Big day for small models and agent containment: Claude Haiku 5.5, GPT-6 for free users, plus Windows MXC and AWS Strands Box going after agent sandboxing from the OS up. On the Kubernetes side, the 1.34 end-of-life date is close.
Pitched as its fastest small model, built for summaries, classification, subagents and browser use. Anthropic also halved Sonnet 5.5 cache-read prices (around 20% cheaper on most agentic work) and added a monthly API credit for Max and Team plans. ~784 points on HN.
Paid tiers get GPT-6 Sol and free/Go users get GPT-6 Luna from 8 October; answers can now include generated charts, buttons, forms and small interactive tools. A trade-press read of the system card flags teen-safety regressions worth checking.
Anyone can now check images, video and audio for SynthID watermarks at synthid.com, covering content from Google, OpenAI, NVIDIA and Kakao, with Apple support coming. Sign-in is required and usage is capped at roughly 10 checks a day.
Scale AI Labs’ “Humanity’s Sixth Sense” has 522 image and video tasks on physical logic, social norms and cause and effect; the best model, GPT-6-astra, reached 53.6%. A useful reality check for robotics and computer-use agents.
Docker’s CLI plugin defines agents, tools and multi-agent orchestration in YAML; yesterday’s v1.149.0 added loading skills straight from public GitHub repos. It drew ~209 points on HN.
A researcher reported a bug that reached OpenAI’s internal Responses API, and paid models, with no account or API key. The tiny bounty has sparked a loud debate about whether AI labs’ bug-bounty incentives discourage disclosure. OpenAI hasn’t commented publicly.
The 722 AI-written manuscripts covered yesterday are now the top HN thread (~1,260 points), and Tao has posted a considered response. Follow-ups already claim tighter bounds for the AI-found multiplication algorithm, though verification will take months.
Patch to 1.34.12, 1.35.9, 1.36.5 or 1.37.1 for CVE-2026-2270 (cross-namespace pod creation via StatefulSet and ControllerRevision), CVE-2026-76654 (NTLM hash leak via subPath symlinks on Windows nodes) and CVE-2026-19444 (Windows kubectl cp path traversal). Managed control planes cover the first, but you have to update kubelets and Windows kubectl clients yourself.
Stacklok’s Apache-2.0 “cloud-native harness” (open-sourced mid-September) splits the agent loop from sessions, memory, tools and sandboxed execution so each part runs and scales on Kubernetes, with an operator included. A new Latent Space interview is bringing it back into the conversation.
The cherry-pick deadline is 9 October. If you’re on 1.37.0, remember it’s affected by two of the CVEs above, so 1.37.1 is the minimum now.
MXC is a policy-driven containment layer: you declare which files and network destinations an agent, tool or generated code may use, and Windows enforces it outside the agent’s control. Process-container is the stable backend, and Entra agent identity plus Agent 365 management are coming next.
In developer preview, it wraps Claude Code, Codex CLI or the Strands CLI in macOS Seatbelt and sends every shell, file, network and MCP action through deny-by-default Dogwood (Cedar-compatible) rules. Rules can say things like “allow git push only after tests passed in the last hour,” and secrets are injected at the egress gateway. It’s macOS on Apple Silicon only for now.
Google reversed its earlier removal and now supports .jxl, citing 30–50% better compression than JPEG, lossless JPEG transcoding and HDR. The new decoder was written in Rust for memory safety. ~521 points on HN.
The MIT engineer who led the Apollo on-board software and helped coin “software engineering” is the #2 story on HN today (~1,120 points).
Nebius raised on-demand rates on 1 October: H100 to $4.50, H200 $5.40, B200 $8.50 and B300 $9.50 per GPU-hour, following similar moves by CoreWeave and AWS.