Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-07-13 · source-backed
The July 10 release blocks tampering with session transcript files and makes background-task notifications state explicitly that no human input occurred, "preventing fabricated in-transcript approvals from being acted on" (Releasebot). If you run headless agents, this is a direct guardrail against injection that forges a human "yes." Separately, v2.1.207 fixed a real bug where non-interactive runs permanently recorded managed-settings consent as granted without ever showing the dialog. Upgrade if you run claude -p or the SDK in cron or a pipeline. Earlier builds consented on your behalf.
Each link below shares sources, entities, or timing with this story.
The same man whose framework a model regression destroyed also published the most aggressive prediction of the week, and the tension between those two facts is the whole argument. "The Shape of Things to Come, Part 1: The Continuous Thunderdome" argues traditional CI/CD collap...
Two researchers in my set surfaced this independently, which is usually a sign it matters. Claude Code 2.1.166, first seen June 6, introduces a fallback-models setting: configure up to three models tried in order when the primary is overloaded or unavailable. It also adds glob...
Anthropic shipped cross-session messaging for Claude Code on August 7, macOS and Linux, version 2.1.224 or higher. Two new tools: ListAgents discovers other active sessions on your machine, SendMessage delivers text to one by name. Messages between sessions on the same machine...
It patches leaks that only bite over time: MCP stdio server stderr accumulating unbounded, LSP documents staying open indefinitely, and pasted images retained in the agent view (Releasebot). On top of that, background agents now commit, push, and open a draft PR on completion...
The v2.1.205 release turned /doctor into a full setup audit that flags unused skills, MCP, and plugins against their context cost, deduplicates local vs checked-in CLAUDE.md, and flags slow hooks (Releasebot). A typical 5-server, 58-tool MCP setup burns ~55k tokens before your...
Three companies shipped standalone agent platforms in the same week, and none of them are IDE plugins. Google launched Antigravity 2.0 at I/O with a desktop app, a Go-based CLI, and an SDK for self-hosted agent deployments. No IDE. It's conversations, projects, and multi-agent...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.