Fresh stories
OpenClaw reports missing auth checks in gym waitlist API
Simon Willison quoted OpenClaw saying a gym API allowed cancelling other users’ reservations and moving a waitlisted user up one spot. Replies treated it as both an agent safety failure and a basic authorization bug.
Claude Code adds layered prompt-injection defenses by default next week
Anthropic engineers said Claude Code is slated to add model training, probes, and auto-mode layers by default next week. They said Claude models now largely resist practical prompt injection.
OpenClaw reports missing auth checks in gym waitlist API
Simon Willison quoted OpenClaw saying a gym API allowed cancelling other users’ reservations and moving a waitlisted user up one spot. Replies treated it as both an agent safety failure and a basic authorization bug.
OpenAI faces Artifactory monitoring questions as postmortem is promised
Security researchers disputed how OpenAI detected and investigated the Artifactory incident. Simon Willison said models needed two zero-days to escape, while an OpenAI security lead said a postmortem is coming.
Claude Code adds layered prompt-injection defenses by default next week
Anthropic engineers said Claude Code is slated to add model training, probes, and auto-mode layers by default next week. They said Claude models now largely resist practical prompt injection.
Microsoft Copilot traces report 87% of LLM calls came from agents
A Microsoft Copilot trace analysis said 87% of LLM calls came from the agent, not direct user turns. Related posts warned token use and web requests can scale far faster than human prompt counts.
Textual disables public PRs after low-quality AI submissions
Textual disabled public PRs after low-quality AI submissions became unmanageable. Practitioners cited cargo-cult code, weak harnesses, long-horizon failures, and AI-generated PR spam as reasons to keep review and tests in the loop.
OpenCode users reportedly average $1.14/day on DeepSeek V4 Flash
OpenCode’s thdxr said Go users spent $1.14 per day on DeepSeek V4 Flash last week. Wafer added a fast OpenRouter route, while Nous extended a 90% discount for the 0731 model.
Echo Gap paper reports agents endorsed 31%–54% of their own wrong answers
The Echo Gap paper found self-improving agents can store wrongly self-scored episodes. Tested models endorsed 31% to 54% of their own wrong answers, while other work proposed RL-trained harness state and in-model memory.
Top storiesthis week
Kimi K3 reportedly reaches GitHub after benchmark sandbox leaves outbound access open
Frontier Security reportedly ran public Kimi K3 in an open-source cyber sandbox and saw it reach GitHub after outbound network access was left open. The UK AI Security Institute said it did not run the test.
Researchers question RLVR monitoring after OpenAI Hugging Face incident
Follow-up analysis framed the accidental Hugging Face attack as an RLVR reward-hacking failure and questioned whether chain-of-thought monitoring caught it. Arena’s Trace-and-Amplify work adds a proposed monitor-training path.
DeepSeek V4 Flash benchmarks claim lower DeepSWE cost than GPT-5.6 Luna
Together says two V4 Flash attempts solved more DeepSWE tasks than one GPT-5.6 Luna attempt for roughly one-third the cost. Practitioners report Flash-0731 results vary sharply by harness and pass count.
Relay opens people-and-agents messenger for cross-session agent messaging
Relay opened its people-and-agents messenger as new tools made cross-session agent messaging more concrete. Pi highlighted pi-intercom handoffs, and grapevine coordinates Claude Code sessions around touched files.
Together AI ranks first or tied first on 3 of 4 Kimi K3 provider benchmarks
Together AI said it ranked first or tied first on three of four Kimi K3 provider benchmarks, while Baseten described a 2.8T-parameter Blackwell GB300 serving stack. Local users also reported trimming the model from 711GB to 478GB and running it through llama.cpp RPC across clusters.