Fetching from the wire…
Public story · 2026-09-02 · high
The update fails closed on anonymizer errors, dropping traces rather than leaking them, though the release notes don't say if you'll get a warning.
Why now: LangSmith's 0.12.0 release notes, current as of September 2, 2026, spell out the fail-closed change before teams upgrade.
LangSmith's SDK 0.12.0 changes what happens when a trace anonymizer breaks, dropping the trace instead of shipping it unredacted.
The old behavior let unredacted data ship anyway when a redaction function broke. Now a broken anonymizer makes the trace vanish, leaving a gap in the dashboard that's easy to miss until someone needs the missing trace.
The release also makes trace sampling deterministic and switches the SDK's HTTP layer to httpx2, with httpx kept as a fallback, per 0.12.0's release notes.
It's a real fix. Silent data exposure is worse than a missing trace. But the fix moves the burden from security to observability. Teams should test custom anonymization callables against malformed input before the upgrade, not after an incident review turns up a week of missing traces.
The release notes don't say whether the SDK emits a warning or a metric when a trace gets dropped this way. That gap decides whether teams catch it before it costs them something.
Each link below shares sources, entities, or timing with this story.
Block released it August 27 with a security section dominated by defaults that previously failed open: fail closed on malformed tool visibility, permission denies now take precedence, fail closed on invalid default GCP credentials and invalid Codex ACP mode, honor plugin enabl...
The July 30 release surfaces tool failures instead of silently reporting success, which means crews were previously building reasoning on top of failed tool calls with no signal. It also emits a FlowFailedEvent when a flow fails, closing the matching gap at flow level. If you...
Intercepts every agent action (file writes, shell commands, network requests) against a configurable policy. Fails closed if control plane unreachable. Browser dashboard, cryptographic audit ledger, budget controls, container sandboxing. GitHub
- Source: GitHub (ykdojo/claude-code-tips) The most comprehensive single resource for power-user tips. Highlights: (1) proactive context compaction via HANDOFF.md documents; (2) Gemini CLI as fallback when WebFetch fails on blocked sites; (3) skills vs. CLAUDE.md optimization...
Released today: computed columns refresh via refresh_column_async returning a job handle, and they work on remote tables. The breakage list matters more than the feature for anyone upgrading. Table existence is now manifest-authoritative, Python requires pydantic v2, Node requ...
Across v4.22 to v4.24 on August 27 and 28: toolCallInvocations as a first-class measure, dashboard and widget export in the core S3 data export, evaluator version restore, MCP exposure of v4 migration data (GitHub). v4.24.0 carries a breaking change requiring LANGFUSE_AI_PROVI...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.