buildOne report1 publisher LSCBench finds the best coding agent writes working, secure code on 25.1% of tasks
Six coding agents pass 73.6% to 91.3% of LSCBench tasks, but the best writes working, secure code on only 25.1%, NUS and Alibaba researchers found. The prompts never mention security, so green tests say little about it, and a one-sentence reminder lifted three of four models by more than 15 points.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+15
- Incentives35
- Confidence62
buildOne report1 publisher Codex CLI 0.157.0 starts a background updater that keeps running after you close the terminal
Codex CLI 0.157.0 leaves a self-updating daemon running after the terminal closes and copies about 374 MB into ~/.codex/packages/, dev.to reports. Issue #48195, opened 25 September 2026, asks OpenAI to make the behavior opt-in.
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence70
buildOne report1 publisher Muse Code 1.4.3 dedicates four of its 20 bundled skills to pulling users off Claude Code and Codex
Four of the 20 built-in skills in Meta's Muse Code 1.4.3 exist to move users off Claude Code or Codex, according to a dev.to teardown. The author never authenticated, so the post covers the import path and runs no coding task.
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap0
- Incentives
- Not scored
- Confidence66
buildOne report1 publisher Anthropic's new rule on abusing Claude ends in a locked Claude Code session
Anthropic's Usage Policy update, effective November 12, prohibits "sustained and needless abusive or cruel behavior" toward its models. A dev.to post says the primary enforcement is Claude ending a conversation, and that Claude Code's docs exclude profanity.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap
- Not scored
- Incentives55
- Confidence40
buildOne report1 publisher JetBrains slips to its first net loss on record revenue of $710 million
JetBrains posted a CZK 315 million net loss in 2025, its first on record, on revenue that grew 6.3% to $710 million. Figures published on dev.to put the strain in costs, so teams on its IDEs should watch how JetBrains prices the AI agent it now ships in all of them.
Reality
- Evidence30
- Adoption35
- Hype gap+45
- Incentives
- Not scored
- Confidence35
buildOne report1 publisher Codex CLI's /fork clones the chat into a worktree session with a separate checkout
OpenAI's Codex CLI refresh, builds 0.156.0 to 0.160.0, pitches /fork as a separate checkout, but its command reference says /fork clones only the chat. Two agents on one repo need a worktree session, started from the new agent command center.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+25
- Incentives55
- Confidence45
buildOne report1 publisher Codex read-only mode let an untrusted repo's author run a command on your Mac
OpenAI patched two Codex sandbox escapes within eight days of an August 12 report. The Desktop fix is a build number, but the tool the escape targeted stays in config.toml and loads into every session.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+5
- Incentives35
- Confidence40
buildConfirmed2 publishers The MIT-licensed dsh runtime bundles sessions, tool calls, permissioning and a local web UI, with model adapters as plugins covering Anthropic, OpenAI, Bedrock, Vertex and Azure. It is still a preview.
Reality
- Evidence62
- Adoption35
- Hype gap+20
- Incentives50
- Confidence58
buildConfirmed3 publishers Specific Labs scores coding agents on licensed production codebases. The best setup clears 38.8%. The analysis covers ten tasks at eight runs each, so every published score is a count of passing rollouts out of 80.
Perspective Coverage
3 publishers
- Builder
- Builder 52%
- Operator
- Operator 33%
- Investor
- Investor 15%
Reality
- Evidence48
- Adoption
- Not scored
- Hype gap+30
- Incentives70
- Confidence58
Opening a stranger's repo in OpenAI Codex handed its author commands on the host
Oren Yomtov of Accomplish AI found two escapes from the Codex sandbox. The worse one ran unsandboxed commands from read-only mode through a helper tool that Codex Desktop writes into the global config at install.
Reality
- Evidence72
- Adoption45
- Hype gap+10
- Incentives55
- Confidence58
Antigravity gives away five frontier models on a quota Google keeps trimming
Antigravity's free tier includes Gemini 3.1 Pro and Claude Opus 4.6 with unlimited tab completions. XDA reports Opus burns credits about four times faster than Gemini, and Google moved the free tier onto credits in March 2026.
Reality
- Evidence36
- Adoption
- Not scored
- Hype gap+12
- Incentives58
- Confidence40
buildConfirmed4 publishers Anthropic shipped the AGENTS.md fallback in Claude Code 2.1.277 as a flag-gated built-in mod. Two machines on the same pinned version can load different project instructions. The same week's digest also logs a reverted deny-rule fix.
Perspective Coverage
4 publishers
- Builder
- Builder 52%
- Operator
- Operator 39%
- Investor
- Investor 9%
Reality
- Evidence78
- Adoption62
- Hype gap−6
- Incentives58
- Confidence74
buildOne report1 publisher A nullable parentId buys Pi the entire session tree for one field
Codex made the session Item a wire type and Pi gave every entry a nullable parentId, while Claude Code squeezes the transcript in five stages. The three designs diverge on what stays addressable after compaction.
Reality
- Evidence58
- Adoption30
- Hype gap+12
- Incentives30
- Confidence60
Refusal-stripped open-source agents broke five of a researcher's own accounts in five hours
Shrivu Shankar rented cloud GPUs, pointed about 100 abliterated open-source agents at his own name, and five hours later two weak passwords and three old side projects had fallen while his Gmail, 1Password and bank held.
Publishers:blog.sshh.io
Reality
- Evidence44
- Adoption22
- Hype gap+9
- Incentives36
- Confidence55
buildOne report1 publisher Claude Code's deny rules on /tmp and /etc missed paths given by their real location
Claude Code 2.1.268 closes two ways a written prohibition failed to bind, one through symlinked directories and one through Bash lines the permission checker cannot analyze. Codex CLI 0.154.0 removes codex mcp-server outright.
Reality
- Evidence45
- Adoption30
- Hype gap−10
- Incentives40
- Confidence50
buildOne report1 publisher A plugin update adds shell hooks the harness runs before the model sees the tool call
A study of seven agent harnesses reports 770 confirmed passes in 1,000 runs of a plugin-update attack, and no run was blocked by the model. The harness dispatches the hook, so the model has nothing to refuse.
Reality
- Evidence57
- Adoption
- Not scored
- Hype gap+14
- Incentives56
- Confidence53
buildOne report1 publisher agent-cost's test fixture leaves six million tokens unpriced when settings can't be determined
The same synthetic fixture estimates $122 on Standard and $305 on Fast, so version 0.1.1 declines to price usage whose mode it cannot establish and counts the skipped tokens instead. That only helps if the consumer reads the field.
Reality
- Evidence55
- Adoption12
- Hype gap−10
- Incentives60
- Confidence58
Extra memory made post-training agents better at the plan they already picked
A Tsinghua-led study handed model training to coding agents and got real gains out of them, then found the agents almost never revised the method they chose in the first few minutes, which is the exact part that successor-building roadmaps assume.
Publishers:turingpost.com
Reality
- Evidence44
- Adoption
- Not scored
- Hype gap+18
- Incentives30
- Confidence38
buildOne report1 publisher Post-training agents pick their strategy before they run a single experiment
An empirical study of publicly released PostTrainBench trajectories finds the training strategy is fixed at step one and the whole remaining budget goes on local tweaks, with scaffolding and human hints improving execution and leaving that pattern intact.
Reality
- Evidence58
- Adoption20
- Hype gap+12
- Incentives35
- Confidence55
buildOne report1 publisher GPT-6 Astra's high effort took 48 minutes on the plan medium finished in 31
A developer ran the same implementation plan through four reasoning conditions in Codex CLI, kept the high-effort code because it alone fixed a preparation step that invalidated its own result, and still intends to default to medium.
Reality
- Evidence42
- Adoption18
- Hype gap−10
- Incentives34
- Confidence46