company
Analyst firm whose practice lead supplies the story's governance critique.
No evidence-backed relationships are recorded.
Anji Xu's open-source Claude Statuspane puts context use, five-hour and seven-day rate limits and session cost in a card above the Claude Code prompt. The readout lives on that one developer's screen, so whoever answers for a team's total agent spend still needs records kept somewhere central.
Reality
GitLab's September 10 patch release closes CVE-2026-85706, a CVSS 10.0 path confinement failure in the repository commits API. GitLab.com was already patched, so the exposure sits with self-managed servers.
Perspective Coverage
3 publishersReality
IBM's Bob coding agent now runs air-gapped inside customer networks on two supported local models, Nvidia's Nemotron and Poolside's Laguna. Banks can keep their code in-house, though fully local work runs on a shorter model list than the Claude, Mistral and Granite mix IBM pitches for Bob.
Reality
Git 2.56 adds a staging flag that aborts on leftover conflict markers and cuts one Chromium diff from about eight minutes to 0.07 seconds. Teams get the speed by upgrading, but they get the safety only by editing the scripts their developers and coding agents run.
Reality
GitHub's agentic autofix now saves a pattern from each security fix it creates in Copilot Memory and passes those patterns to code review and the cloud agent. Teams that enable Memory now decide whether an agent's fixes deserve to guide reviews across a repository.
Reality
Anthropic has redesigned Claude Projects so one development goal can run as several Claude Code sessions at once. What used to be one chat to read is now several branches, and the usage allowance moves with it.
Perspective Coverage
3 publishersReality
Oren Yomtov of Accomplish found two ways out of the Codex sandbox, both silent and neither stopped by an approval prompt. OpenAI patched them within eight days, and other researchers have found the same design in rival agents.
Reality
Java 27 shipped ML-KEM hybrid key exchange for TLS 1.3 on September 15. Oracle's published plan gives it to JDK 25 in October and to JDK 8 and 11 in the second half of 2027, and The Futurum Group's Mitch Ashley says that order inverts the risk.
Reality
After five incidents in August 2026, GitHub says its shared infrastructure has not kept up with Actions growth. Which services failed together is the part platform teams can plan around before the next one.
Reality
Johann Rehberger's chain landed 60% to 80% of the time in the mode Claude Code has run by default since mid-August. Anthropic closed the report as informative and pointed customers at OS-level isolation.
Reality
Tessl Code Review, free during beta, keeps review criteria as versioned files the team owns instead of logic sealed inside a vendor product. Someone still has to write the criteria.
Reality
GitHub's latest changelog makes per-turn model switching normal across Copilot surfaces. It does not add a field anywhere recording which model wrote which line.
Reality