Phantom Notes.
Field intelligence on AI models, agents, and enterprise IT. Verified numbers stated as facts, vendor numbers labeled as vendor numbers. By T.W. Ghost.
NOV 02, 2026
GitHub Will Block pull_request_target by Default on December 2. Brownouts Come First, on November 9 and 16, 16:00 to 18:00 UTC.
GitHub's changelog of November 2 sets December 2, 2026 as the date the pull_request_target trigger is blocked by default in GitHub Actions, with two planned brownouts on November 9 and November 16 from 16:00 to 18:00 UTC so maintainers see failures before the permanent change. Teams that planned against an earlier date got a delay, not a cancellation; the earlier October 29 changelog URL now returns a 404 and is superseded. We read the November 2 changelog.
AI Tools3 min read→Nº 135NOV 02, 2026
Anthropic's Ban on Abusing Claude Takes Effect November 12. Ending the Chat Is the Primary Penalty, Not the Only One.
Anthropic's 2026 Usage Policy update, published October 8, takes effect November 12. It adds a prohibition on sustained and needless abusive or cruel behavior toward models, scoped to extreme and repeated cases and excluding frustration, pushback, dark creative themes, and model testing. Claude ending the conversation remains the primary enforcement mechanism on Claude.ai and Claude Code. The same update consolidates deceptive-campaign rules, drops the blanket ban on personalized vote targeting, extends weapons prohibitions to guidance and control software, rewrites the surveillance section, and adds stop and safe-state requirements when Claude drives hardware. This is Anthropic's policy, separate from OpenAI's November 20 rules. We read the news post.
AI Tools3 min read→Nº 132NOV 01, 2026
Your Claude Text Carries a Watermark You Cannot Turn Off or Check. Grok's API Watermark Starts November 7, and Admins Can Opt Out.
Anthropic's help center says it signed the EU AI Act Article 50(2) Code of Practice and that supported Claude models embed machine-readable text watermarks across the API, the apps, Claude Code, Claude Cowork, Claude Tag, and the cloud partners, worldwide. Detection is a private preview for eligible organizations, and there is no user opt-out. Anthropic's own limitations note says Opus 4.6 and Sonnet 4.6 may not carry the mark reliably under non-default temperature, top_p, or top_k. xAI takes the opposite posture: from November 7, listed Grok models watermark by default on every API endpoint, with an x-watermark response header and a per-model opt-out for team admins in the console. We read both help pages.
AI Tools3 min read→Nº 131OCT 31, 2026
gpt-6-astra-law Is on the Pricing Page at Plain Astra's Rate, Labeled Promotional Through December 31. FedRAMP Endpoints Get a 10% Uplift From November 1.
OpenAI's API pricing page lists gpt-6-astra-law under legal model configurations at $10 input, $50 output, and $1 cached per million tokens, with a note that the promotional price holds at least through December 31, 2026. That matches plain gpt-6-astra, which implies a premium afterward that OpenAI has not published. The same page says that starting November 1, 2026, FedRAMP endpoints are charged a 10% uplift, alongside the existing 10% uplift for regional data residency on models released since March 5. Whether the law configuration still requires Trusted Access is unverified. We read the pricing page and the Astra for Law launch materials.
AI Tools3 min read→Nº 130OCT 30, 2026
AWS Says GPT-5.6 Terra and Luna Are Live on Bedrock in GovCloud. OpenAI's Own Bedrock Doc Lists Commercial GPT-6 IDs and No GovCloud Models.
AWS's What's New post of October 30 says Amazon Bedrock now serves OpenAI's GPT-5.6 Terra and Luna on the bedrock-runtime endpoint in AWS GovCloud (US), with the Responses, Converse, and Chat Completions APIs and cross-region inference across both GovCloud regions. OpenAI's Codex-on-Bedrock documentation lists commercial GPT-6 Astra, Sol, and Luna inference profiles and no GovCloud Terra or Luna IDs, and an AWS troubleshooting note still describes the GovCloud endpoint as reported unsupported and tells readers to confirm with OpenAI. GovCloud gets last-generation models. We read the AWS post, the AWS blog walkthrough, and OpenAI's Bedrock pages.
AI Tools3 min read→Nº 126OCT 30, 2026
OpenAI, Google, Microsoft, and Anthropic Will Honor One robots.txt No-AI-Training Token. Only Microsoft Has Given a Date: February 1, 2027.
On October 30 the four labs said they will honor a shared robots.txt preference from the IETF AIPREF draft: a User-Agent of __usage_ai-training with a Disallow line. Microsoft will honor it as it crawls from February 1, 2027, and will stop reading NoArchive and NoCache for training and grounding after March 1, 2027. Google aims to support it in 2027 and will treat the shared opt-out like a Google-Extended disallow where none is set. OpenAI says the coming months. Anthropic's commitment is press-only so far. The token is still a draft, nobody honors it today, and it does not undo past scraping. We read the OpenAI, Google, and Bing posts.
AI Tools3 min read→Nº 125OCT 30, 2026
Claude Max 20x Is Now Ultra at the Same $200. The 20x Was Only Ever the Five-Hour Cap; Weekly Stays at 10x Pro.
On October 30 Anthropic renamed Max 5x to Max at $100 and Max 20x to Ultra at $200, with no price change. Per the pricing page and the Ultra help article, Max is 5x Pro every five hours and every week; Ultra is 10x Pro weekly with no five-hour limit for verified accounts, where verification runs on account and payment history and phone verification does not count. API credits are $100 a month on Max and $200 on Ultra, and Fable is capped at 50% of weekly on both. Existing Max 20x subscribers move to Ultra automatically. Anthropic's product lead says, through secondary reports, that the old 20x only ever applied to the five-hour window and weekly was always 10x Pro, which makes this a rename and not a raise. The October 22 SemiAnalysis A/B remains unconfirmed. We read the pricing page and the help article.
AI Tools3 min read→Nº 120OCT 29, 2026
OpenAI Said It Doubled Every Pro Tier. Its Own Help Page Says Pro 200 Only Doubled the Lower Allowance.
On October 29 OpenAI's Thibault Sottiaux posted that usage limits were doubling for all Pro 100, 200, and 500 tiers and Business Premium, effective that day, and that Pro 200 would not be cut. The help page confirms the September 29 reduction is canceled and Pro 200 is reopened at $200, and it says Pro 100 and Pro 500 get twice their previous Work and Codex allowance. It also says that on Pro 200 only the lower allowance doubled: seats that already had the higher allowance keep what they had. Ultrafast stays Pro 500 only, at 8x Standard allowance and 6x credits. No absolute allowance numbers are published anywhere. We read the help page and the press relays of the post.
AI Tools3 min read→Nº 115OCT 27, 2026
Anthropic's New OneGov Deal Is 40% Off Tokens. The Old $1 Claude Enterprise and Government Offer Expires October 31.
GSA and Anthropic expanded OneGov on October 27: 40% off token-based usage across Claude Enterprise, Claude for Government, and the Claude API, including FedRAMP environments, with no minimum purchase, extended to state, local, tribal, and territorial governments, direct now and through cloud providers in the coming months. Anthropic says about 500 government organizations use Claude and estimates $1 billion in savings, a vendor projection. Nextgov reports a 27-month term to January 31, 2029 and notes OpenAI's OneGov token discount is 50%; both are press until GSA prints them. The prior $1-per-user offer ends October 31, so for many agencies this is a move from near-free seats to metered tokens. We read the GSA release, Anthropic's post, and Nextgov.
AI Tools3 min read→Nº 108OCT 26, 2026
Cloudflare Served Other Customers' GLM-5.3 Data in 155 Responses Over Two Weeks. It Knew the KV Pool Was Too Small Before Launch.
Cloudflare disclosed on October 26 that from August 27 to September 9 its Workers AI GLM-5.3 endpoint returned fragments of other customers' recent requests in 155 responses, all to prompts longer than 681,280 tokens. The model advertised a 1,048,576-token context while its prefill KV pool held 681,280, a mismatch Cloudflare says it knew about and expected to produce an error, and an SGLang disaggregated prefill-decode bug let decode read stale cache. A Knostic researcher reported it September 8; the model was offline within 40 minutes and restored September 9. Disclosure came about seven weeks after the fix. We read Cloudflare's post, LMSYS's post, and the status page.
AI Tools3 min read→Nº 107OCT 26, 2026
New Paid Gemini API Projects Now Log Prompts and Responses by Default. Google's Policy Keeps Those Logs Up to 55 Days Unless You Shorten It.
Google's Gemini API changelog for October 26 says new paid-tier projects now store Generate Content API requests by default, with store set to true for generateContent, streamGenerateContent, and batchGenerateContent. Existing projects keep their current setting. You can opt out per request or in the Logs and Datasets dashboard. Google's logs policy sets a default maximum retention of 55 days, with 7, 14, or 28 as the shorter options, and says ordinary logs are not used for training unless you contribute them as a dataset. We read the changelog and the policy page.
AI Tools3 min read→Nº 100OCT 23, 2026
Claude on Google Cloud Now Comes in Two Versions at the Same Price. The One With Day-Zero Features Makes Anthropic Your Data Processor, Not Google.
Google Cloud made an Anthropic-managed Claude deployment generally available on October 23 beside the existing Google-managed one: same models on day zero, same price, same GCP billing. The split is control. Anthropic-managed gets Managed Agents, skills, and code execution on day zero with Anthropic as data processor; Google-managed keeps CMEK, VPC Service Controls, and residency with Google as processor and new features once integrated. Two days earlier OpenAI's models arrived on Vertex as a private preview with zero data retention still coming soon. We read both Google Cloud posts and OpenAI's.
AI Tools4 min read→Nº 95OCT 22, 2026
OpenAI's Decisions API Is Generally Available. GA Still Comes With No Calibration Number, Only Customer Quotes Saying "Comparable Accuracy."
OpenAI marked the Decisions API generally available on October 22, still on gpt-6-luna only, still $0.10 per million input tokens with output free. New since the beta: prompt caching, up to 400 questions per request, hosted image URLs, and residency options. OpenAI still publishes no calibration data; the GA post cites five customer quotes instead. Two days earlier it added a 12-hour prompt-cache tier whose writes cost 2.5 times input, which only pays if you would otherwise rewrite the same prefix twice. We read the changelog, the guide, and the pricing docs.
AI Tools5 min read→Nº 93OCT 21, 2026
OpenAI's Agents Found a Critical Hole in the Compression Library Inside Node, Bun, and Python. The Fix Sat in Brotli's Source Since February.
CVE-2026-111497 is an out-of-bounds write in Google Brotli's C decoder, reported through OpenAI's Codex Security work during the red-team campaign behind its offline-training announcement. Node.js shipped 22.23.4, 24.22.1, and 26.12.1 on October 21; Bun, the Python brotli bindings, and proxies that decompress Brotli are in the blast radius. OpenAI says the fix was in Brotli's source around February with no broad consumer release until October, and Imperva's Node2Shell demonstrated code execution on an unmodified Node 24 build. We read the Node advisory and OpenAI's post.
AI Tools3 min read→Nº 91OCT 21, 2026
OpenAI Now Requires Prior Approval to Resell Direct Model Access. It Published No Form, No Criteria, and No Grandfathering.
OpenAI's Usage Policies update, dated October 21 in the changelog and effective November 20, 2026, requires prior review and approval for anyone operating a model-access intermediary platform that lets third parties directly access OpenAI models, and expands its anti-distillation rules to cover training data, rubrics, RL environments, labels, rankings, and evaluation outputs later used for training, even if you never train a model yourself. Integrating OpenAI into your own app's features is explicitly not enough to trigger the intermediary rule. There is no published application process, timeline, or grandfathering for existing routers and gateways. We read the policy page and OpenAI's companion post.
AI Tools3 min read→Nº 81OCT 17, 2026
OpenCode Console Leaked Provider Keys, and Its Budget Cap Could Not Stop the Bills. Here Is What to Revoke and Where.
OpenCode said on October 17 that an attacker reached a legacy system and may have exposed the OpenAI, Anthropic, and Google keys that 1.4% of OpenCode Console users had linked. Users then reported overnight charges in the hundreds and, in one case, about $1,700. Console's budgets only meter requests that pass through Console, so they could not cap a stolen key used straight at the provider. Anthropic revoked affected keys, Google blocked them, and OpenAI says it refunded. The local CLI was not involved. What to revoke, where to set limits, and what OpenCode still has not explained.
AI Tools5 min read→Nº 78OCT 15, 2026
Vercel's Token Pass Gives You $80 of Kimi K3 and GLM 5.3 for $30. No Rollover, No Overage, and a 403 When It Runs Out.
Vercel's Token Pass, in early access since October 15, gives Pro teams $80 of monthly credit on GLM 5.3 and Kimi K3 for $30, served through Wafer with zero data retention by default. The credit spends at per-token rates shown only inside the dashboard; Wafer's public Gateway rates, our stand-in, cut GLM 5.3 across the board and Kimi K3 input by about 92% while Kimi output runs $16 per million against Moonshot's $15. Unused credit does not roll over, there is no overage, an empty balance returns a 403, and Vercel can change the models or the provider at any time. We read the changelog, the docs, and the Gateway price rows.
AI Tools6 min read→Nº 66OCT 06, 2026
OpenAI's Decisions API Answers in 170 Milliseconds for $0.10 per Million. It Does Not Say How Often It Is Right.
OpenAI opened the Decisions API to public beta on October 6: typed yes/no, choice, and score answers from GPT-6 Luna at $0.10 per million input tokens with output free, about ten times faster than the Responses API. It is OpenAI's answer to TypeSafe's Jev, three weeks after Jev became Vercel's fastest-adopted model. The catch is that OpenAI publishes no calibration or accuracy data for the probabilities it returns, and the one independent calibration test of Luna so far put its expected calibration error at ten times Jev's. We read the guide, the SDK source, the pricing page, and every independent measurement we could find.
AI Tools10 min read→Nº 60SEP 24, 2026
Jev Is Not an LLM, and Vercel Says Nearly 13% of Paid Teams Tried It in a Day. The 444x Is TypeSafe's Own Math.
TypeSafe AI came out of stealth on September 15 with $40 million from DCVC and Jev, a model that answers typed questions with probabilities and generates nothing. Vercel put it on AI Gateway the next day and says nearly 13% of paid teams used it within 24 hours, the fastest adoption in Gateway history. The 193.6x and 444.6x headlines are TypeSafe's own numbers against its own workflows; on accuracy, TypeSafe's evals table and the independent tests both put Jev level with mid-price LLMs and behind the frontier.
AI Tools12 min read→Nº 56AUG 15, 2026
Seedance 2.5 Makes 30-Second Movies With Sound. The 4K Claim Is Marketing.
ByteDance's new video model generates 30 seconds of picture and audio in one pass, takes 50 reference files, and edits existing footage by timestamp. We verified the specs against every live API: the real output caps at 720p, the price is up roughly 50% over Seedance 2.0, and the new model has no independent leaderboard score yet. The current champion is its own predecessor.
AI Tools11 min read→Nº 38MAY 10, 2026
Grok Imagine Quality Mode: xAI's Enterprise Play in Image Generation
xAI's Grok Imagine Quality Mode launched May 6, 2026 with stronger realism, multilingual text rendering, and tighter brand control. They rank #3 on Text-to-Image Arena at 1223 ELO, behind OpenAI (1398) and Google (1268), but they shipped the right enterprise features.
AI Tools5 min read→Nº 37APR 23, 2026
GPT-5.5 Ships at Double the Price: The Benchmark Picture Is More Mixed Than OpenAI's Marketing
OpenAI shipped GPT-5.5 on April 23, 2026 with a "new class of intelligence" pitch, claiming #1 on the Artificial Analysis Intelligence Index and a +13 point lead on Terminal-Bench 2.0. But SWE-Bench Pro still goes to Claude Opus 4.7, MCP Atlas still goes to Opus and Gemini, and the API price just doubled to $5/$30 per million tokens. Here's the honest breakdown of wins, losses, and when GPT-5.5 actually beats the alternatives.
AI Tools8 min read→Nº 36APR 22, 2026
ChatGPT Images 2.0: The First Image Model That Thinks, and What That Actually Buys You
OpenAI shipped gpt-image-2 on April 21, 2026. It is the first image model with web search, layout reasoning, multi-image batching, and output verification baked in. Up to 2K resolution, 8-image consistent batches, best-in-class non-Latin text, and a +316 point Arena jump on text rendering. Here's what actually works, where it still breaks, and how it lands against Nano Banana 2, Flux, and Midjourney.
AI Tools8 min read→Nº 35APR 21, 2026
OpenAI's Codex Becomes a Super-App: Computer Use, Atlas Browser, Image Gen, and 111 Plugins
On April 16, 2026 OpenAI repositioned Codex from agentic coding assistant to full developer workstation. Computer Use on macOS, an embedded Atlas browser, gpt-image-1.5 inline, 90-plus curated plugins, scheduled automations, and memory preview. Here's what shipped and how it compares to Claude Code.
AI Tools8 min read→Nº 34APR 19, 2026
MemPalace: The Local-First AI Memory System With 48,000 Stars
MemPalace stores verbatim AI conversations as a searchable knowledge graph on your own machine. No API keys, no cloud, 29 MCP tools, 96.6% retrieval recall. Here is what it does, how it compares to Claude Code memory and LightRAG, and when to use which.
AI Tools9 min read→