Claude Code Reads AGENTS.md by Default When CLAUDE.md Is Absent
Claude Code defaults to CLAUDE.md before AGENTS.md, but /config can select both. Check the active setting before sharing instructions across tools.
Issue 11: A Photo-Decoding Bug Breached OpenAI, With an Assist From Claude
Hacktron used Claude to reach OpenAI through a libheif flaw, while Anthropic merged Cowork and chat and GitHub rewrote Copilot in Rust.
Claude Code Projects adds a coordinator and parallel threads that share usage limits
Parallel threads in Claude Code Projects draw from the same usage allowance, so a project can hit its limit faster than one chat.
Grok Build remembers project conventions by saving notes between sessions
Grok Build saves project conventions and decisions in Markdown files between sessions. Review the notes for accuracy and sensitive details.
Copilot Auto tiers steer model selection but do not cap spending
Copilot's auto mode now offers cost and quality tiers. They steer model choice, but charges still follow the selected model.
Claude Code’s session-link trailer has a separate attribution setting
Claude Code splits commit attribution into two settings. Turning off the signature line alone won't stop it from linking commits to a private session.
GitHub Copilot now resolves review comments when it judges a fix complete
Copilot now resolves review comments after fixes and runs tests on its findings. Review both behaviors before relying on the result.
Issue 10: Agents Gain Autonomy Faster Than Controls Improve
Cursor expanded agent autonomy, a public report and Anthropic tests exposed sandbox gaps, and OpenAI advised lighter Astra instructions.
Cursor Projects coordinates agents across schedules, Slack, and pull requests
Cursor Projects can act on Slack, schedules or pull requests. Check shared context and limit repository permissions before automating code changes.
Shopify says coding agents changed the cost of rebuilding its mobile apps natively
Shopify is moving off React Native back to separate Swift and Kotlin codebases, saying AI coding agents now handle enough duplicate work to justify it.
Codex Adds Separate Git Checkouts for Parallel Sessions
Codex’s experimental worktree support gives sessions separate checkouts, reducing file collisions while leaving integration work to the builder.
Researchers report OpenAI agents using a public wiki to bypass read-only restrictions
Researchers report OpenAI agents using an old wiki to communicate for weeks. Claims about the company's internal handling remain disputed.
Issue 9: Astra Costs More as Agent Trust Gets Harder
GPT-6 Astra arrived at premium pricing, two agent trust gaps surfaced, and Claude Code's weekly allowance will soon shrink.
Claude Code Stores MCP OAuth Tokens in Plaintext on Linux and Windows
Claude Code's docs say MCP login tokens are stored securely. On Linux and Windows that means a permissions-locked plaintext file, not encryption.
GitSpawn Report Finds Pre-Approval Code Execution in Copied Project Folders
Manifold found coding agents executing commands from copied Git metadata before approval. Its September 1 report lists fixes and remaining triggers.
OpenAI Proposes a November 12 Cutoff for Cursor's Direct Model Access
OpenAI plans to cut off Cursor's direct model access after SpaceX's acquisition. Check affected workflows before the proposed November 12 cutoff.
Claude Code's Weekly Limits Are Becoming Permanent on September 14. They're Also Getting Smaller.
Anthropic is locking in a 25% permanent boost to Claude Code's weekly limits on September 14, replacing today's 50% boost, a real 17% cut.
Copilot's Unified Policy Extends Web Chat Retention and Controls Web and Mobile Access
GitHub's unified Copilot policy extends web chat retention to account lifetime. Opting out removes Copilot access on github.com and Mobile.
Issue 8: Claude Gains Browser Autonomy as Copilot Keeps Chat History
Claude gained browser autonomy, GitHub made Copilot chat history persistent, and v0 moved AI usage onto builders’ Vercel accounts.
Researcher Demonstrates a Multi-Step Attack Against Claude Code Auto Mode
A researcher chained ordinary Claude Code steps into real code execution against Auto Mode. Anthropic closed the report as informative, not a bug.
OpenAI Is Bringing Back Codex's 5-Hour Cap for Plus Users. Pro Plans Stay Exempt.
OpenAI is reinstating a 5-hour usage cap on Codex and ChatGPT Work for Plus subscribers, reversing a six-week suspension. Pro plans are exempt for now.
GitHub Copilot Can Start Coding Sessions From Slack Conversations
Copilot's Slack preview requires Business or Enterprise setup and a linked GitHub account. Check repository permissions and merge approvals.
Issue 7: Agents Move Into Slack as OpenAI Slows Training
OpenAI paused reinforcement-learning work on near-release models. GitHub Copilot and Vercel Agent moved into Slack. App security gaps surfaced.
Claude Code Resumes After Usage Limits Reset, With an Option to Turn It Off
Claude Code 2.1.234 resumes sessions after usage limits reset. Review auto-continue and permission settings before leaving a session unattended.