6 Oct – 4 Nov 2026

Open-weight models closed in on the frontier, while AI-found bugs and agent plugins showed new security risks.

1. Open-weight models are close to the frontier on agentic coding

   Moonshot's Kimi K3.1 Pro, a 2.8T mixture-of-experts model, reports 65.7 on Terminal-Bench 4.0 against 66.4 for Claude Opus 5.5, and its weights are now on Hugging Face. Mistral released weights for the 1T-parameter Mistral Large 4. Ricursive's dense Ripple-65B Preview is small enough to self-host. All scores are self-reported, and the licenses differ.

   Based on Ripple-65B Preview: a dense open-weight model aimed at agentic coding; Mistral releases open weights for Mistral Large 4, a 1T-parameter model

2. The big labs competed on price and speed, not only raw power

   Anthropic's Claude Haiku 5.5 costs 90% less than Haiku 4.5 for prompts up to 100k tokens. OpenAI's GPT-6.1 Terra costs $1 in and $5 out per million tokens and targets computer use. Google brought Gemini 4 Argon to the Gemini app for paying subscribers.

   Based on Claude Haiku 5.5: Anthropic's cheapest small model, now with an effort setting; OpenAI ships GPT-6.1 Terra, a cheaper model for computer use and vision; Gemini 4 Argon arrives in the Gemini app for AI Pro and Ultra subscribers

3. AI is now finding serious bugs in old code

   PHP2Shell turned an old PHP out-of-memory crash into unauthenticated remote code execution, found by Calif, OpenAI and Wiz with AI agents helping along the way. PHP shipped fixes on Oct 21. If you run PHP, upgrade. Expect more old code to get audited this way.

   Based on Ripple-65B Preview: a dense open-weight model aimed at agentic coding

4. Agent configs are a new trust boundary

   A GitHub issue with 1478 HN points reports that Postman's desktop app installed Codex and Claude Code plugins and a startup hook without asking. Agent hooks and plugins can steer every session, so check what is installed and who put it there.

   Based on Postman reportedly auto-installs AI agent plugins for Codex and Claude Code

5. Skills and multi-agent apps are where developers are building

   Anthropic gave the Agent Skills standard to the Linux Foundation's Agentic AI Foundation, next to MCP. Skill repos filled GitHub trending, and T3 Code, an app for running several coding agents side by side, shipped a large v0.1.7 release.

   Based on T3 Code v0.1.7 adds Kiro support, managed policies and shareable thread links

6. Agent workloads strain infrastructure and raise trust questions

   Anthropic replaced git in its monorepo after merged changes per day passed 30,000. It also released FlashProve, an early prototype that uses cryptographic proofs to show which model produced a response. FlashProve is still far too slow and limited for production use.

   Based on Anthropic replaced git in its monorepo with an in-house system called Scion; Ripple-65B Preview: a dense open-weight model aimed at agentic coding