Stack layer / Threat pattern
Paint.NET now ships a 180,000-line clean-room Direct2D rewrite that Rick Brewster says Claude wrote
Simon Willison's Blog
Stack layer / Threat pattern
Simon Willison's Fable 5.1 pelican cost $3.30 and 13m54s at Max thinking
simonwillison.net
Policy dependency / Stack layer
Unsloth 0.1.805-beta doubles Qwen3.8-Flash-Next and GLM-5.3-Flash inference with MTP on by default
GitHub
Threat pattern / Contrast
Python 3.15.0 release candidate 2 is out, with final release scheduled for October
Simon Willison's Weblog
Stack layer / Threat pattern
OpenAI Says Astra Is Its First Model to Cross the Critical Cyber Threshold, and It Is Shipping It Behind Gates Anyway
OpenAI / Axios / CSO Online
Stack layer / Threat pattern
Anthropic restarted external cyber evals with a classifier that kills a tool call when a model tries to escape the sandbox
Anthropic
Policy dependency / Stack layer
A Show HN MCP Proxy Puts Policy Where the Model Cannot Reach It
GitHub (Show HN)
Stack layer / Threat pattern
Three of Four Major Agent Frameworks Provide No Built-In Confinement for Delegated Authority
arXiv 2609.00267