LLM Powered Autonomous Agents
Lilian Weng
An LLM agent’s autonomy comes from the system around the model: planning, memory, and tools. Those parts extend what it can do, but do not remove its core failure modes.
Open library
The essential reading of generative AI and agents, open in a clean reading view, with Meow and Standard summaries when available. No account needed to read.
563 papers · 561 with a Meow summary · 333 posts
The selected papers and blogs: the essential papers of generative AI and agents, and the key lab publications and essays, each with Meow and Standard summaries.
Lilian Weng
An LLM agent’s autonomy comes from the system around the model: planning, memory, and tools. Those parts extend what it can do, but do not remove its core failure modes.
Lilian Weng
Prompt engineering steers a language model without changing its weights, but it is empirical: a prompt that works for one model may fail on another.
Lilian Weng
When a Transformer needs more context, less memory, or faster inference, which part of attention should change?
Lilian Weng
Transformer inference gets cheaper only when the fix targets the actual bottleneck—memory, computation, or latency—and fits the hardware that must run it.
Lilian Weng
The design choice is where image information enters a language model—and whether adapting it changes the language model at all.
Lilian Weng
Training giant networks is a memory-and-scheduling problem: divide data or computation across GPUs, then manage synchronization, idle stages, and extra state so the split actually helps.
Lilian Weng
Diffusion models combine analytical tractability with flexibility, but pay for it with a long, expensive sampling chain.
Lilian Weng
Contrastive representation learning places related samples close together in an embedding space and separates unrelated ones. Its effectiveness depends on how it constructs positive pairs and negatives.
Lilian Weng
Attention replaces one all-purpose summary with a different weighted view of the input for each prediction.
Lilian Weng
The key is to inspect what each policy-gradient method estimates, reuses, and constrains—not just its optimizer name.
Andrej Karpathy
An RNN reuses a learned update and carries state across steps, so it can handle sequences of varying length. Character-level LSTMs show both the structure this can learn and the errors that remain.
Andrej Karpathy
Neural-net training can fail silently: a runnable model may still be logically misconfigured, so verify each step before adding complexity.
Andrej Karpathy
Karpathy argues that AI automates work more readily when attempts are verifiable, not merely specifiable.
Andrej Karpathy
The essay argues that frontier LLMs are not yet clean, experience-only learners: human data and engineering shape them. Still, the author treats pretraining as a practical cold start, not a dead end.
Andrej Karpathy
The author identifies RLVR—training against automatically checkable rewards—as 2025’s major training shift: it enabled longer optimization and reasoning strategies, but helped produce intelligence that remains sharply uneven.
Chris Olah
Long Short Term Memory networks (LSTMs) add a gated cell state that lets useful information travel through a recurrent network more easily than in a standard RNN.
Chris Olah · Distill
Feature visualization creates inputs that show what a network responds to, but raw optimization can exploit high-frequency artifacts; useful interpretations need diversity and constraints.
Chris Olah · Distill
What could an explanation show if it followed a network’s learned concepts, not just highlighted pixels?
Chris Olah · Distill
The article argues that attention can extend recurrent networks beyond sequence processing by letting them use memory, focus on inputs, vary computation, and build programs.
Jay Alammar
A word can use clues from elsewhere in its sentence: the Transformer learns how much to attend to each position.
Jay Alammar
GPT-2’s text generation came from scaling a familiar decoder-only Transformer: causal masking lets it predict the next token without seeing future tokens, while self-attention builds context.
Jay Alammar
BERT paired reusable pretraining with a Transformer encoder that can use left and right context, then adapt to labeled NLP tasks.
Jay Alammar
Stable Diffusion generates text-guided images by repeatedly predicting and removing noise in compressed latent space, then decoding the result into pixels. Latent-space processing speeds the work; attention brings prompt information into denoising.
Simon Willison
An agent can leak private data when its tools let it access secrets, read attacker-controlled content, and communicate outward. Hostile instructions can steer it to use all three.
Simon Willison
Text meant for translation can become a command to GPT-3, turning an ordinary task into a security exploit.
Simon Willison
Prompt injection can turn ordinary hostile text into a tool call or data leak; Willison’s proposal separates the model that can act from the one that reads untrusted content.
Simon Willison
By the end of 2024, GPT-4-level performance had become a crowded field, but capability gains had not solved reliability. Willison’s practical emphasis is on testing the system you build, not trusting fluent output.
Simon Willison
In 2025, LLMs moved from impressive answers toward useful multi-step work; that shift makes verification and permissions part of the product, not extras.
Simon Willison
For LLM engineering, an agent runs tools in a bounded loop to achieve a goal. It’s useful technical shorthand, not a universal meaning of “agent.”
Simon Willison
The key design problem is choosing goals, tools, and boundaries that let an agent iterate toward a solution without making its freedom the biggest risk.
Simon Willison
Willison proposes “vibe engineering” for AI-assisted production work where engineers remain accountable—not for accepting code just because it appears to work.
Simon Willison
Treat an LLM as a fast, fallible coding partner: the developer must supply direction, verify behavior, and take over when judgment matters.
Chip Huyen
A chain of almost-correct steps can still fail: the article says 95% accuracy per step falls to 60% over 10 steps and 0.6% over 100.
Chip Huyen
A generative AI platform is more than a model call: it is a set of optional components that can be added as an application’s needs grow.
Chip Huyen
RLHF uses human rankings to steer a language model toward preferred answers. InstructGPT’s SFT+RLHF model outperformed SFT alone and was preferred overall, but hallucinated more.
Chip Huyen
The article’s core design pattern is to align different modalities in a shared embedding space, then let a language model condition its answers on visual tokens.
Chip Huyen
A working LLM demo is not proof of a reliable production system: prompts can fail silently, and multi-step workflows add more ways to go wrong.
Chip Huyen
Ten open research directions are less a model checklist than a systems agenda: reliability, data, compute, interfaces, and whose preferences count.
Chip Huyen
A working GenAI demo proves possibility—not that a model is the simplest tool, that users want it, or that it is ready for production.
Eugene Yan
An LLM demo is not a dependable product: the guide argues for measuring the real task and combining retrieval, specialization, safeguards, and user-centered design.