LodeHQ
AI news for people who shipFree, by email

AI · Friday, 23 October 2026 · Issue 149 · 14 stories

Claude proved 239 entry points across 123 open-source libraries never crash

AI is starting to secure code, not just write it: Claude proved 239 entry points in 123 open-source libraries never crash, and GPT-5.6 Sol helped find a critical PHP flaw. For builders the gaps are just as clear, from a hijacked LiteLLM release to OpenAI agent traffic its own monitor could not watch.

Models & Releases

Claude Sonnet 5.5 scores 72.4% on ARC-AGI-3 with ARC Prize's Provider Adapter harness

ARC Prize's verified testing puts Claude Sonnet 5.5 at 72.4% on ARC-AGI-3, a benchmark of 25 interactive game environments. That score used the Provider Adapter harness, which keeps the model's reasoning state between requests and compacts long conversations so it can reuse prior work. With the Standard harness, which only carries forward notes the model chooses to keep, it scored 24.3%. Sonnet 5.5 also reached 83.9% on ARC-AGI-2 and 96.5% on ARC-AGI-1.

arcprize.org ↗2 min read at source

Research

Claude proved 239 entry points across 123 open-source libraries never crash

Anthropic's Frontier Red Team and Theorem used Claude to write machine-checked proofs that 239 entry points across 123 OSS-Fuzz libraries never crash on any input up to 64 MB. Formal verification means a proof checker confirms, step by step, that compiled code meets a written rule. The proofs total about 180 million lines of Rocq and hold only for single-threaded static binaries on a RISC-V CPU running Linux. Claude also found bugs that trillions of test runs had missed.

anthropic.com ↗8 min read at source

Two researchers, working with AI agents, resolved the 31-year-old KLS geometry conjecture

Xinzhi Zhang of Microsoft Research and a collaborator proved the Kannan, Lovász, Simonovits conjecture, proposed in 1995. It says that for a broad class of high-dimensional distributions, the best flat cut is within a fixed factor of the best cut of any shape, in any number of dimensions. These cuts govern how quickly random walks explore a distribution, which underpins sampling algorithms. AI agents explored more than 100 candidate approaches while the researchers directed the search.

microsoft.com ↗6 min read at source

Google DeepMind's ForTy map separates natural, planted and farmed forest at 10-meter detail

Google DeepMind and Google Research, with WRI and IIASA, released Forest Typology (ForTy) 2020, which sorts every 10-by-10-meter patch of land on Earth into six types. Most global maps only show tree cover, yet a primary forest holds far more carbon and biodiversity than a timber plantation. An early 2017 to 2025 time series shows what replaced lost forest, a key input for the EU's deforestation rules. Both are free on Google Earth Engine under an open license.

deepmind.google ↗6 min read at source

Products & Industry

Claude apps will start in auto mode by default on Pro, Max and Team plans

Starting next week, new sessions in most Claude apps on Pro, Max and Team plans will default to auto mode. Instead of asking you to approve each action, an automated check reviews it: safe actions go ahead, and risky ones are blocked while Claude looks for another route. In Anthropic's study of 1,053 paid testers, humans caught 13.6% of dangerous commands while auto mode caught 89%. Auto mode stays opt-in for now on Claude Enterprise and the Claude API.

claude.com ↗16 min read at source

Claude Duet is a proactive agent app that keeps working after you step away

Anthropic opened a research preview of Claude Duet, starting with US Pro and Max subscribers on a waitlist. Built around Claude Opus 5.5, it sends a short brief each morning on the most important items across your connected apps, messages you only when something needs your attention, and checks with you before it acts on your behalf. A new dedicated classifier rejects requests to share the strictest tier of information, such as credit card numbers and government identification.

claude.com ↗5 min read at source

Claude Security now re-checks repositories as code changes and tracks findings until fixed

Claude Security, Anthropic's vulnerability scanner, no longer waits for someone to start a scan: it keeps up with your repositories as the code changes. It also tracks which findings get fixed and uses context your team adds to decide what matters. Anthropic says thousands of organizations have found over a million vulnerabilities with it since April. The update is in public beta for Claude Enterprise, with $25,000 in free usage credits each month for two months.

claude.com ↗5 min read at source

Google Cloud customers can now use the full Claude Platform with Google billing

Claude Models on Google Cloud (Anthropic managed) is now generally available, giving Google Cloud customers every Claude API feature, with new features and betas shipping the same day they go live on Anthropic's own platform. Teams sign in with existing Google Cloud IAM credentials, pay on a single Google Cloud invoice and draw down existing Google Cloud commitments. Anthropic operates the service and is the data processor; the Google managed option remains for strict regional data residency needs.

claude.com ↗2 min read at source

Google's Agent Compute Engine gives each agent its own hardware-isolated microVM

Google Cloud announced Agent Compute Engine, the compute service that already gives every Gemini agent its own secure computer, and says customers can use it in preview in the coming months. Each agent runs in a microVM, a small virtual machine that boots rapidly, behind a hardware-isolated Cloud Hypervisor boundary backed by Titanium. When an agent stops to think or waits on a human, its microVM is paused and later resumed from snapshots, so idle agents use fewer resources.

cloud.google.com ↗8 min read at source

Policy & Safety

Calif used GPT-5.6 Sol to find a critical PHP flaw before attackers did

OpenAI says Calif found a critical flaw in PHP, the language that runs many websites, using GPT-5.6 Sol through OpenAI's Patch the Planet initiative, and Wiz independently reported both vulnerabilities. PHP's maintainers led the fixes, and OpenAI released a PHP version checker as a Codex skill to help operators spot vulnerable versions. OpenAI also committed $1 billion in subsidized Daybreak access for defenders with limited security resources, and expects similar findings to increase sharply in the coming months.

openai.com ↗7 min read at source

Tools & Open Source

Recursive's Apache 2.0 Flint coding model uses about 2.5B of its 39.8B parameters per token

Flint is a mixture-of-experts model: it routes each token to 6 of 256 expert sub-networks plus a shared one, so only about 2.5 billion of its 39.8 billion parameters do work per token. In Recursive's release evaluations it scores 74.2% on SWE-bench Verified and 54.9% on Terminal-Bench 2.1. The BF16 weights are on Hugging Face under Apache 2.0, with a 262,144-token context, and run on one B300 or H200 GPU per replica.

huggingface.co ↗5 min read at source

Cohere's Rerank 5 cut search-agent tokens 41% while raising deep-search accuracy

Cohere's Rerank 5 adds Context Focus, which returns the most relevant passages within each document, so a search agent reads less. On six deep-search benchmarks the agent used 41% fewer tokens and its accuracy rose from 39% to 52%. A reranker re-orders search results so the model sees the most relevant text first. Pricing is $0.05 per 1M tokens for Pro and $0.02 for Fast, on the Cohere API, Microsoft Foundry and Amazon SageMaker.

cohere.com ↗8 min read at source

Ant Group and vLLM's open Humming kernels raised MoE serving throughput 14%, 43%

Humming is an open-source library of GPU kernels, the small programs that do a model's math, for quantized models that store numbers in fewer bits to save memory. One library covers many integer and floating-point formats on NVIDIA GPUs from Turing onward. In a vLLM test, switching a MoE model from Marlin W4A16 to Humming W4A8 raised end-to-end throughput by about 14%, 43% and cut mean time to first token by about 25%, 32%.

vllm.ai ↗19 min read at source

Ai2's OlmoEarth v1.3 ships ready-made embeddings for every 10-meter pixel on Earth

Ai2 released OlmoEarth v1.3, a satellite embedding model, with precomputed annual embeddings for the whole planet. The model reads a year of radar and multispectral satellite images and outputs one 128-dimensional vector, a compact numeric summary, for every 10-meter pixel; the first 64 dimensions also work on their own. Until now, using OlmoEarth meant training a model for each task, which required GPU access and stored imagery. A new browser tool, the OlmoEarth Embeddings Explorer, needs no sign-in.

allenai.org ↗6 min read at source

You’re caught up.

That was all 14 stories in the 23 October issue.