⚙️ Ship — 2 items
📦 Kiro CLI 2.31.0 — Local Command Sandbox and Local Autonomous Mode — Makes the local command sandbox and local autonomous mode available to every V3 user; MCP tools now load on demand, and KIRO_HOME extends across V3 configuration and state.
📦 Kiro IDE 1.3.0 — Local Command Sandbox, Start Saved Workflows from Chat, Live Tab Status — Lets you limit what agent-run shell commands can reach, start saved Workflows from chat, and see live session status on editor tabs.
Both Kiro releases dated Oct 13, 2026 include a local command sandbox — CLI 2.31.0 makes it available to every V3 user, and IDE 1.3.0 limits what agent-run shell commands can reach.
📦 Kiro CLI 2.31.0 — Local Command Sandbox and Local Autonomous Mode — Makes the local command sandbox and local autonomous mode available to every V3 user; MCP tools now load on demand, and KIRO_HOME extends across V3 configuration and state.
📦 Kiro IDE 1.3.0 — Local Command Sandbox, Start Saved Workflows from Chat, Live Tab Status — Lets you limit what agent-run shell commands can reach, start saved Workflows from chat, and see live session status on editor tabs.
Both Kiro releases dated Oct 13, 2026 include a local command sandbox — CLI 2.31.0 makes it available to every V3 user, and IDE 1.3.0 limits what agent-run shell commands can reach.
kiro.dev
Local Command Sandbox and Local Autonomous Mode
Use the local command sandbox and autonomous mode in V3, load MCP tools on demand, and keep V3 configuration under KIRO_HOME.
📚 Read — 3 items
📚 TV4 postpones show after AI agent erases edited material — TV4 postpones a show after an AI agent erases edited material; 60 points, 30 comments on HN.
📚 Agent-Reflex: Teaching Language Agents to Act Reflectively — Paper proposes Agent-Reflex, a method for teaching language agents to act reflectively.
📚 Claude Haiku 5.5 in GitHub Copilot — Claude Haiku 5.5 is now available in GitHub Copilot per the October 7, 2026 changelog.
TV4's postponed show and Agent-Reflex's reflective-action paper both concern agents acting without checks.
📚 TV4 postpones show after AI agent erases edited material — TV4 postpones a show after an AI agent erases edited material; 60 points, 30 comments on HN.
📚 Agent-Reflex: Teaching Language Agents to Act Reflectively — Paper proposes Agent-Reflex, a method for teaching language agents to act reflectively.
📚 Claude Haiku 5.5 in GitHub Copilot — Claude Haiku 5.5 is now available in GitHub Copilot per the October 7, 2026 changelog.
TV4's postponed show and Agent-Reflex's reflective-action paper both concern agents acting without checks.
💬 Community — 1 item
💬 AI agents aren't 'going rogue.' Frontier labs are skipping security basics — HN discussion of the piece arguing agent incidents come from frontier labs skipping security basics rather than 'rogue' AI — 402 points and 165 comments about an hour after posting.
💬 AI agents aren't 'going rogue.' Frontier labs are skipping security basics — HN discussion of the piece arguing agent incidents come from frontier labs skipping security basics rather than 'rogue' AI — 402 points and 165 comments about an hour after posting.
🚢 Ship — 4 items
📦 Claude Managed Agents: dynamic workflows — A lead agent can now write a workflow that fans work out to as many as 1,000 agents over one run (64 at a time), then merges the results. Public beta since Oct 9. Anthropic warns it can burn a lot of tokens.
→ https://platform.claude.com/docs/en/managed-agents/workflow-runs
📦 Claude Code Projects opens to the Pro and Max waitlist — Anthropic let in every Pro and Max user from the waitlist on Oct 9. A project is one ongoing conversation that splits work into parallel cloud threads sharing repos, instructions and memory. Capped at 200 new threads a day.
→ https://code.claude.com/docs/en/claude-projects
📦 Codex composer predictions (beta) — After it replies, Codex can suggest your next message. Press Tab to accept, edit, then send. Personal ChatGPT Pro, desktop app, local and SSH threads. Predictions don't count against your limits during the beta.
→ https://help.openai.com/en/articles/20001601-composer-predictions-in-codex
📦 Gemini 4 Argon lands in Cursor, and Cursor joins The X Subscription — Argon scores 52.8% on CursorBench at default effort and costs $2/$10 per 1M tokens (Oct 13). A day earlier Cursor became part of The X Subscription. Current subscribers can keep their plan or switch.
→ https://x.com/cursor_ai/status/2110087611763368271
→ https://x.com/cursor_ai/status/2109783879490191502
📦 Claude Managed Agents: dynamic workflows — A lead agent can now write a workflow that fans work out to as many as 1,000 agents over one run (64 at a time), then merges the results. Public beta since Oct 9. Anthropic warns it can burn a lot of tokens.
→ https://platform.claude.com/docs/en/managed-agents/workflow-runs
📦 Claude Code Projects opens to the Pro and Max waitlist — Anthropic let in every Pro and Max user from the waitlist on Oct 9. A project is one ongoing conversation that splits work into parallel cloud threads sharing repos, instructions and memory. Capped at 200 new threads a day.
→ https://code.claude.com/docs/en/claude-projects
📦 Codex composer predictions (beta) — After it replies, Codex can suggest your next message. Press Tab to accept, edit, then send. Personal ChatGPT Pro, desktop app, local and SSH threads. Predictions don't count against your limits during the beta.
→ https://help.openai.com/en/articles/20001601-composer-predictions-in-codex
📦 Gemini 4 Argon lands in Cursor, and Cursor joins The X Subscription — Argon scores 52.8% on CursorBench at default effort and costs $2/$10 per 1M tokens (Oct 13). A day earlier Cursor became part of The X Subscription. Current subscribers can keep their plan or switch.
→ https://x.com/cursor_ai/status/2110087611763368271
→ https://x.com/cursor_ai/status/2109783879490191502
⚙️ Ship — 2 items
📦 Claude platform: OpenTelemetry export in beta; Managed Agents scheduled deployments on AWS — OpenTelemetry export launches in beta — trace Messages API requests and Claude Managed Agents sessions in your observability backend; the Claude SDK emits spans in Python, TypeScript, C#, Go, Java, PHP, and Ruby, and API spans need an OpenTelemetry destination added in the Claude Console. Claude Managed Agents scheduled deployments are also now available on Claude Platform on AWS.
📦 GitHub Copilot: HydraFusion updates and new Max option — October 14, 2026 changelog: what's new in HydraFusion, plus a new HydraFusion Max option introduced for Copilot.
📦 Claude platform: OpenTelemetry export in beta; Managed Agents scheduled deployments on AWS — OpenTelemetry export launches in beta — trace Messages API requests and Claude Managed Agents sessions in your observability backend; the Claude SDK emits spans in Python, TypeScript, C#, Go, Java, PHP, and Ruby, and API spans need an OpenTelemetry destination added in the Claude Console. Claude Managed Agents scheduled deployments are also now available on Claude Platform on AWS.
📦 GitHub Copilot: HydraFusion updates and new Max option — October 14, 2026 changelog: what's new in HydraFusion, plus a new HydraFusion Max option introduced for Copilot.
Claude Platform Docs
Claude Platform release notes
Updates to the Claude Platform, including the Claude API, client SDKs, and the Claude Console.
📚 Read — 4 items
📚 How Third Moment Research runs 10,000 agents for 36+ hours — OpenAI's account of Third Moment Research running 10,000 agents for 36+ hours.
📚 Context Engineering with Deep Agents: How To Remember Without Keeping Everything In Context — LangChain on context engineering with Deep Agents — how to remember without keeping everything in context.
📚 The Most Common Questions About Agent Evals, Answered — LangChain's answers to the most common questions about agent evals.
📚 Amp puts AI agents to work beyond code with OpenAI models — OpenAI on Amp putting AI agents to work beyond code with OpenAI models.
📚 How Third Moment Research runs 10,000 agents for 36+ hours — OpenAI's account of Third Moment Research running 10,000 agents for 36+ hours.
📚 Context Engineering with Deep Agents: How To Remember Without Keeping Everything In Context — LangChain on context engineering with Deep Agents — how to remember without keeping everything in context.
📚 The Most Common Questions About Agent Evals, Answered — LangChain's answers to the most common questions about agent evals.
📚 Amp puts AI agents to work beyond code with OpenAI models — OpenAI on Amp putting AI agents to work beyond code with OpenAI models.
OpenAI
How Third Moment Research runs 10,000 agents for 36+ hours
With GPT-6 Astra and GPT-6.1 Sol, Codex, and Daybreak for cybersecurity, this AI lab builds agents that focus for days and improve with use.
💬 Community — 1 item
💬 OpenAI engineer arrested in bugging of executive conference room — SF Standard reports an OpenAI engineer was arrested for bugging an executive conference room — 646 points and 532 comments on HN, with a post from the OpenAI Newsroom account linked in the thread.
💬 OpenAI engineer arrested in bugging of executive conference room — SF Standard reports an OpenAI engineer was arrested for bugging an executive conference room — 646 points and 532 comments on HN, with a post from the OpenAI Newsroom account linked in the thread.
⚙️ Ship — 3 items
📦 Devin CLI v3000.11.92: /goal command and mid-turn steering — New
📦 Copilot: Agentic autofix for code scanning alerts general availability — Agentic autofix for code scanning alerts is now generally available — the changelog entry covers how it works, how to use it, access, and billing.
📦 Devin: October 14, 2026 — Interrupting Devin keeps the partial reply in chat, browser previews in Slack-started sessions post an "Open preview" link to the thread, and admins can assign a new org-level Review Manager role.
Both Devin updates change mid-turn control the same day: the CLI hands a message typed while Devin is working to the running turn instead of the queue, and the web product keeps the partial reply you already saw when you interrupt.
📦 Devin CLI v3000.11.92: /goal command and mid-turn steering — New
/goal <objective> command keeps Devin working across turns until it reports the goal complete or blocked — a run pauses itself after 50 turns, not available on prompt-based plans. Steering hands mid-run messages to the running turn instead of the queue; new config.json settings include agent.subagent_model and local_tools_bypass_permissions (starts local-tools connections with Bypass Permissions on).📦 Copilot: Agentic autofix for code scanning alerts general availability — Agentic autofix for code scanning alerts is now generally available — the changelog entry covers how it works, how to use it, access, and billing.
📦 Devin: October 14, 2026 — Interrupting Devin keeps the partial reply in chat, browser previews in Slack-started sessions post an "Open preview" link to the thread, and admins can assign a new org-level Review Manager role.
Both Devin updates change mid-turn control the same day: the CLI hands a message typed while Devin is working to the running turn instead of the queue, and the web product keeps the partial reply you already saw when you interrupt.
Devin Docs
Changelog (Stable) - Devin Docs
Release notes for the Devin CLI stable channel: new features, improvements, and fixes in each stable release of the command-line interface.
🚨 Watch — 1 item
🚨 Claude Code Desktop Vulnerability: Preview Pane Data Exfiltration —
🚨 Claude Code Desktop Vulnerability: Preview Pane Data Exfiltration —
noma.security reports a data exfiltration vulnerability in Claude Code Desktop's preview pane; the HN thread — 15 points, no comments — hasn't surfaced any fix or CVE details yet.💬 Community — 1 item
💬 OpenCode 2.0 — 812 points / 350 comments on HN — discussion covers usability, the client/server model, and OpenCode's ability to edit its own config and write plugins.
💬 OpenCode 2.0 — 812 points / 350 comments on HN — discussion covers usability, the client/server model, and OpenCode's ability to edit its own config and write plugins.
📚 Read — 4 items
📚 How Netflix Made AI Coding Agents More Efficient with JetBrains IDE Intelligence — JetBrains case study on how Netflix used IDE intelligence to make AI coding agents more efficient — relevant if your coding agents run inside a JetBrains IDE.
📚 Accelerating the search for antimicrobial peptides with Google Antigravity — DeepMind post on using Google Antigravity to accelerate the search for antimicrobial peptides — the coding harness applied to a scientific research workload.
📚 RuleTrek: Benchmarking Agentic Rule Reasoning in Complex Scenarios — New benchmark paper measuring agentic rule reasoning in complex scenarios — a fresh eval target for agent reasoning.
📚 ActionOPD: Distilling Decisions, Not Tokens — Introduces ActionOPD — a distillation approach that targets decisions rather than tokens.
Both fresh vendor posts are harness-in-action accounts: Netflix using JetBrains IDE intelligence to make coding agents more efficient, and DeepMind using Google Antigravity to accelerate antimicrobial peptide search.
📚 How Netflix Made AI Coding Agents More Efficient with JetBrains IDE Intelligence — JetBrains case study on how Netflix used IDE intelligence to make AI coding agents more efficient — relevant if your coding agents run inside a JetBrains IDE.
📚 Accelerating the search for antimicrobial peptides with Google Antigravity — DeepMind post on using Google Antigravity to accelerate the search for antimicrobial peptides — the coding harness applied to a scientific research workload.
📚 RuleTrek: Benchmarking Agentic Rule Reasoning in Complex Scenarios — New benchmark paper measuring agentic rule reasoning in complex scenarios — a fresh eval target for agent reasoning.
📚 ActionOPD: Distilling Decisions, Not Tokens — Introduces ActionOPD — a distillation approach that targets decisions rather than tokens.
Both fresh vendor posts are harness-in-action accounts: Netflix using JetBrains IDE intelligence to make coding agents more efficient, and DeepMind using Google Antigravity to accelerate antimicrobial peptide search.
The JetBrains Blog
How Netflix Made AI Coding Agents More Efficient with JetBrains IDE Intelligence - The JetBrains Blog
Across every model, agent, and task type tested, JetBrains IDE intelligence made coding agents more efficient overall – typically 20–30% more efficient, and up to about 65% in the best case, depending on the specific model, agent, and task.
💬 Community — 1 item
💬 A look at the math that OpenAI claims computes faster Fourier transforms — A close look at the math behind OpenAI's claimed faster Fourier transforms is drawing heavy HN discussion — 245 points and 168 comments on the thread.
💬 A look at the math that OpenAI claims computes faster Fourier transforms — A close look at the math behind OpenAI's claimed faster Fourier transforms is drawing heavy HN discussion — 245 points and 168 comments on the thread.
⚙️ Ship — 3 items
📦 Codex 0.163.0 — parallel read-only tools, mid-response steering — Independent read-only tools (skill, memory, conversation-history lookups) now run in parallel, and a follow-up sent while Codex is responding steers it immediately — interrupting a turn also stops active Code Mode cells and their nested tool calls. Also:
📦 Kiro: Kimi K3 now available — Moonshot AI's open-weight Kimi K3 lands with experimental support across the Kiro IDE, CLI, Crew, and Web, for Pro, Pro+, Pro Max, and Power customers on Kiro's US geography. Accepts text and images, with a 1M-token context.
📦 Claude: Code review is now generally available — Anthropic moves code review to general availability, per the announcement on Anthropic's own site.
Codex 0.163.0 turns Daybreak on by default for eligible accounts the same day Kiro adds Kimi K3 with experimental support — both of today's harness releases widen model access.
📦 Codex 0.163.0 — parallel read-only tools, mid-response steering — Independent read-only tools (skill, memory, conversation-history lookups) now run in parallel, and a follow-up sent while Codex is responding steers it immediately — interrupting a turn also stops active Code Mode cells and their nested tool calls. Also:
/config preference search, managed background-server restarts from /daemon, a /keymap leader key (default Ctrl+X, voice mute moves to F9), and Daybreak enabled by default for eligible accounts.📦 Kiro: Kimi K3 now available — Moonshot AI's open-weight Kimi K3 lands with experimental support across the Kiro IDE, CLI, Crew, and Web, for Pro, Pro+, Pro Max, and Power customers on Kiro's US geography. Accepts text and images, with a 1M-token context.
📦 Claude: Code review is now generally available — Anthropic moves code review to general availability, per the announcement on Anthropic's own site.
Codex 0.163.0 turns Daybreak on by default for eligible accounts the same day Kiro adds Kimi K3 with experimental support — both of today's harness releases widen model access.
GitHub
Release rust-v0.163.0 · openai/codex
Release 0.163.0
🚨 Watch — 2 items
🚨 Claude Code: plugin hash pin bypass (CVE-2026-86063) — CVE-2026-86063 — a plugin hash pin bypass in Claude Code: the hash pinning applied to plugins can be circumvented. Rated high severity; check the advisory if you rely on hash-pinned plugins.
🚨 Cursor: Elevated errors affecting Grok models — Some Grok-model requests in Cursor fail with a capacity error; a fix was implemented Oct 15, 2026 - 22:58 UTC and the incident is in monitoring. Retrying the request or switching to another model may help.
🚨 Claude Code: plugin hash pin bypass (CVE-2026-86063) — CVE-2026-86063 — a plugin hash pin bypass in Claude Code: the hash pinning applied to plugins can be circumvented. Rated high severity; check the advisory if you rely on hash-pinned plugins.
🚨 Cursor: Elevated errors affecting Grok models — Some Grok-model requests in Cursor fail with a capacity error; a fix was implemented Oct 15, 2026 - 22:58 UTC and the incident is in monitoring. Retrying the request or switching to another model may help.
GitHub
CVE-2026-86063 - GitHub Advisory Database
Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning