Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-08-16 · high
Three vendors replaced per-call approval prompts with policy layers inside two weeks, moving safety enforcement to config instead of the terminal.
Why now: Covered in the August 16 briefing, after GitHub became the third vendor to ship the same shift on August 10.
Claude Code made auto mode the default for new Pro, Max, and Team sessions on August 14. If you run Claude Code, Codex CLI, or Copilot CLI, your safety configuration just moved from the prompt to the policy layer. Deny-rules, sandbox scope, and credential scoping now do the job, set up before the agent starts, not decided mid-task.
OpenAI shipped an --approve-for-me flag in Codex CLI 0.147.0 on August 7, then hotfixed 0.146.1 with what it called "safer automatic-review defaults for cyber-capable models." GitHub's Copilot CLI added --plan with --mode autopilot for headless runs on August 10, per Claude Code Docs.
I stopped reading every permission prompt in Claude Code months ago in my own projects. Nobody reads the ninth prompt in an hour. Auto mode as the default just admits what was already true in practice.
OpenAI's mid-cycle hotfix is the part worth watching. Shipping an opt-out flag, then tightening defaults for cyber-capable models, suggests the first version missed something it needed to catch. The Claude Code Docs entry doesn't say what. If you run Codex CLI, check which version you're actually on before you trust the defaults.
Each link below shares sources, entities, or timing with this story.
Three things happened this month that only make sense together. Agent Plugins 1.0 shipped co-signed by six competitors: AWS, Anysphere, Microsoft, OpenAI, Vercel and Google (GitHub Changelog). It makes skills-plus-MCP bundles portable across clients. OpenAI's August 11 Codex c...
A spec is a press release until someone who didn't write it implements it. GitHub made Agent Plugins 1.0 generally available on August 12 across VS Code, Copilot CLI, the Copilot SDK, and the Copilot app on all plans. The spec, published August 6, was co-authored by AWS, Anysp...
The sunset notice is short and it doesn't hedge. Code freeze July 29. Repository archived August 10. Core team gone August 31. npm and Docker packages deprecated. Flowise has 55,186 stars and 24,850 forks under Apache-2.0, and the team wrote its own cause of death: developers...
Triple-stream retrieval (BM25 keyword, vector embeddings, knowledge-graph traversal) fused via Reciprocal Rank Fusion on the iii engine, with SQLite for state and an in-memory vector index, no external database. The economic claim: ~170K tokens/year (~$10) versus ~650K tokens...
Two days from now, on August 14, auto mode becomes the default permission mode for new Pro, Max, and Team sessions (Claude Code Docs, Week 32). Not opt-in. Default. Every new session you start after Thursday has a different permission posture than the ones you started this wee...
xAI launched Grok Build on May 14. With that, every major AI lab now ships a coding agent that lives in your terminal. The competition isn't "can we build one" anymore. That question is settled. The lineup: Anthropic has Claude Code. OpenAI has Codex CLI. Google has Gemini CLI...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.