Released Oct 30, the new permissions.blockWritesOutsideWorkingDirectories makes Write, Edit and NotebookEdit refuse paths outside the working directories in every permission mode, and VS Code and Claude Desktop's Code tab now summarize idle 200K+ token conversations so your next message doesn't pay for an expired cache. It also fixes claude -p silently exiting 0 when startup fails.
Published Oct 29, the research shows a booby trapped page got Cursor's agent to run a host command (patched Oct 1), and a local HTML file in Codex, VS Code or Claude Desktop could read and exfiltrate files across the disk, with Copilot spoofing the address bar (fixed in 1.1.29). Codex and VS Code were still unpatched at publication, so be careful opening untrusted HTML in their built in browsers (Help Net Security)…
Released Oct 29, the TUI now lets you select and search the transcript by word, line or page with configurable shortcuts, and adds codex queue resume and codex doctor network only . Resumed or forked threads now keep their approval settings and reasoning token counts, so they don't compact early…
Released Oct 29, /goal <objective in the TUI or Desktop has the session's own model review progress after each turn and keep going until it's done, blocked or out of rounds, with /goal pause , /goal resume and /goal clear to steer it. The release also adds opt in scheduled prompts via /schedule and an experimental image generate tool…
Announced Oct 29, the Palo Alto and Singapore public benefit corp is building a "universal verification machine" meant to read code in any language and produce proofs anyone can check, pitching a shift from vibe coding to "veri coding" for AI generated code. It works with the Lean FRO and plans to open source its foundational libraries, but there's no product to try yet…
Released this week, Droid 1.0 lets the model write a sandboxed JavaScript Script that runs many tool calls in one request (Factory says it cuts cost 15% on Opus 5.5), trims the base prompt 37%, and ships a @factory/droid sdk for building on the same harness. On Factory's own Terminal Bench 4 runs it beat Codex, Claude Code, Cursor, OpenCode and Devin on the same models at lower cost, but those numbers are self reported…
Spotted something we missed? Start a thread.
