Fetching from the wire…
Tools2026-09-19 · source-backed
The 431-commit range between rust-v0.155.1 and rust-v0.156.0-alpha.7 blocks mutating fcntls in restricted Seatbelt policies (#46500), denies XPC service lookups (#46583), removes com.apple.runningboard from platform defaults (#46532) and preserves Seatbelt exclusions in scratch directories (#46571). Every Codex alpha release body is 25 bytes. GitHub compare Together these close the class of escapes where sandboxed code reaches out through a macOS system service rather than the filesystem.
Each link below shares sources, entities, or timing with this story.
The 60 commits between rust-v0.155.0-alpha.4 and alpha.6, published September 15 with an empty release body as every Codex alpha has, include configuring the Guardian prompt template (#45516), Guardian reviewers routed through ThreadManager for inline parents (#45518), reviewe...
Commits #45806 and #46066 stop a subagent or spawned thread from installing a plugin or raising an MCP consent prompt on its own, and #46042 adds read-only policy support to MCP tool requests so a thread can be handed a server it may query but not mutate through. GitHub compar...
Rust, created May 14, at 2,643 stars (GitHub). Every run produces checkpoints linking a commit to the session that made it, including prompts, tool calls and reasoning. It runs Claude Code, Codex, its own agent and anything from the ACP registry side by side against one codeba...
A standalone macOS and Windows desktop beta released September 14, moving the open-source agent out of the VS Code extension slot; the releases page shows Desktop v0.0.26 on September 11, v0.0.27 on September 13 and v0.0.28 on September 15, so it's shipping daily (GitHub). It...
Created September 12, an Apache-2.0 Rust core with a Svelte 5 UI installing on clean Ubuntu 22.04+ with one command, then running entirely in the browser: a windowed desktop, isolated workspaces carrying VS Code plus Claude Code and Codex, an app store, backups, updates (GitHu...
OpenAI's Codex skills catalog gained 46 stars today, but the API shows its last push was eight weeks ago and its open items split into 0 pull requests and 77 issues (GitHub). A first-party catalog that accepts no outside code and hasn't been touched in two months is a weaker e...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.