GPT-5.5 has a 1M-token window but a price step at 272K input tokens — and crossing it reprices the whole request, not just the overflow. Here's the trap that ambushes long-running agents, and four ways to stay under it.
Managed Agents bill on two axes — tokens and wall-clock session time — and half the cost tricks you use everywhere else are switched off here. Here's the meter, the exceptions, and the one lever that still works.
Flipping inference_geo to "us" pins where the model runs and adds 10% to every token — but it does not, by itself, pin where your data is stored. Those are two different knobs, and founders keep flipping the wrong one.
When a tool call fails, the two big APIs want you to say so in completely different ways. Anthropic has a dedicated is_error flag; OpenAI has no error field at all — you put the failure in the ordinary output string. Get this one detail wrong and your agent either 400s or silently trusts a broken result.
The client is Apache-2.0 and self-hostable; the brain is still OpenAI's. Here's what `@openai/codex-security` actually does, the exact commands to run your first scan, and the one flag that decides whether founders can trust it in CI.
v2.0.0 shipped with the 2026-07-28 spec and split `@modelcontextprotocol/sdk` into nine subpackages. The split isn't bookkeeping — it's the packaging finally matching a stateless world. Run the codemod, pick two or three packages, delete the fat import.
There's no converter button. Classic ran your config; AgentCore runs your code. Here's the concrete port map — reuse the Lambdas and Knowledge Base, rewrite the orchestration — with the verified CLI and SDK calls, ARM64 gotcha included.
A single standard parameter now sets reasoning effort across OpenAI, Anthropic, xAI, and Fireworks. It's portable. It is not equivalent — 'medium' means a fixed gear on one provider and half your token budget on another.
You can't compute recall@k or MRR without labeled (question, relevant-chunk) pairs — so bootstrap them from your own chunks with an LLM, then score your retriever in ~15 lines of numpy.
V4 Flash 0731 shipped July 31 as an OpenAI-compatible model: two lines to point your agent at it, one extra_body flag to turn thinking on or off, and one gotcha in the 384K-token output ceiling. Python, Node, and curl.
Simile just raised $200M at $2B to sell simulated customers. You can build a rough, honest version this afternoon — good enough to kill a bad pricing page before real users ever see it, as long as you calibrate it and never trust it as a verdict.
Two things collided this month. On July 31 DeepSeek shipped V4 Flash 0731 — an open-weight model that beats its own Pro on agent benchmarks at $0.14/$0.28. On August 31 Claude Sonnet 5's $2/$10 introductory price expires and jumps 50%. If bulk agent work is your biggest line item, this is the decision to make before the cliff.
The August 4 build extends sandbox credential masking from environment variables to files on Linux and WSL — a sandboxed command reads a decoy copy while the proxy swaps in the real secret on egress. Here's the mechanism, the one setting it depends on, and where it quietly falls back to a hard deny.
Three experimental endpoints — generate, improve, and templatize a prompt — return an error after August 17, and the legacy Workbench that held your saved prompts and evals goes with them. Here's what to export today and a copy-paste replacement that no vendor can deprecate.
On August 5, calls to claude-opus-4-1 stop working — no grace period. And on Opus 4.7 and later, setting temperature, top_p, or top_k at all now returns a 400. Both are one-line fixes if you catch them before your users do.
Wiring the three memory layers is the easy part. Keeping them healthy over weeks of real traffic is where agents fall over. Here are the four ways memory rots — unbounded growth, stale retrieval, no forgetting, and poisoning — and the specific fix for each.
OpenAI open-sourced its Codex Security CLI in late July, and it emits SARIF — the same format GitHub's Code Scanning tab already reads. Here's the copy-paste pipeline that turns an AI scanner into a real, blocking PR gate, plus the one setting that stops it from crying wolf.
The gap between 'send' and the first visible token is where users decide your product feels fast or broken. Here's the end-to-end SSE path — backend to browser — and the buffering bug that silently un-streams it.
One command starts the server. The VRAM formula tells you which open models you can actually run on a founder budget — and the cost-per-million math tells you when self-hosting beats just paying the API.
Astra proved ten open math problems and handed over Lean 4 certificates a machine can check without trusting the model. You don't need a frontier lab to copy the pattern — here's the builder's version, with code, for making any long-running agent's output verifiable.
The transparency rules went live on August 2, 2026. If your product talks to users or generates media, you now owe two things: a disclosure users can see, and a mark machines can read. Here's the disclosure snippet, the C2PA signing command, and the deadline you can still miss.
DeepSeek retrained V4-Flash and shipped it under the same name and endpoint this week — zero migration, and zero warning that your production behavior just moved. Here's how to detect a swap you don't control, before your users do.
The store you pick today is the store you'll outgrow. Put a two-method interface in front of it now, and moving from a file to a service becomes a migration you run in an afternoon — not a rewrite you dread.
OpenAI turned ChatGPT into a login button on August 2. The decision pieces tell you whether to add it; none show you the wiring. Here is the whole flow — authorization-code + PKCE against auth.openai.com — with the redirect, the token exchange, and the exact three claims you get back, in one Node file.
Elicitation used to be a local-server luxury. The stateless core and Multi Round-Trip Requests finally let a remote server pause a tool call, ask the user for structured input, and resume — here's the code.
Your provider invoice is one number. Cost per 1K tokens tells you nothing about which customer, feature, or job is bleeding money. Here's how to group per-call token spend into per-task cost with OpenTelemetry's GenAI conventions and Langfuse — with the exact attributes and code.
The overview posts told you 0.26 grew a memory hierarchy. This is the hands-on version — the real flags, a KV-bytes-per-token sizing rule, and the three metrics that prove offload is helping instead of hurting.
The first video model you can prototype on an API this afternoon and self-host later. Here's what it is, who made it, exactly how to get a clip out of it, and the license line that decides whether it's free for you.
Every agent-memory tutorial names a different set of things "memory." There are only two axes underneath, and once you can see them the vendor menu stops being confusing.