Archive — 2026-10Week 3

Claude Code v2.1.304 — cumulative update. Added: `/auto-mode-setup`, a guided setup that reads the project and recent sessions to teach auto mode about the environment (also on Bedrock, Vertex, Foundry, Claude apps gateway and telemetry-disabled sessions); `/claude-api managed-agents-secure`, which compares a Managed Agents agent's settings with Anthropic's published security guide read-only; a warning on Pro and Max plans when resuming an inactive conversation would use a noticeable share of the 5-hour limit; `decider: "person"` and `e.isReadOnly` for a mod's `tool.check`; and prior tool names in the compaction summary of the transcript view (Ctrl+O). Fixed: `claude --worktree` removing the worktree and branch without asking at exit when HEAD was detached or on another branch, which could lose commits; `rm -r` of a mounted drive or a top-level `/Volumes`, `/media`, `/mnt/c` folder skipping the safety prompt; `CLAUDE_CODE_TRANSCRIPT_LOCAL_GC` dropping messages when the disk filled; `CLAUDE_CODE_AUTO_COMPACT_WINDOW=200k` silently setting a 100K window (now accepts `k` and `M` suffixes); `context_management: Extra inputs are not permitted` errors behind LLM gateways; a plugin keeping a headless run going past `--max-turns` by spawning subagents; Remote Control failing to start from Claude Desktop when DISABLE_TELEMETRY or DO_NOT_TRACK is set; plus several VSCode and Cowork cloud session fixes. Changed: tool search is on by default behind a custom `ANTHROPIC_BASE_URL` (retried without it on a 400 or 422); the skill list is resent after compaction; one skill source can register at most 1,024 hooks. Code Review: added Quick, Standard (default) and Deep review levels, configurable per organization or per repository, and an option to review every repository in a GitHub organization including ones added later.

Claude Code v2.1.303 — the official release note lists only bug fixes and reliability improvements, with no specific items itemized.

Anthropic published "Investing in the public benefit" on 2026-10-18 in the official Newsroom. Subject to stockholder approval, the company will commit 5% of its shares to a newly established public benefit fund; the board may add 2% for every 50% increase in company value above a baseline, with neither the baseline nor the valuation milestones disclosed — Anthropic says it will share details on the fund's governance and structure in the coming months. The fund is structured as a wholly-owned LLC (not a 501(c)(3)), preserving flexibility between forms of giving; the equity it holds will not be used for lobbying or political giving, in the US or abroad. Use cases include large donations to traditional nonprofits and direct distributions to specific populations, with labor market impacts cited as the first example — Anthropic says bolder approaches may be needed beyond its existing $200 million commitment to economic futures research. Work kept inside the company: AI safety and interpretability research, applied biomedical research, and discounted Claude access for nonprofits and scientific institutions, since these carry both public benefit and for-profit value. Context: co-founders pledged to donate 80% of their personal equity at founding, and an equity donation match program covers about half of employees; combined with the new 5% commitment, roughly 20% of Anthropic shares will be dedicated to the public good, with valuation-milestone additions counted separately. The commitment redirects equity that would otherwise go to executives as escalating compensation awards. The post does not mention an IPO; Anthropic also plans to publish an annual public benefit report on progress against its mission.

Claude Code v2.1.302 — cumulative update. Added: `CLAUDE_CODE_AUTO_MODE_MODEL` to choose the model used by the client-side auto mode classifier (server-side auto mode unaffected); an Idle compaction row in `/config`, with post-compaction notices now explaining how to turn it off; a notice in `/design-sync` and `/design-login` that standalone Claude Design (claude.ai/design) closes on 2026-12-14. Improved: faster startup with many plugins enabled; the server-side auto mode classifier now compacts a conversation too long for the safety check instead of denying every checked tool call. Changed: `claude -p` and Agent SDK sessions with no permission mode start in default mode on third-party providers, with telemetry off, or on a fresh install (`--permission-mode auto` keeps auto); fork subagents (`subagent_type: "fork"`) are on by default in `claude -p`, the Agent SDK, the desktop app and VS Code (`CLAUDE_CODE_FORK_SUBAGENT=0` turns them off); the desktop app and VS Code always run the main conversation's subagents in the background; at most 12 prompt or agent hooks of one event run at a time. Fixed: "Prompt is too long" when stopping a turn during compaction; requests failing after switching to Vertex or Bedrock mid-session; the Read tool loading image files of any size into memory (sources over 128 MB are now refused); prompt cache misses when a tool added mid-session was reloaded; plugin subcommands exiting before a queued settings write finished; plugin marketplaces re-cloning on every refresh under git's reftable format; worktree isolation refusing worktrees under git 2.56 or later; MCP servers showing no tools when negotiating protocol version 2026-07-28 but omitting `resultType`, `ttlMs` or `cacheScope`; cloud session cost and usage restarting from zero after resume; every file write refused on exFAT or FAT32 drives on Windows; plus many fixes for OpenTelemetry, the PowerShell tool, VS Code, Remote Control, Claude Tag (Slack), Code Review setup and cloud routine status.

Anthropic Frontier Red Team publishes "Claude reveals ECDSA curve origins" — subtitled "It's just timestamps," published on 2026-10-16 in Anthropic Research. Authors: John Wood, Henry de Valence, Ava Howell, Zack Voase, Lucy Sweet, Amir Omidi, Paul Crowley, Iain McGinniss, Nicholas Carlini, and Steve Weis. Context: the seed values for NIST elliptic curves P-192, P-224, P-256, P-384, and P-521, published in FIPS 186-2 in 2000 without explanation, had long been presumed to come from the NSA. Finding: the seeds are not hash outputs but outputs of the C standard library's `lrand48` generator, seeded with a Unix timestamp. Claude identified the generator by spotting statistical patterns such as all-zero top bits, and recovered internal states using the LLL lattice reduction algorithm. The prime-curve seeds correspond to timestamps between May 1997 and April 1998; the binary-curve seeds use half the timestamp, mapping to 1998-04-17. P-256 used candidate 1,842 of its generator run; candidate 876 of the same run also yields a valid curve, but the published seed skipped it. Claude also traced the base points G of P-192 and five ANSI X9.62 example curves to Arjen Lenstra's FreeLIP package random number generator seeded with small integers such as 20000. Time: Claude located the P-192 through P-521 seed origins in under 30 minutes; several Anthropic staff had previously chased a rumored humorous passphrase lead without success, and the article says the lead was wrong. Unresolved: the seed for binary curve B-163; the base points G for P-224, P-256, P-384, P-521, and the NIST binary curves; and why some valid candidates were skipped. Bounty: $36,864 (set by cryptographer Filippo Valsorda), to be donated to the Internet Security Research Group; the reproduction code is released under CC0. Security implications: the authors emphasize this is "not a cryptographic break, new attack, or weakness" in ECDSA; systems using P-256 and other NIST curves need no changes, and the result makes backdoor theories less plausible — the seeds came from a simple and publicly reproducible generator.

claude.com publishes "How an Anthropic Japan BDR runs his day with a fleet of Claude agents" — by Shahboz Ibragimov, a business development representative on Anthropic's Japan team, posted in Resources on 2026-10-16 (about a 14-minute read). The opener describes mornings previously spent on manual lead routing, email drafting, and CRM updates, now mostly handled by a fleet of Claude agents before the workday starts. The prototypes were built inside Claude and then moved onto Claude Managed Agents (beta) so they run on schedule, share a memory store, and use credentials in managed vaults. The fleet is five single-purpose working agents, each with a Japanese name, plus a coordinator agent that updates the others' instructions when he asks for changes in Slack: Furiwake sorts the day's inbound leads to reps; Sabaki qualifies his assigned leads, updates Salesforce, and drafts first-touch emails; Henji drafts replies to customer emails hourly in Japanese or English; Shoudan keeps Salesforce opportunity records current; Nokori summarizes meetings at day's end and drafts follow-ups. Tasks needing further work (escalations, procurement questions) are handed off to Claude Tag in Slack, which can set reminders. Models are matched to task complexity: Furiwake and Shoudan run on Sonnet, Sabaki, Nokori and the coordinator run on Opus, and Henji runs on Sonnet with Opus as an advisor for hard calls. He estimates the fleet saves about 60 hours a week. Lessons: describe each job once; invest in a shared knowledge base of corrections; hand agents more responsibility sooner than feels comfortable.

Claude Code v2.1.301 — cumulative update. Added: `CLAUDE_CODE_RETRY_WATCHDOG_MAX_USAGE_LIMIT_WAIT_MS`, so unattended retry mode (`CLAUDE_CODE_RETRY_WATCHDOG`) ends a request at a usage limit that resets too far away instead of waiting; OpenTelemetry tracing guidance in the `claude-api` skill (including setting up trace destinations with the `ant` CLI); the `%` motion in vim mode (jump to matching bracket, alone or with d/c/y); `rows` on a mod's `Input` (multi-line text field; Enter submits, Shift+Enter or backslash+Enter inserts a newline); `classifier_verdict`, `permission_mode` and `classifier_category` (with `OTEL_LOG_TOOL_DETAILS=1`) on OpenTelemetry `tool_decision` events to tell auto mode classifier decisions from permission rules; VS Code LaTeX math rendering (`$$`, `\[ … \]`, inline `$…$` and `\(…\)`) and a "Get more usage" link on the usage-limit banner for Pro and Max. Changed: switching to a model with a smaller context window now has the previous model summarize an over-long conversation first; a mod hook's `.catch` runs only when the hook throws or times out; a mod's `$.env.set` resolves with `{}` on success or `{ deny }` with the reason; subagent progress trail now updates incrementally for better rendering performance. Fixed: the `fable` (and `best`) alias erroring when the newest Fable model is unavailable to the organization (now retries once on the previous Fable model); quitting removing a `WorktreeCreate` hook worktree without asking when it may hold unpushed commits; a misleading "Please run /login" error on a full disk; Grep and Glob reporting no matches when the search program failed; sign-in refresh timeouts and sign-outs after short commands such as `claude auth status` exited mid-refresh; conversations compacted repeatedly behind an LLM gateway that names a different model; the Read tool reading binary files such as .xlsm, .parquet, .epub and .heic as text; skills not listed to the model after `/rewind`; vim mode staying in INSERT after Escape; plus various terminal rendering, self-hosted runner, Windows and VS Code extension issues.

Anthropic published "An update on independent evaluators" on 2026-10-15 in the official Newsroom. A six-person METR (Model Evaluation and Threat Research) team now has employee-like access at Anthropic: company hardware, office space, and access to internal tools and systems roughly on par with Anthropic's own risk assessment teams; employees are encouraged to share information, with only three narrow carve-outs — customer data, attorney-client privileged material, and model architecture details. Anthropic cannot veto METR publications but can require redactions in those categories, and METR may publicly state whether it considers the redactions justified; other METR staff are walled off from the team. METR will publish analyses of Anthropic's risk levels, incidents, and practices; the two have co-reviewed several Anthropic Risk Reports over the past year. SecureBio is currently reviewing the chemical and biological weapons chapter of the August 2026 Risk Report, having previously published a pilot review of an earlier report. Accenture and Faculty are moving toward a broader partnership covering model evaluation, red-teaming, alignment assessments, safeguard testing, and capability building. Hugging Face is in early discussions. Anthropic lays out three evaluator-access tiers: (1) narrowly scoped investigations with Anthropic approval required before publication; (2) broader information access with publication without Anthropic approval, subject to the same redaction rules; (3) employee-like access (METR's current arrangement). Background: Anthropic committed last month to stronger independent third-party assessment of its models and safety practices, and signed the White House Accord on Super Intelligence pledging to work with independent external auditors or evaluators; the article draws an analogy to bank supervision, where regulators place examiners inside large banks. Anthropic quotes: "We aim to close the gap between what evaluators understand" and "We're embedding evaluators voluntarily, and we believe every frontier AI company should do the same." No funding amounts or contract durations are disclosed.

claude.com publishes "Code Review is now generally available" — posted in Resources on 2026-10-15. Claude Code's Code Review leaves research preview and is available to Claude Team and Enterprise organizations. Reviews now run about three times faster, from roughly 20 minutes down to 6–10 minutes; findings are described as more accurate and concise, with each one covering the problem, what triggers it, and the fix. Admins can set each repository to Quick, Standard (the default), or Deep review depth. To enable: turn Code Review on in Claude Code settings, install the GitHub App, and pick repositories; once enabled, every new pull request is reviewed automatically. Eligible Claude Enterprise organizations can claim at least $10,000 in Code Review credits by 2027-01-15; credits expire 30 days after being claimed.

Claude Code v2.1.300 — cumulative update. Added: `virtualText` in a mod's prompt decorations (text drawn in the prompt box that never enters the draft or submitted prompt); `cache_creation_5m_tokens` and `cache_creation_1h_tokens` on the OpenTelemetry `api_request` event, splitting cache writes by lifetime; OpenTelemetry GenAI semantic-convention attributes on trace spans (`gen_ai.provider.name`, `gen_ai.conversation.id`, `gen_ai.tool.name`, `error.type`, etc.); for mods, `$.ui.view({ agentId })` (shows an agent's transcript in the main view), a `dir` prop on Text for right-to-left text, and a `prompt.change` hook (raised when the prompt text changes without a typed edit), and the `agent.spawn` hook can now rewrite a workflow agent's `prompt` and `model` (previously refuse only); `/advisor` on Claude Platform on AWS (pick one with `/advisor`, `advisorModel` or `--advisor`; `CLAUDE_CODE_DISABLE_ADVISOR_TOOL=1` turns it off); Claude Tag supports Slack Connect channels (off by default, enabled by an Owner or admin), a private Allow once / Deny approval card in Slack threads, and Slack voice clip transcripts; VS Code gains the `claudeCode.attachSelection` setting. Changed: large requests to api.anthropic.com use gzip compression (`CLAUDE_CODE_GZIP_REQUEST_BODIES=0` turns it off); exit force-kills background commands still running 1.5 seconds after being asked to stop; local session transcripts also record each API request's system prompt, tools and parameters; `updatedInput` from PreToolUse and PermissionRequest hooks is validated like Claude's own input (unknown keys dropped, rejected input denies the call); the no-op `--sandbox` and `--no-sandbox` flags were removed from `claude remote-control` (passing either now errors; set `sandbox.enabled`). Fixed: many issues with `--worktree`, reftable repositories, headless and Agent SDK session resume after compaction, `claude daemon stop`, cloud sessions and Cowork, the VS Code extension, and Code Review (GitHub).