AI Coding Live News

A
Anthropic (Claude Help Center)support.claude.com·
👀8
🔥82

Anthropic extends Claude text watermarking to older models including Mythos 5, Opus 4.7/4.6 and Sonnet 4.6, reportedly from November 3

Anthropics help center article "How Claude marks AI-generated content" (updated Oct 28) now lists older models released before Aug 2, 2026, including Claude Mythos 5, Opus 4.7, Opus 4.6, Opus 4.5, Sonnet 4.6 and Sonnet 4.5, as carrying text watermarks on first-party surfaces, and says Anthropic is adding watermarks to these models to meet EU AI Act Article 50 transparency duties. According to a customer email screenshot reported by outlets such as MACCUS, the legacy rollout starts Nov 3, with Amazon Bedrock possibly a few days later; Anthropics public pages do not state that date. The watermark follows Google DeepMinds SynthID-Text approach, adds no hidden characters or extra tokens, and detection is in private preview only for regulators, media, researchers and similarly obligated organizations, which has drawn complaints on X that users cannot check their own text.

Anthropic extends Claude text watermarking to older models including Mythos 5, Opus 4.7/4.6 and Sonnet 4.6, reportedly from November 3

Key Takeaways

  • Scope: in the official support table, older models such as Mythos 5, Opus 4.7/4.6/4.5 and Sonnet 4.6/4.5 are ticked only for first-party text watermarks; cloud-partner watermarks and C2PA file credentials remain limited to models launched after Aug 2 (see the help center)
  • Timing: a customer email reported by media puts the start at Nov 3, with Bedrock possibly a few days later (MACCUS); Anthropics public pages give no date
  • Cost and quality: Anthropic says the watermark adds no characters, no extra tokens and no extra cost, using a variant of SynthID-Text (see Anthropics explainer)
  • Detection: the detection API is in private preview for regulators, law enforcement, media, fact-checkers, researchers and obligated enterprises; ordinary users cannot check text yet
  • Reach: watermarks apply worldwide across Claude, the Claude Platform API, Claude Code, Cowork and Tag, because Anthropic says it has no durable way to scope them by region yet
Read full story

Wiz "Black October" report: at least nine AI developer platforms breached in October, with stolen API keys feeding an LLMjacking resale market

Cloud security firm Wiz published research on October 30 saying at least nine AI developer platforms disclosed incidents this month: Fireworks AI, Andromeda, Zeabur, Lightning AI, OpenCode, Railway, Warp, CommandCode and Northflank. Attackers hunted stored environment variables, especially keys for paid AI models; Wiz traced two stolen enterprise keys to roughly 800,000 and 1.7 million Amazon Bedrock calls, which it estimates likely ran over $100k at list price in those two cases alone.

Wiz "Black October" report: at least nine AI developer platforms breached in October, with stolen API keys feeding an LLMjacking resale market

Key Takeaways

  • Scale: between October 6 and 30, at least nine AI developer platforms disclosed incidents, and Zeabur is shutting down as a result (Wiz blog)
  • Methods: Fireworks, OpenCode and Warp reported signs of an "agent swarm" attack, and OpenCode and CommandCode attributed theirs to "distillation" attempts; the common thread is hunting stored environment variables that grant AI access
  • Case A: one stolen key drove about 800k Bedrock calls over 30 hours, about 90% successful, with Opus models making up three quarters (Wiz figures)
  • Case B: a single address made about 1.7 million calls in 13 hours, over a million successful; the two cases together likely exceeded $100k at list price
  • Resale chain: Wiz identified two sites selling discounted frontier-model access and saw both test the stolen keys
Read full story
O
OpenAI@AICoder·
👀29
🔥80

OpenAI Codex CLI 0.166.0: keyboard transcript selection, GPT-6.1 Terra in Vertex AI and Bedrock catalogs, codex doctor network checks

OpenAI published the stable Codex CLI release rust-v0.166.0 on GitHub at 19:47 UTC on Oct 29. It adds keyboard-driven transcript selection by word, line and page with built-in search, adds GPT-6.1 Terra to the bundled, Vertex AI and Amazon Bedrock model catalogs, introduces codex queue --resume and codex doctor --network-only, and shows clearer safety-block explanations with selectable safer follow-up prompts in the TUI.

Key Takeaways

  • Model catalogs: GPT-6.1 Terra added to the bundled, Vertex AI and Amazon Bedrock catalogs (#57293)
  • Transcript: keyboard selection by word, line and page, integrated search and configurable shortcuts (#57221 to #57224)
  • New commands: codex queue --resume resumes unloaded threads after queueing a message; codex doctor --network-only checks config, connectivity and WebSocket
  • Safety UX: clearer explanations when a request is blocked, plus selectable safer follow-up prompts (#57363, #57365)
  • Fixes: approval and permission settings survive resume and fork, and reasoning-token accounting is preserved to avoid premature compaction
Read full story
A
Anthropic@AICoder·
👀84
🔥80

Claude Code 2.1.314 adds a block on writes outside working directories, IdP group routing for the apps gateway, and idle compaction in VS Code and Desktop

Anthropic published Claude Code v2.1.314 on GitHub at 01:06 UTC on Oct 30. The official CHANGELOG lists 119 entries, more than half of them fixes. The new features lean enterprise: permissions.blockWritesOutsideWorkingDirectories makes Write, Edit and NotebookEdit refuse paths outside the working directories in every permission mode; Claude apps gateway upstreams can be limited to IdP groups, and Bedrock upstreams can log which guardrail fired; idle compaction now also runs in VS Code and the Code tab of Claude Desktop. It also fixes sessions failing repeatedly when an admin caps effort, and claude -p exiting 0 with no output when startup failed.

Key Takeaways

  • Size: the official v2.1.314 CHANGELOG has 119 entries, more than half of them fixes; released at 01:06 UTC on Oct 30
  • Safety: the new permissions.blockWritesOutsideWorkingDirectories setting stops Write, Edit and NotebookEdit from writing outside the working directories in every permission mode
  • Enterprise gateway: upstreams take an optional groups list so only developers in those IdP groups are routed there, failover included; Bedrock upstreams gain guardrail_trace
  • Experience: idle compaction now runs in VS Code and the Claude Desktop Code tab, summarizing idle conversations above 200K tokens
  • Fixes: when an admin caps effort, Claude Code lowers it and retries; a failed claude -p startup now prints the error and exits 1
Read full story
Linked Models & Agents:
ADSponsored

OpenAI Daybreak Red (GPT-5.6 Cyber) arrives on Amazon Bedrock in AWS GovCloud (US-East) for vetted defenders, at $16.875 input and $101.25 output per 1M tokens

On Oct 30, AWS announced that Daybreak Red (GPT-5.6 Cyber, model ID openai.gpt-5.6-cyber), the OpenAI security model built for vulnerability research, is now on Amazon Bedrock in AWS GovCloud (US-East), after previously being offered only in US East (Ohio). Access still requires passing OpenAI Daybreak eligibility. GovCloud short-context pricing is $16.875 input and $101.25 output per 1M tokens, about 23% above Ohio at $13.75 and $82.50.

Key Takeaways

  • Regions: Daybreak Red can now be called In-Region in us-east-2 (Ohio) and us-gov-east-1 (GovCloud US-East); Geo and Global cross-Region inference are not supported (AWS announcement)
  • Eligibility: customers must first enroll in OpenAI Daybreak / Trusted Access for Cyber, then have their AWS account team enable access
  • Pricing: GovCloud short context (272K input tokens or fewer) is $16.875 input, $21.09375 for 30-minute cache writes, $1.6875 cache reads and $101.25 output per 1M tokens
  • Data: AWS says inference data is not used for training and Daybreak Red data does not need to be shared with OpenAI; it runs on an inference engine with zero-operator access enforced at the chip
  • API: served through the bedrock-mantle endpoint with OpenAI Responses and Chat Completions, and a 1,050,000-token context window
Read full story
A
Anthropicgithub.com·
👀55
🔥82

Claude Code 2.1.304 adds guided /auto-mode-setup and warns Pro/Max users before resuming an inactive conversation would eat into the 5-hour usage limit

Claude Code v2.1.304 (Oct 19 UTC) adds /auto-mode-setup, a guided setup that reads your project and recent sessions to teach auto mode about your environment, now also on Bedrock, Vertex, Foundry, Claude apps gateway and telemetry-disabled sessions. It adds a read-only /claude-api managed-agents-secure check against Anthropic's security guide, warns Pro/Max users when resuming an inactive conversation would use a noticeable share of the 5-hour limit, and fixes 40+ issues including claude --worktree deleting a worktree and branch without asking, which could lose commits.

Key Takeaways

  • New /auto-mode-setup reads your project and recent sessions to teach auto mode your environment, now on Bedrock, Vertex, Foundry, Claude apps gateway and telemetry-disabled sessions
  • New read-only /claude-api managed-agents-secure compares a Managed Agents agent's settings with Anthropic's published security guide
  • Pro/Max plans get a warning when resuming an inactive conversation would use a noticeable share of the 5-hour usage limit
  • Mods gain decider: "person" and e.isReadOnly in tool.check, so only a human permission dialog can approve certain calls
  • 40+ fixes, incl. claude --worktree removing the worktree and branch without asking (could lose commits) and CLAUDE_CODE_AUTO_COMPACT_WINDOW=200k silently becoming 100K
Read full story

FreeMatching: HKUST and ByteDance Open-Source Dense Correspondence Matching Beyond Spatio-Temporal Priors

Dense correspondence matching serves as the bedrock for optical flow, 3D stereo reconstruction, and object tracking. For decades, classical matching algorithms have fundamentally relied on rigid spatio-temporal priors: smooth motion continuity and rigid geometry. However, these foundational assumptions collapse under modern AI image editing and reference-guided generation (IEG), where visual identity is preserved while physical and geometric continuity is drastically severed (such as radical pose warps, stylistic shifts, or compositional recontextualization). Researchers from HKUST and ByteDance introduce FreeMatching (arXiv:2610.12421, code: github.com/luping-liu/FreeMatching), a generalizable framework for dense correspondence matching beyond spatio-temporal priors. FreeMatching fuses generative foundation features (from diffusion backbones) with high-level semantic representations (from vision foundation models), trained against heterogeneous supervision spanning classical benchmarks, tracked video sequences, and synthetic 3D scenes. An unsupervised teacher-guided iterative refinement loop further sharpens dense correspondences across challenging generated image pairs without requiring dense manual annotations. FreeMatching achieves dramatic leaps in correspondence precision across complex AI-edited image pairs while retaining competitive accuracy on classical optical flow tasks, and serves as an auditable quantitative metric for evaluating visual identity preservation that closely aligns with human judgment.

Key Takeaways

  • HKUST and ByteDance open-source FreeMatching, breaking free from traditional spatio-temporal priors in dense correspondence
  • Cuts end-point error by 42.6% and raises PCK by 31.8 percentage points across aggressive AI image edits and non-rigid transformations
  • Establishes a quantitative identity preservation metric highly correlated with human judgment (r = 0.88), fully available on GitHub
Read full story
Linked Models & Agents:

Anthropic brings in-country Claude inference to India: Opus 5, Sonnet 5 and Haiku 4.5 via Amazon Bedrock with data kept in India

On 2026-10-05 Anthropic announced Claude Opus 5, Sonnet 5 and Haiku 4.5 are live with in-country inference in India via an Amazon Bedrock India geographic cross-Region profile that routes only between Mumbai (ap-south-1) and Hyderabad (ap-south-2), delivering its August data-residency commitment for regulated Indian customers.

Key Takeaways

  • Models: Claude Opus 5, Sonnet 5, Haiku 4.5 via the Bedrock India geographic inference profile
  • Routing only between ap-south-1 (Mumbai) and ap-south-2 (Hyderabad); no data stored in destination Region; Bedrock zero data retention by default
  • Model IDs use the in. prefix (e.g. in.anthropic.claude-sonnet-5); Messages API, InvokeModel, Converse, Guardrails and prompt routing supported
  • Same AWS batch (Sep 29): in-region Opus 5/Sonnet 5 in Seoul and Sonnet 5 in Singapore
  • Adoption per Economic Times: TCS rolling Claude to 50,000 staff; NPCI building its AiNxt agent platform on Claude
Read full story

Claude Code 2.1.287: Mods in-process extensions; built-in You should know side agent; 1M context default on gateways

Anthropic shipped Claude Code 2.1.287 on 2026-10-01 (npm @anthropic-ai/[email protected]): Claude Mods let plugins run in-process JS/TS hooks that rewrite tool calls and UI; opt-in built-in You should know side agent; MCP URL elicitation; Opus 4.7+/Fable default to 1M context on Bedrock/Vertex/Foundry/apps gateway. Agent SDK TS 0.3.287 parity.

Claude Code 2.1.287: Mods in-process extensions; built-in You should know side agent; 1M context default on gateways

Key Takeaways

  • Release v2.1.287; npm 2.1.287; GitHub ~2026-10-01T18:00:22Z
  • Mods: in-process hooks for UI + tool.call rewrite; ≥2.1.287; docs https://code.claude.com/docs/en/plugins/mods/overview
  • You should know: /plugin enable cc-plugin-you-should-know@builtin (first-party + telemetry); off by default
  • 1M context default for Opus 4.7+/Fable on Bedrock/Vertex/Foundry/apps gateway; disable via CLAUDE_CODE_DISABLE_1M_CONTEXT=1
  • Agent SDK TS 0.3.287; MCP URL elicitation / bareElicitationCapability
Read full story

LiteLLM 1.103.2: forward Claude Code safeguards; attribute CLI session spend; restore pass-through pre-config wins

BerriAI shipped LiteLLM v1.103.2 on 2026-10-01 (PyPI ~06:20Z; 17 commits vs 1.103.1): forward Claude Code safeguards / dangerous-tool-use beta unchanged to Anthropic, Bedrock, Vertex, and Azure AI Foundry so auto mode works behind the proxy; attribute CLI session spend to a per-user cli-session alias for daily activity BI; restore pre-config-wins for pass-through endpoints.

LiteLLM 1.103.2: forward Claude Code safeguards; attribute CLI session spend; restore pass-through pre-config wins

Key Takeaways

  • Release v1.103.2 at 2026-10-01T06:37:31Z; 17 commits vs v1.103.1
  • Forward Claude Code safeguards + dangerous-tool-use beta to Anthropic/Bedrock/Vertex/Azure Foundry so auto mode returns safeguard_results
  • CLI session spend attributed to per-user cli-session alias for daily activity BI (#40541/#43642/#43656)
  • Restore pass-through pre-config-wins (#43962); verify Docker with cosign
  • pip install 'litellm==1.103.2'; https://docs.litellm.ai/docs/ ; https://pypi.org/project/litellm/1.103.2/
Read full story
ADSponsored

Cline 4.1.22: GPT-6.1 Sol becomes default across gateways; Anthropic server-side refusal fallback; Bee & Pareto providers

Cline shipped v4.1.22 on 2026-09-30 (59 commits ahead of v4.1.21): refreshed catalog makes GPT-6.1 Sol the default for OpenAI, OpenRouter, GitHub Copilot, Requesty and more when unpinned; direct Anthropic uses server-side refusal fallback with OpenRouter/Cline failover; adds Bee (HEOSSI) and Pareto Inference (PARETO_API_KEY); fixes cancel races, double-counted reasoning tokens, and Bedrock inference-profile routing. SDK @cline/[email protected] ships the same day.

Cline 4.1.22: GPT-6.1 Sol becomes default across gateways; Anthropic server-side refusal fallback; Bee & Pareto providers

Key Takeaways

  • Release v4.1.22; 59 commits ahead of v4.1.21
  • Unpinned defaults: GPT-6.1 Sol on OpenAI/OpenRouter/Copilot/Requesty and more; Vercel AI Gateway→Ling 3.1 Flash; CrossModel/Ofox→Sonnet 5.5
  • Anthropic server-side refusal fallback + OpenRouter/Cline allow_fallovers; content-filter finish reason instead of empty response
  • New providers: Bee (HEOSSI), Pareto Inference (PARETO_API_KEY)
  • SDK @cline/[email protected]; docs https://docs.cline.bot/
Read full story

OpenAI Codex 0.159.1: GPT-6.1 Sol becomes default; Bedrock Mantle & Runtime catalogs updated

OpenAI Codex CLI shipped rust-v0.159.1 on 2026-09-29 (npm @openai/[email protected]): GPT-6.1 Sol is now the default in the bundled catalog and Amazon Bedrock Mantle/Runtime catalogs (API id gpt-6.1-sol). Official pricing $2/$10 per 1M tokens (cached input $0.10), 1.05M context, 128k max output. ~3 commits / 29 files vs v0.159.0.

OpenAI Codex 0.159.1: GPT-6.1 Sol becomes default; Bedrock Mantle & Runtime catalogs updated

Key Takeaways

Read full story

Cline SDK 0.0.87: Windows proxy-safe hub startup; reasoning tokens not double-counted; Bedrock GPT-6 via inference profiles

Cline shipped SDK v0.0.87 on 2026-09-29: Windows hub startup works when HTTP(S)_PROXY is set—ensureLoopbackProxyBypass() adds loopback to NO_PROXY so Bun fetch no longer routes health probes through Clash/v2ray/corp proxies; normalizeUsage() excludes reasoning from outputTokens to stop double-counting; Gateway models keep per-model apiProtocol; bare GPT-6/GPT-5.6 on Bedrock use inference profiles (@ai-sdk/amazon-bedrock ^5.0.96); catalog 209→211 providers, 6,386→6,447 models; recommended list adds Claude Sonnet/Opus 5.5.

Cline SDK 0.0.87: Windows proxy-safe hub startup; reasoning tokens not double-counted; Bedrock GPT-6 via inference profiles

Key Takeaways

  • Release sdk/v0.0.87 vs v0.0.86
  • Windows proxy: ensureLoopbackProxyBypass() stops hub probes from going through HTTP(S)_PROXY
  • outputTokens excludes reasoning subset (cost still on full output); no double-count in session totals
  • Bedrock GPT-6/GPT-5.6 via inference profiles; @ai-sdk/amazon-bedrock ^5.0.96
  • Catalog 209→211 providers, 6,386→6,447 models; Sonnet/Opus 5.5 on recommended list
Read full story

CrewAI 1.15.23: native Gemini 3.8 Flash; AMP eval of the last traced run

CrewAI 1.15.23 (2026-09-28) adds native Gemini 3.8 Flash support; crewai eval can score the last AMP-traced run (not just print it); task spans capture declared output format/results; LLM retries throttled providers and Bedrock acall falls back to sync. Tightens the observe→evaluate loop for multi-agent crews.

CrewAI 1.15.23: native Gemini 3.8 Flash; AMP eval of the last traced run

Key Takeaways

  • Release 1.15.23 / PyPI
  • Native Gemini 3.8 Flash via Google Gen AI SDK (LLM docs)
  • crewai eval scores the last AMP-traced run; TUI Evaluate button + graded areas
  • Task spans record declared output format and results
  • Retries on throttled providers; Bedrock acall→sync fallback; SQLite/S3/Selenium cleanup fixes
Read full story

LangChain 1.4.3: Bedrock Mantle in init_chat_model, GPT-6 structured-output recognition, create_agent repairs invalid tool calls

LangChain shipped langchain==1.4.3 on 2026-09-28 (on PyPI): init_chat_model supports AWS Bedrock Mantle chat models via langchain-aws Mantle interfaces; recognizes GPT-6 structured output without profiles; create_agent emits error ToolMessages for invalid tool calls missing results on replay; sanitizes cache settings for fallback models. Key PRs: #40837, #40844, #40530, #40886 vs 1.4.2.

LangChain 1.4.3: Bedrock Mantle in init_chat_model, GPT-6 structured-output recognition, create_agent repairs invalid tool calls

Key Takeaways

  • langchain==1.4.3 on PyPI (2026-09-28)
  • init_chat_model + Bedrock Mantle (#40837) via langchain-aws Mantle chat wrappers
  • GPT-6 structured output recognized without profiles (#40844)
  • create_agent repairs invalid tool calls with error ToolMessages (#40530); sanitize fallback cache settings (#40886)
Read full story
Linked Models & Agents: