Tooling9d ago
Microsoft Research and UC Berkeley open-source TokenEconomizer, a plugin that cuts Claude Code and Codex costs by 18.4–30.9% on SWE-Bench without changing the agent
Microsoft Research, Microsoft Security and UC Berkeley open-sourced TokenEconomizer on GitHub (Apache 2.0, v0.1.0 released October 26), a plugin for Claude Code, Codex, GitHub Copilot CLI and Pi, with experimental opencode support. It learns from earlier sessions in the same repository: micro-skills remember repo facts, tool pruning drops tool definitions that go unused, and a loop guard nudges an agent that is stuck. The paper reports 18.4–30.9% lower mean cost across five agent and model combinations on 277 SWE-Bench tasks (paper figures).
Tooling4d ago
xAI will add an invisible watermark to Grok API text by default from Nov 7, covering grok-4.7 and six other models, with per-model admin opt-out
On Oct 31, xAI (signed as SpaceXSI in its docs) added an "Output Watermarking" page to its API docs: starting November 7, 2026, text generated by grok-4.7, grok-4.6, grok-4.5, grok-4.3, and the reasoning, non-reasoning, and multi-agent versions of grok-4.20 will carry an invisible watermark by default, to comply with the EU AI Act. It covers ordinary text, structured outputs, and tool call arguments on both the Responses and Chat Completions APIs, and works by slightly shaping token choice without adding any characters. Developers can read the x-watermark response header to check; team admins can opt out per model in the Console, but must confirm a legal exception applies, and some models may be locked on.
Tooling6d ago
Symantec finds a grey-market relay that installs the real Codex and Claude Code CLIs, then turns off sandboxing and routes every request through its own servers
On Oct 29 Symantec's Threat Hunter Team disclosed an unauthorized AI relay seen at about a dozen organizations since early 2026, mostly in mainland China. Users install the genuine Codex or Claude Code CLI via npm, then run a one-line script from the reseller that rewrites ~/.codex/config.toml or ~/.claude/settings.json, points base_url at relay domains, swaps in relay-issued keys, sets the sandbox to danger-full-access and disables telemetry. Symantec says this is not a CLI vulnerability and it has seen no abuse so far.
Discussion & Comments
0Sign in to join the discussion
Connect with AI developers to exchange benchmark insights.