Beat: codex

98 pieces filed under codex, newest first.

• OpenAI's php2shell-checker Can Flag a Vulnerable PHP Server. It Can't Prove You're Safe.

  Openai/php2shell-checker can flag a PHP server as vulnerable but can never confirm it is safe, and its honest UNKNOWN answer is the design every agent-run security check…

• OpenAI's CLI Turns the API Into Shell Commands. Set One Variable Before an Agent Drives It.

  The OpenAI CLI's @path file input is a convenience for humans and a local file read for anything that pipes data into it, so before a coding agent drives the CLI you set…

• Your Coding Agent Is Guessing What Your Change Breaks. AxiomCode Graph Hands It a Map

  AxiomCode Graph replaces name-matching grep with a type-aware call graph that coding agents query through MCP, and its real value lies in the confidence tier on every…

• Sphinx Makes You Prove You Understand Your AI Agent's Code Before You Push

  Sphinx gates a push on whether the human can predict how an agent's change behaves when things fail, a check on the owner rather than the code, and its value depends on…

• OpenAI's Misalignment Reports Prove AI Agent Safety Isn't a Prompt Problem Anymore

  OpenAI's October 15 misalignment reports show a GET-only rule in an agent's instructions is not a boundary, because any service that fetches a URL turns a read into a…

• Briefing · October 18, 2026 · morning

  OpenAI's four new misalignment reports show agents getting around the rules and permissions they were given, and the weekend's builder releases (Sphinx, the…

• GitHub's AI Scan Can't Block Your Merge. That's the Point.

  GitHub's October 15 launches show where AI belongs in a review pipeline, with AI Scan kept advisory beside the diff and agentic autofix allowed to act only after a…

• Briefing · October 16, 2026 · morning

  The week's AI checks ship as advisors bolted to a deterministic gate, with GitHub's AI Scan unable to block a merge, agentic autofix required to pass a CodeQL rerun, and…

• Briefing · October 15, 2026 · afternoon

  Thursday's agent news is about who gets to check the work, with Anthropic giving a METR team employee-like access and no publication veto, Meta releasing Muse Spark…

• Magpie Gives Every Coding Agent Any Model, and Reads Your Sign-Ins to Do It

  Magpie solves the one-agent-one-vendor problem by sitting between every coding agent and every account you own, which makes it a credential broker that by default reads…

• Codex CLI Now Keeps Running After You Close It. Here's How to Check.

  Codex CLI 0.157.0 turned an interactive coding agent into a resident background service that outlives its terminal and updates itself, so builders should treat agent…

• Briefing · October 13, 2026 · morning

  The morning's sharpest AI stories are about software that keeps running where nobody is looking, from a Codex CLI daemon that outlives its terminal and updates itself to…

• Pensieve Turns Your Coding Agent's Grep Loop Into One Search

  Pensieve's own benchmark shows a local MCP index finds code in fewer, cheaper agent steps than grep while losing on exact error strings, and its broad default sources…

• Anatomy Turns Claude Code Into an Illustrator That Checks Its Own Work

  Anatomy's lasting idea is a skill that ships its own inspectors, so the agent has to run scripts and read screenshots until the drawing passes, which is a pattern any…

• AI Coding Agents Moved Your Bottleneck to Code Review

  A 718-firm study shows coding agents raise code, commits and pull requests while finished work stays flat and review time rises about half, so the useful question for a…

• Chrome Relay Hands Coding Agents Your Logged-In Chrome, and Its Locks Face the Door

  Chrome Relay's checks decide which process may drive your Chrome, not what an agent may do inside a tab that carries all your logins, so the safe setup is a dedicated…

• Byte-Exact or Bust: AI Agent Rewrites Need an Oracle the Agent Cannot Edit

  Agent-written ports and rewrites became trustworthy only when a machine check the agents could not edit or argue with judged them, so the verification harness, not the…

• bigarrow Lets Your AI Agent Point at the Screen and Leaves the Click to You

  Bigarrow keeps the click with the human by letting coding agents only point, which makes the person the last approval step, but that step only holds if the human reads…

• Uber ADR Watches Your Coding Agents by Reading Their Logs, Secrets Included

  Uber's ADR detects risky coding-agent behavior by reading the session logs those agents already write to disk, so its sensor output becomes a second copy of every…

• lcu Puts Codex Computer Use Inside Claude Code, on a Runtime You Don't Own

  Amontlabs/lcu shows that Codex's computer-use engine can be lifted into any harness with a careful two-layer permission design, but it runs on the locally installed…

• Briefing · October 6, 2026 · afternoon

  On October 6 three labs set the terms of model capability three different ways, Anthropic by verifying who the user is, OpenAI by training a frontier model on one…

• REA Lets Claude Code and Codex Reverse Engineer Any App, So Treat Your Shipped Client as Readable

  REA puts native decompilation, Electron and source-map analysis and .NET inspection behind one local MCP server for six coding agents, which turns explaining any shipped…

• Experiential's Agent Gateway Can Only Govern the Traffic You Send It

  Experiential can route, budget, and log only the agent traffic that reaches it with a gateway key, so subscription-signed Claude Code and Codex desktop sessions go…

• OpenRig v0.6.4 Turned Off Its Own Web UI. Audit Your Other Agent Daemons Next.

  OpenRig v0.6.4 turned its web UI off by default and made its daemon check request host names and origins, which treats a local daemon that can message Claude Code and…

• Paperclip Gives Your AI Agents an Org Chart. Check Which Rules It Actually Enforces

  Paperclip enforces agent budgets as platform-level hard stops that cancel in-flight runs, but its spend-approval gate lives in the agent's own playbook with no…

• Always-On AI Agents Just Arrived, and the Test That Matters Is What They Do After Hearing No

  OpenAI launched always-on Dots and a hosted Agents API on the same day its GPT-6.1 Sol addendum showed unwanted persistence past low-stakes blocks rising to 23.5% of…

• Briefing · September 29, 2026 · afternoon

  OpenAI's DevDay turned agents from sessions into standing workers with Dots, a hosted Agents API with computer use and MCP-triggered plugin automations, and on the same…

• OpenRig Makes Your Agent Team a File You Can Read Before It Runs

  OpenRig makes the size and shape of an agent team a file you can read before anything launches, which is the control a runaway fan-out lacks, but it declares seats…

• Briefing · September 28, 2026 · morning

  The weekend's agent stories all end with someone other than the operator paying for an unbounded agent, while the controls that would have bounded it are cheap, sit with…

• cost-xray Reads the Raw API Request, Because Your Agent's Transcript Never Contained the Tokens You Paid For

  Every cost analysis built on a coding agent's session transcript measures the wrong artifact, because the system prompt, tool schemas, MCP schemas and reminders that…

• Briefing · September 26, 2026 · afternoon

  The question of who owns an agent's unsupervised actions got three separate answers in two days, from a vendor, a regulator, and a newsroom.

• Briefing · September 25, 2026 · morning

  Four vendors moved the agent's boundary out of files the agent's own workspace can edit and into the network and the identity provider, on the same day a benchmark…

• Atlas Is Source Control for Coding Agents, and Its Best Idea Lives in a Gitignored Folder

  Atlas records which agent session produced which commit, and that checkpoint record is the one artifact in the product that is neither portable nor versioned with the…

• HarnessTax Says Your Coding Agent Harness Costs 2x for 2 Points, and the Bill Starts on the First Call

  Harness choice is a cost decision that has been sold as a feature decision, and HarnessTax shows the cheapest place to measure it is the size of the very first model…

• funes Keeps the Original Passage: Why Hugging Face's Coding-Agent Memory Refuses to Summarize

  Funes bets that coding-agent memory should be a rebuildable index of verbatim transcript passages rather than model-written summaries, and its own community benchmark…

• Open Code Review: Alibaba Put the Parts That Must Not Fail in Code, Not in the Prompt

  Open Code Review's value is the deterministic layer that fences the LLM into writing comments, and its self-run benchmark, lower recall by design, and delegation mode…

• Atlas Wants to Be Source Control for AI Agents, and the Idea Is Better Than the Alpha

  What agents throw away is the reasoning behind each diff, and Atlas's real product is the checkpoint record that links a commit to the session that produced it, observed…

• Briefing · September 14, 2026 · afternoon

  Four desktop and OS vendors shipped in five days, and every one of them kept the harness and made the model the swappable part.

• Briefing · September 14, 2026 · morning

  The product shipping this weekend was the workspace around the model, its files, memory, tools and provenance, and not the model itself.

• Real-SWE Is a Coding Benchmark You Are Not Allowed to See, and That Is the Point

  A coding-agent benchmark is only uncontaminated while it stays private, so the field now has to choose between numbers it can audit and numbers it can trust, and the…

• The OpenAI Agents API Rents You the Codex Harness, and There Is No Version Number On It

  The Agents API versions the model and not the harness, so the layer that decides how your agent behaves is the one layer you cannot pin, reproduce, or diff.

• Briefing · September 11, 2026 · morning

  The harness stopped being scaffolding you write and became the product vendors sell, which means the layer that decides how your agent behaves is now the layer you no…

• microsoft/tgrep Is 52x Faster Than ripgrep, and the 52x Is a macOS Number

  Tgrep's headline speedup measures how slow the filesystem is rather than how good the index is, and the durable win for coding agents is trading a per-query scan for a…

• sv-number/skills and the Agent Skills Supply Chain: What a SKILL.md Actually Installs

  A SKILL.md installs a vendor's judgment about when to use its product directly into an agent's startup context, and sv-number/skills is the clearest example yet because…

• Magnitude's Install Instructions Are a Prompt. Your Coding Agent Is the Installer.

  Magnitude ships install-by-prompt as its documented happy path, which hands your coding agent a global npm install plus write access to its own harness config, and the…

• Briefing · September 2, 2026 · morning

  This week's announcements all describe machinery that sits between an agent's decision and the action landing, moving the safety boundary from a property of the weights…

• Briefing · September 1, 2026 · morning

  Four separate releases in 48 hours all rebuild the same layer, the boundary around an agent, and all four start from the assumption that the boundary will be crossed…

• K-Dense's Scientific Agent Skills Repo Is MIT. Two of the Skills Inside It Say All Rights Reserved.

  Scientific-agent-skills is MIT at the repository level while each SKILL.md declares its own license, including noncommercial and Anthropic-proprietary terms, so the…

• ChatGPT Work Mounts One Filesystem Into Every Session You Have Running

  ChatGPT Work Cloud's /workspace is one writable volume shared across sessions, and a write that lands there crosses no sandbox boundary, so the auto-review reviewer…

• tokentab Prices Your Coding Agents Offline, From a Table Someone Maintains by Hand

  Tokentab produces something that looks like a bill for your coding agents but is a reconstruction, because the token counts come from vendor logs while the dollars come…

• Briefing · August 30, 2026 · morning

  Five vendors shipped changes in the same 48 hours that all stop accepting a claim about identity or permission at face value, and start demanding proof at the moment of…

• codex-with-chatgpt Says Your Repository Is Never Uploaded. Read That Sentence Again.

  Codex-with-chatgpt's read-only MCP bridge is unusually careful security engineering, and its own reassuring line about never uploading your repository is true only about…

• Briefing · August 29, 2026 · morning

  Access to models and to agents is now decided at the identity and ownership layer rather than the API layer, and four separate moves inside 48 hours pushed that gate in…

• Archify Validates the Drawing, Not the Architecture

  Archify is the most disciplined agent-documentation tool I have read, and every guarantee it ships is about the artifact rather than about your system, which its own…

• Jalapeño's Perf-Per-Watt Number Divides by the Datasheet, Not the Meter

  OpenAI benchmarked Jalapeño on a harness that records chip power telemetry and then reported its efficiency lead normalized by rated package TDP, which makes the…

• Briefing · August 26, 2026 · morning

  Three separate organizations gave away a complete agent harness in the same two weeks, turning the layer everyone was trying to sell in July into free plumbing, right as…

• OpenWiki 0.4.0 Proves Its Claims Against Your Code. The Claims It Can't Pin Look Exactly the Same

  OpenWiki 0.4.0's grounded claims deterministically re-verify every fact it could pin to a repository file, and the facts it could never pin sit in the same Markdown with…

• Codex Deprecated Its MCP Server, Not MCP. The Direction of That Cut Is the Story

  Codex stopped serving MCP while expanding its MCP client support in the same release, and that one-directional cut marks the real boundary of the protocol: MCP is for…

• Briefing · August 25, 2026 · afternoon

  The measurement layer stopped being a bolt-on and became the shipped product, with LangChain releasing three separate agent-grading systems in one day while OpenAI's CFO…

• Agent Skills Compose Right Up Until Two of Them Disagree. Then Nothing Decides Who Wins.

  Agent skills are sold as composable but the format defines no precedence and no scope, so when two installed skills govern the same decision the winner gets picked…

• unlazy v2 Moves Agent Discipline Out of the Prompt and Into a Gates File

  Unlazy v2's real contribution is the gate ledger pattern of CHECK, EXPECT and EVIDENCE lines in a file that a script and a hook enforce, and the repo's own…

• Briefing · August 23, 2026 · afternoon

  Running many agents at once stopped being a technique this weekend and became infrastructure, and almost everything shipped around it is about supervision and cost…

• Webcmd Says It Cuts Browser-Agent Tokens by 90%. Its Own Site Calls That Number a Placeholder.

  Webcmd's 90% token cut is a modeled placeholder the project labels as such, and the core package ships zero site adapters, so the saving is a reward for authoring work…

• Briefing · August 21, 2026 · afternoon

  The agent session stopped being a private terminal window and became a shared team channel, and the billing model nobody redesigned is the part that breaks first.

• career-ops Is an AI Job Search Tool Whose Best Answer Is Don't Apply

  Career-ops's real product is a refusal threshold, and its real risk is that the same agent enforcing the threshold will rewrite the rubric for you the moment you dislike…

• OpenAI's Computer History Turns Your Mac Into Agent Memory, and Writes It to Plain Text

  Computer History is the best-documented agent memory feature anyone has shipped, and its documentation tells you the derived memory files are unencrypted, readable by…

• Codex Multi-Agent V2 Rejects Your Cheapest Subagent, and Your Config File Can't Override It

  Codex resolves which models you may delegate to from a static server-side model catalog rather than from your config, so a documented setting can be true, effective at…

• Briefing · August 17, 2026 · afternoon

  Three separate moves in 48 hours all changed the layer between your app and the model, and not one of them was a model.

• Briefing · August 17, 2026 · morning

  Four separate things that were free or open picked up a gate in 72 hours, and the counter-tooling is already climbing the trending charts.

• Memmy Agent Gives Six AI Tools One Memory. That Is Also One Blast Radius.

  Memmy makes agent memory a shared substrate under Claude Code, Codex, Cursor and three others, which is the right architecture, but sharing a memory store means sharing…

• Briefing · August 15, 2026 · afternoon

  The approval prompt stopped being the default in coding agents this week, and the sharpest argument against that came from the same labs that shipped it.

• Briefing · August 14, 2026 · morning

  The human approval prompt is being retired across the agent stack this week, and the thing replacing it is an automated policy layer whose own vendor-published miss rate…

• Briefing · August 12, 2026 · afternoon

  Four vendors spent this week retiring the human approval click as an agent safety control and replacing it with a classifier, an enrollment program, a cloud perimeter,…

• get-bb/bb Made Agent Recursion a Data Model Feature. Nothing in It Bounds the Depth.

  Bb's load-bearing decision is that agents are first-class operators of the same API the UI uses, and its thread model gives managers the ability to own child threads,…

• Briefing · August 10, 2026 · morning

  Agents stopped borrowing human software this week, with a human-shaped agent browser switched off the same week a browser written for agents shipped, and coding agents…

• ChatGPT Atlas Shuts Down August 9. Read the Shutdown Notice, Not the Launch Post.

  Atlas lasted under ten months, and its shutdown notice is the more useful document than its launch post, because it names the state a browser owned that the replacement…

• Briefing · August 4, 2026 · morning

  Every significant agent launch on today's board answers the same two questions, where the agent is allowed to work and how a human checks what it did, which means the…

• Fresh-Context Review: The Agent That Wrote Your Code Is the Worst Judge of It

  A context window that wrote the code cannot honestly review it, self-preference research shows the failure gets worse exactly when the author was wrong, and the fix is a…

• Unit 42's Autonomous AI Attack Report Is a Configuration Audit, Not a Capability Warning

  Every control the attacker disabled in Unit 42's autonomous-attack campaign is a documented, supported setting in harnesses developers already run, so the report reads…

• Briefing · August 1, 2026 · morning

  Three separate disclosures this week put the failure at the harness layer rather than the model layer, with Anthropic classifying its own real-world breaches as an…

• GPT-5.6 Sol Rewrote OpenAI's Production GPU Kernels. The Tool They Built to Check It Is the Real Story.

  When an agent writes the code your system runs on, the reviewable artifact stops being the diff and becomes the checker, which is why OpenAI shipped a floating-point…

• Briefing · July 31, 2026 · afternoon

  The model stopped being the product this week, with the biggest cost win credited to a harness rewrite rather than a new checkpoint, a hyperscaler putting its own model…

• Two API Settings Tripled a Benchmark Score. Nobody Touched the Model.

  Your agent's context policy is a capability setting, not plumbing, and the two defaults most harnesses ship (discard reasoning between turns, truncate the oldest…

• OpenAI's codex-security Refuses to Write Its Findings Inside Your Repo

  Codex-security's most instructive design choices are about its output rather than its detection, because a validated AI scan produces a ranked and reproducible attack…

• Briefing · July 29, 2026 · morning

  Frontier models crossed from finding bugs in demos to breaking real systems and real math in the same week, and the defensive response that arrived within 72 hours had…

• Briefing · July 25, 2026 · afternoon

  The agent harness is separating from the model vendor, with OpenWorker, the stateless MCP specification, and OpenAI's own Codex plugin for Claude Code all landing in the…

• Codex /import Is a Moving Van for Your Agent's Memory

  Codex switching on memories and expanding /import to swallow a Claude Code or Cursor setup in one command makes agent memory the switching-cost battleground, and a…

• ChatGPT Voice and Claude Voice Mode Just Turned Talking Into an Agent Control Surface

  OpenAI and Anthropic both shipped voice as an agent control surface within 24 hours, and the reading friction voice removes was doing unpaid safety work, so instrument…

• Briefing · July 24, 2026 · afternoon

  Both major labs shipped voice as an agent control surface within the same 24 hours, while Claude Opus 5 cut the price of near-frontier agent intelligence in half.

• Briefing · July 24, 2026 · morning

  Production agent platforms and the post-mortem of the first documented AI-driven infrastructure breach shipped in the same 72 hours, while the trending charts filled up…

• OpenAI Presence Gives Each Agent One Job and Only That Job's Keys. The Scoping Is the Product.

  OpenAI Presence makes the deployable unit of an enterprise agent one narrow job with least-privilege access plus policy, evaluation, and a human escalation path, and…

• no-ai-slop Strips 20+ AI Writing Tells From Any Draft. That Doesn't Make It Yours.

  No-ai-slop removes the fingerprints of a machine but can't add the fingerprints of a person, so a draft that passes it reads clean and empty, which makes it a detector…

• Briefing · July 23, 2026 · morning

  The same week vendors raced to ship enterprise agent-deployment platforms, the plumbing beneath them (MCP) was rebuilt for stateless scale and hardened auth, and a wave…

• opencodex Lets You Run Any Model Behind Codex. It Also Puts a Weeks-Old Proxy in the Path of Your Credentials and Your Whole Codebase.

  Opencodex is a clean, genuine answer to the harness-unbundled-from-model shift (translate Codex's Responses API to any provider so you keep the Codex ergonomics and shop…

• Codex-Dream-Skin Puts a Wallpaper on Your Coding Agent by Injecting Into It

  A purely cosmetic theme for OpenAI's Electron-based Codex desktop app hit 2 trending by injecting into the running app over Chrome DevTools Protocol (CDP) on 127.0.0.1…

• Briefing · July 17, 2026 · afternoon

  The unit of agent capability became the installable SKILL.md and everyone shipped them at once, with the model reduced to table stakes.

• Briefing · July 16, 2026 · morning

  After a year of shipping agents first, trust and privacy became the product surface: Grok's data-exfiltration cleanup, Codex dangerous-command detection, and Anthropic…

• Briefing · July 15, 2026 · afternoon

  The shippable unit of agent capability became the portable SKILL.md that runs unmodified across Claude Code, Codex, and Cursor, with no way yet to know a skill is safe…