Issue 7: Agents Move Into Slack as OpenAI Slows Training
OpenAI paused reinforcement-learning work on near-release models. GitHub Copilot and Vercel Agent moved into Slack. App security gaps surfaced.
Netlify Agent Runners Adds Optional Questions Before Building
Netlify Agent Runners can now ask clarifying questions before building, aiming to cut wasted credits and rebuilds on AI-generated apps.
Replit's paid plans add Free Mode for chat and planning
Replit's Free Mode stops charging credits for chat and planning, powered by GPT-5.6 Luna. It ships on paid Core and Pro plans only, not the free tier.
Replit adds a pen test against a running copy of your app
Replit's Level 3 scan probes a private running copy of your app alongside code checks. Compare findings around exposed pages, logins and permissions.
Issue 6: Connected Agent Workflows Move the Safety Check to the Boundaries
Six vendors joined the Agent Plugins standard as Claude Code connected sessions and platforms tightened boundaries around data, access, and environments.
Base44 Adds Branches, But Your Data Doesn't Follow
Base44 added Branches so you can test app changes without touching the live version, but your real data isn't branched, only the design is.
Issue 5: Claude Code Makes Auto-Approve the Default After a Week of Patching Permission Bypasses
Claude Code makes auto-approve the default on August 14, days after patching two permission bypasses, while Cursor's usage page stops showing dollars.
Lovable Now Gives Every Published App an Automatic Security Page
Lovable adds a trust center to every published app, showing platform security controls automatically. Here's what it covers and what it leaves out.
GitHub will shut down Spark on August 31
GitHub is retiring its Spark app builder and pointing builders to Copilot in VS Code and the CLI instead. Here's the export deadline and what it signals.
Issue 4: Builder Platforms Start Setting Their Own Limits
OpenAI cut GPT-5.6 Luna's price 80%, Vercel added spend budgets to its AI Gateway, and Netlify tightened project privacy defaults this week.
Lovable Apps Can Now Run on Each User's Own Connected Accounts
Lovable apps can use each visitor's Slack, Salesforce, or Google Workspace account, but still need rules to keep one user's data from reaching another.
Issue 3: Coding Agents Gain Reach as Their Boundaries Keep Leaking
Sandbox escapes hit four coding agents as Grok and GitHub expanded automation, while Opus 5 replaced Opus 4.8 at the same API price.
Bolt.new Skills Reuse Your Stack and Project Conventions
Bolt.new Skills package your stack, conventions, and workflows so its agent reuses them automatically. Here's how to install one and what to check first.
v0's Shopify Integration Is Now Open to Everyone
v0's Shopify integration is now open to everyone, syncing real product and inventory data into generated storefronts. Check this before connecting a store.
Issue 2: Tighter Permission Boundaries, Harder Capacity Choices
Claude Code tightened permission checks, Anthropic split Fable 5 access by plan, and builders gained new ways to verify AI-generated work.
Base44 and Wiz Team Up to Catch 'Shadow AI' Before It Ships
Base44 now scans AI-built apps with Wiz before they ship, targeting shadow AI, apps built inside a company without IT or security ever knowing they exist.
Your Lovable App Can Now Live Inside ChatGPT and Claude
Lovable apps can now run inside ChatGPT and Claude through MCP, so your users act on your app without leaving their AI chat. Here's how to turn it on.
Issue 1: Coding Agents Face a Trust Reckoning as GPT-5.6 Lands
GhostApproval exposed six coding agents' approval flaws. GPT-5.6 launched in three tiers, while OpenAI withdrew a benchmark recommendation.