Fetching from the wire…
Public story · 2026-07-16 · high
Trailing system context was getting billed as fresh input tokens on enterprise gateways, with no error or warning to flag the extra cost.
Why now: The fix landed in the 2026-07-16 changelog alongside two related regression fixes from the same release cycle.
Claude Code 2.1.211 fixes a prompt-caching regression that hit Bedrock, Vertex, Mantle, and Foundry. Trailing system context was getting billed as fresh input tokens instead of hitting cache, per the v2.1.211 changelog.
That's the main cost lever in long agent sessions. Teams put stable content first in a system prompt and volatile content last specifically so the stable part hits cache. If the trailing context silently stopped caching on these gateways, the cost model broke with no error and no warning.
The changelog doesn't say how long the regression window lasted. It also doesn't list which prior versions were affected.
Anyone running agents on these gateways needs to check their upgrade history against their gateway's billing console. If your expected cache-hit rate was 80% and your spend doesn't reflect that, this is likely why.
Two other fixes shipped in the same cycle. Version 2.1.210 fixed isolation: 'worktree' subagents running git-mutating commands against the main repo instead of their isolated worktree. That defeats the entire purpose of the isolation flag. The same version fixed killed background sessions leaving a permanent git worktree lock behind.
Version 2.1.211 also fixed auto mode overriding a PreToolUse hook's ask decision for unsandboxed Bash. Permission hooks that looked like they were working were sometimes getting bypassed.
All three bugs share a pattern. None of them crashed or threw an error. Each just quietly stopped enforcing a guarantee it was supposed to enforce. Pull your billing for the affected period. Re-test your permission hooks now that ask actually floors the decision. Run a git-mutating command inside a worktree-isolated subagent and check where it lands.
Each link below shares sources, entities, or timing with this story.
v2.1.211 stops Bedrock, Vertex, Mantle, and Foundry from rebilling cached system context as full-price input tokens.
Cross-session messaging landed in v2.1.224+ (macOS and Linux only, not on Bedrock/Vertex/Foundry) and hit the HN front page at 160 points. Each session binds an inbox socket restricted to your OS user, exported to hooks as CLAUDE_CODE_MESSAGING_SOCKET and shown as Peer address...
Two days from now, on August 14, auto mode becomes the default permission mode for new Pro, Max, and Team sessions (Claude Code Docs, Week 32). Not opt-in. Default. Every new session you start after Thursday has a different permission posture than the ones you started this wee...
Go rotate a key. I'll wait. Claude Code 2.1.246, released August 25, lists this in its changelog: a fix for "telemetry and metrics requests to Anthropic carrying the API key configured for a third-party gateway (ANTHROPIC_BASE_URL); a credential is now only sent to its own hos...
Week 32 removes the 200-subagent limit, so long orchestration sessions no longer refuse new subagents mid-run, though concurrency and the five-level depth limit still apply (Claude Code Docs). Worktree isolation now blocks Bash commands and git redirects reaching back into the...
This one rearranged my week. An essay published August 4 walks through Databricks' independent benchmark of coding harnesses against its own multi-million-line codebase. Pi, a harness with four built-in tools and a system prompt under 1,000 tokens, paired with Opus 4.8 at xhig...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.