AI Coding Live News

On 2026-11-06 Vercel updated Token Pass so featured-model usage through AI Gateway draws credit automatically with a standard API key, OIDC token, or fx login. When credit runs out, those auth modes fall back to team AI Gateway credits; dedicated Token Pass keys still stop until the next billing period.

Zoom

On November 5 Kiro (@kirodotdev) announced Kiro bots GA in open-source multi-agent Kiro Crew. Each bot has persistent Notes, its own workspace and Dashboard; it launches parallel workers, redirects drift, consolidates results, and asks approval when needed — with schedules and per-role minimal tool permissions.

Zoom

On November 2 OpenAI published LifeVal, an evaluation of whether AI can actually get everyday tasks done for ordinary people, such as finding childcare, accessing government services, budgeting, ordering groceries and adapting recipes. The task list draws on the American Time Use Survey, the Multinational Time Use Study and a new demographically representative OpenAI survey of 3,995 people. OpenAI says it has used LifeVal for the past year to track and improve its models, and it lists several best recorded GPT-6 Astra task scores, many at 100%. All scores are vendor-reported and have not been independently reproduced.

Zoom

On Oct 28, GitLab CEO Bill Staples announced in a blog post and on X that new and existing customers can request free credits to run a security sprint with Claude Mythos alongside GitLab Orbit, Secrets Manager and Duo Agent Platform. The core capability is the Business Logic Security Analyzer, the first GitLab feature to support Anthropic's Claude Mythos 5.1. It reads the whole repository, infers what each endpoint should enforce, and flags authorization and mass-assignment flaws that pattern-based SAST misses. The analyzer has been in early access for a small group of GitLab.com Ultimate customers since Oct 20.

Zoom

On Oct 28 independent evaluator Artificial Analysis released Intelligence Index v5, its biggest revision since v4 in January: it adds Cognition's FrontierCode 2.0 and Terminal-Bench-Science, swaps Humanity's Last Exam for HLE-Diamond, and now draws 60% of its weight from private or held-out test sets. Claude Opus 5.5 (max) leads at 58, ahead of GPT-6 Astra at 57 and GPT-6.1 Sol at 55; the top open-weights model, Kimi K3.1 Pro (weights not yet released), scores 46, widening the gap from 3 points in v4.3 to 12. It also launched Progress Index v1 for comparing models across years.

Zoom

Cognition, the maker of Devin, released FrontierCode 2.0 on Oct 27. It keeps the method of maintainer-written tasks graded on whether the code is actually mergeable, but draws tasks from more repositories, adds security patches and performance work, uses deliberately underspecified prompts and adds many thoroughness criteria. In Cognition's results Claude Opus 5.5 leads at 45.5%, GPT-6 Astra follows at 42.8%, and Grok 4.7 and Gemini 4 Argon drop into the 20s, leaving the benchmark far from saturated.

Zoom

At 15:58 UTC on 2026-10-25, developer Thorsten Ball (@thorstenball) published an X article, "How I work with Agents" (post), summarizing how he works with coding agents "as of October 2026": use only the latest and strongest models, prompt for what you want rather than how to do it, make the whole development lifecycle from deploys to production logs visible to the agent, ask agents for "irrefutable proof", and review only code with a high blast radius. When we pulled it, the post had about 1,935 likes, 143 reposts, 92 replies, 3,981 bookmarks and 137K views, and it reached X's trending stories. This is a personal account of practice presented as opinion, not a verified conclusion.

Zoom

OpenAI announced a critical coordinated vulnerability disclosure in the core PHP runtime discovered by cybersecurity firm Calif utilizing GPT-5.6 Sol, alongside independent verification by Wiz. Because PHP powers roughly 70% of all websites globally, the vulnerability represented an existential risk to internet infrastructure. Following coordinated patching, OpenAI committed $1B in subsidized Daybreak security access and open-sourced openai/php2shell-checker, an automated Codex inspection tool enabling site administrators worldwide to audit their deployments.

Zoom

On Oct 21, PHP published a security advisory fixing two critical unauthenticated remote code execution flaws (CVE-2026-109618, CVE-2026-109619) affecting every PHP install serving web requests, with mod_php at highest risk. OpenAI disclosed the same day that Calif found a flaw using GPT-5.6 Sol under its Patch the Planet initiative, with Wiz independently finding and reporting both; OpenAI coordinated a two-month disclosure and committed $1B in subsidized Daybreak access for under-resourced defenders.

Zoom

On Oct 21, OpenAI and Google Cloud announced a partnership bringing OpenAI frontier models and Codex agentic workflows into Google Cloud Model Garden, transacted through Google Cloud Marketplace so enterprises can draw down existing GCP commitments. OpenAI models will also come to Google Antigravity and Gemini Agent soon. General availability is planned in the coming weeks, and Microsoft remains OpenAI's primary cloud partner. After AWS, this puts OpenAI models on all three major US clouds.

Zoom

At PyTorch Conference 2026 on Oct 20, Google open-sourced TorchTPU on GitHub, co-developed with Meta's PyTorch team, making TPUs a native PyTorch device alongside GPUs and CPUs: eager mode and torch.compile, about 450 ATen ops, and torch.distributed collectives. Google also released vLLM-TorchTPU and SGLang-TorchTPU engines, integrations with TorchTitan, Ray, VeRL and Hugging Face Transformers v5 (device_map="tpu"), and a preview TPU agent suite for coding assistants such as Claude Code and Antigravity. AWS shipped the comparable TorchNeuron a day earlier.

Zoom

Researchers from Amazon Web Services (AWS) and UIUC unveiled Lean4AgenticRL (arXiv:2610.22448). Tackling the limitations of conventional agentic reinforcement learning relying on sparse, binary outcome rewards, the framework grounds multi-level process rewards within a formal Lean4 verification schema. Utilizing workflow-stage-normalized GRPO, the resulting LAR-27B model reaches 77.3% on TerminalBench-2.1, outperforming base models by 9.89% and surpassing comparable open models by 5.07%.

Zoom

On October 19 Amazon announced TorchNeuron, which uses PyTorch's standard PrivateUse1 device-backend mechanism to register Trainium as a native "neuron" device, with eager mode, torch.compile and native distributed APIs such as FSDP, DTensor and DDP on Trn2 and Trn3. Amazon says existing PyTorch code runs with a single device configuration change, and it will be open-sourced under Apache 2.0 at PyTorch Conference North America on October 20. The official docs still list it as a closed beta for now.

Zoom