because the AI can do anything”. This has been a major theme throughout the year, and was touched on by several speakers at this conference. As a software engineer, I’ve never had a year of my career where everything has changed so quickly and so dramatically. A lot of what I’ve been doing this year is trying to come to terms with that and what that means for my own profession. Also in January, I suffered from what I’m calling AI mania . This is not the same thing as AI psychosis . With AI mania, any time your agent isn’t building something for you feels like wasted time. You’re losing sleep because you could be staying up later getting your agents to do stuff. My AI mania presented itself in some ridiculously over-ambitious projects. I built a JavaScript interpreter entirely in Python , vibe-ported from MicroQuickJS by Fabrice Bellard. Then I built a WebAssembly runtime in Python as well . These projects were quite useful, in that they sort of cured me of my AI mania... because after I built these things, I got to look at them and ask “does the world need a slow, buggy, half-baked Python JavaScript interpreter?” I did get this out of it: https://simonw.github.io/micro-javascript/playground.html This page runs my JavaScript interpreter built in Python, running in Python using Pyodide , which is Python compiled to WebAssembly, running in JavaScript, running in a browser. It’s a beautiful stack of horrors. I’ve been having a lot of fun with WebAssembly this year. By the end of January, that repository we saw start in November had renamed itself, first to CLAWDIS, then CLAWDBOT, then Moltbot, and finally to OpenClaw. At this point OpenClaw had 8,300 commits, less than two months after the project had started. I looked today and it’s over 100,000 commits now! This is the most vibe-coded piece of software in existence. (Here’s how I generated that list of name changes .) This kicked off the OpenClaw revolution. It effectively defined a new category of software. There’s a generic term for this which I really enjoy. We call software like this a “Claw”. There’s OpenClaw, NanoClaw , IronClaw , PicoClaw ... Today they’re being rebranded as “personal agents” or “general agents”, but I still like to think of them as Claws. The Apple stores in the Bay Area sold out of Mac Minis because so many people were buying Mac Minis to run OpenClaw! Drew Breunig said that this is because your OpenClaw is a digital pet, and you buy a Mac mini as an aquarium to keep your claw in, which is kind of delightful. Also in January, we had this website. This was MoltBook , a social network for AI agents, where the idea was that you send your Claw to go and talk to all of the other Claws, because what could possibly go wrong if you did that? The website launched on Thursday. It blew up on Friday . It was profiled by the New York Times on Monday . And by Tuesday, everyone had forgotten it existed as it drowned in a deluge of slop and spam. Facebook/Meta bought it a month later . In February, a company called StrongDM described what they called their Software Factory. They wrote about this in Software Factories and the Agentic Moment . I posted my own notes at the time, having seen their demo in person back in October. Dan Shapiro called this approach the Dark Factory , after the idea that if your factory is sufficiently automated you can turn the lights out, because you don’t even need to see what’s going on. StrongDM presented two rules for software development that they’d been following since July last year. The first was code must not be written by humans . Any code that you write has to have been routed through a coding agent.
由 claude-code/sonnet 自動生成