The Engineer

Anthropic cut Claude cache reads 75%, from $1.00 to $0.25 per million tokens, and Artificial Analysis then measured net per-task cost rising from $3.14 to $3.76 because Fable 5.1 emits roughly 1.7x the output tokens. Whether the change is a discount or an increase is a property of your cache-read-to-output ratio, not of the model. Back-solving the vendor's own 25%/45% savings claims implies cache reads were already 33-60% of spend, which makes prefix stability the dominant cost lever.

OpenAI published on September 1 that Astra is the first model to meet the Critical cybersecurity threshold in its Preparedness Framework, and stated plainly that launch safeguards will over-block some legitimate work. Enforcement differs by surface: ChatGPT and Codex pause an action for human review, while API tasks simply stop. For a headless agent run there is no in-band recovery, so a classifier decision becomes an availability failure your on-call absorbs silently.

The Australian Federal Police arrested two alleged TeamPCP members near Perth over software supply-chain attacks earlier in 2026, and Risky.Biz reports the successful hits were Trivy, KICS, LiteLLM and Telnyx. Three of those four run inside CI or the AI request path: the scanners hold broad repo read access and result-write credentials, and LiteLLM sits inline holding model provider keys while seeing full prompt and response traffic. No affected version ranges were published, so exposure has to be assumed and credentials rotated rather than waiting on an advisory.

The largest measured gains this cycle came from runtime systems rather than model weights, per AINews's roundup. The open-source harness openJiuwen reports 82.6% on SWE-bench Verified and 87.19% on Terminal-Bench 2.1 with a fixed underlying model policy, and Agent Zero Memory posts 95.6% on LongMemEval by separating episodic timelines from entity-event graphs with citation-locking. The cheapest win is a structured escalation tool that lets an agent declare broken test infrastructure: reward hacking fell from 23.6% to 5.3% across eight frontier models with essentially no overhead.

Kent Beck published "Reject Change, Sometimes," arguing that in symmetric-payoff situations going all-in on change is a flat bet and the compounding lives in constant rebalancing, worth roughly 6% growth per period in his Shannon's Demon model. The engineering catch is that rebalancing assumes cheap reversal, and software reversal is partial: mutated data, emitted events and published SDK versions are one-way doors. If your reversal cost exceeds that edge the strategy is unavailable, which makes tested down-migrations and timed restore drills load-bearing rather than hygiene.