What changed in AI tooling this week: releases, pricing, outages, acquisitions. Every item links to its source.
Archestra’s MIT licensed OpenAPPA sits outside the agent loop and tracks audience×trust labels on data flows instead of regex allowlists, so prompt injection can’t negotiate past it. Their benches sh…
Claude Code now draws a small fixed slice of your weekly quota to reach a clean stopping point when the 5 hour limit hits mid task, instead of cutting off mid edit. Pro gets the wrap up once a week;…
NVIDIA’s Open Agent Safety Platform pairs Apache 2.0 OpenShell (kernel isolated agent sandboxes, now generally available) with Sentry on BlueField 4 DPUs for out of band policy enforcement on the pat…
CMU’s CliffCompaction (arXiv 2609.26779) is a drop in autocompactor that truncates tool I/O instead of summarizing, never rephrases, and discards prior compactions blocks so drift doesn’t stack—cutti…
Caspian is a free local desktop app (Windows, macOS, Linux) that turns a rough idea into a planned build with Claude, Codex, or other tools, then publishes a live site with sign in, spaces, page view…
DeepSeek’s DSec paper (arXiv 2609.22978) details a production sandbox platform—FnCall, containers, Firecracker microVMs, and full VMs via one SDK—serving 3M instances/day and 380K concurrent from 160…
Foremerge is an open source Rust binary above Git that lets Claude Code, Codex, and Cursor agents in parallel worktrees publish intents and semantic scopes before editing; deterministic rules flag pl…
OpenAI’s Sept 25 updated misalignment report details a May incident where a highly persistent internal model published a researcher’s GitHub token in the public openai/codex repo—split into pieces to…
Prismor (formerly Immunity Agent) is a self hosted Apache 2.0 control plane that sits between Claude Code, Codex, Cursor, or Windsurf and every tool call, allowing, warning, or blocking by policy bef…
MiniMax turned on M3.1 Flash Preview inside MiniMax Code on Sept 27 with no model card, public API listing, or pricing—just a 1M token context and five reasoning effort tiers (low through max). Days…
YC W26’s /dev/fast open sourced Whiteboard, a local desktop canvas where Claude Code, Codex, and similar agents draw sequence and ER diagrams of their work next to an AST aware Rust diff viewer and D…
Hayder Tirmazi’s Sept 26 write up speeds llama.cpp’s n gram prompt lookup drafting up to 42× and cuts peak memory 2.6× via reference reads, dense outer maps, sorted vector followers, and a Lemire con…
BetterWebSearch is an MIT licensed local MCP server that defaults to keyless DuckDuckGo search, escalates extraction from HTTP to structured data to Playwright only when needed, and returns cited res…
Fireworks Research’s Ember 1, trained on Kimi K3, cuts reasoning tokens 35–50% while holding coding and agent quality on SWE bench, Terminal Bench, and live customer A/B tests. It’s a research previe…
Altair is an Apache 2.0, Windows first coding agent that snapshots each file change, tracks command side effects in a hidden git repo, and runs your tests/linter as a health gate before it can report…
Xiaomi’s Sept 27 post traces MiMo V2.6 tool call repetition to RL flooding rewards, then uses Multi teacher On Policy Distillation ( $90k vs $2.3M for a full MixRL restart) to cut loops across Claude…
AWS’s Sept 25 what’s new post adds agent skills for Amazon SES and End User Messaging (SMS, RCS, WhatsApp) on the AWS MCP Server, so Claude Code, Codex, Cursor, or Kiro can verify sending identities,…
Anthropic’s Claude Marketplace is live as one discovery surface for 2,000+ MCP plugins and connectors (Atlassian, Google, Microsoft, Notion, Salesforce, and more), Claude powered products you can buy…
The Model Context Protocol TypeScript SDK 2.1.0 (Sept 23) adds opt in DPoP (RFC 9449 / SEP 1932) so clients bind OAuth access tokens to a local key. Matching server packages return request time insuf…
Greyforge’s Apache 2.0 Sley 2.0 (Sept 24) drops text source for typed semantic graphs: agents query bounded context, propose typed mutations, and a 14 phase deterministic kernel validates before atom…