Fetching from the wire…
01
02
03
04
05
06
07
08
Agents2026-09-25 · source-backed
Between September 23 and 25: Claude Code 2.1.282 stopped project settings from enabling OpenTelemetry export (a hostile .claude/settings.json could previously point export at an attacker's collector) and stopped repo skills from pre-approving their own tools. Kimi Code 2.1.0 deferred project-local config until the workspace is trusted, blocked symlink escapes, and stopped a repository's git config from running commands during background git operations. Gemini CLI 0.61.0 gated build commands after build-file edits. Codex 0.157.0 tightened MCP and network boundaries. (Kimi Code releases) The shared threat is a cloned repo steering the agent through files it didn't write. Kimi 2.1.1 arrived a day later to "roll back some of the overly defensive changes" and re-enabled file watchers, so check which protections your version still has. When you evaluate a coding agent now, the question to ask is which files in a fresh clone it will act on before you approve the workspace.
Each link below shares sources, entities, or timing with this story.
Created September 23, at 470 stars within about a day. Lists Claude Code, Codex, Gemini CLI, OpenCode, Pi, Goose, Cursor and Copilot CLI with their current models, edits only the key you change in each config file (preserving comments and ordering, writing atomically), and run...
akitaonrails/ai-memory (1,229 stars, +184 this week, MIT, Rust, 900 commits) inverts the usual design: hooks emit sanitized lifecycle observations during a session, and the server compiles them into coherent wiki pages at session end or PreCompact, "compiled from observations...
A GitHub repo cataloging Claude Code tips doesn't normally warrant a top story. But shanraisshan/claude-code-best-practice at 53.4K stars isn't a tips list anymore. It's the de facto reference for how an entire generation of developers is learning to work with AI coding agents...
Spotify's Portal team published Xirp on August 10: a vendor-neutral agentic development environment that manages concurrent sessions across Claude Code, Gemini CLI, and Codex, each session isolated in its own git worktree so dozens of agents can work the same codebase without...
affaan-m/ECC (36.3k forks, MIT) bundles 67 agents, 284 skills, 94 legacy command shims, and "instincts", patterns learned from prior sessions with confidence scores that auto-recall when relevant, plus a .ecc/memory/ markdown vault that's explicitly cross-harness, so context s...
Every story above generates tokens, and tokens are money. rtk is the clearest "do this today" item in the whole dataset. It's a single Rust binary, 59,658 stars, created January 22 and pushed as recently as June 7, that proxies common dev commands and claims 60 to 90% reductio...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.