TypeSafe AI released it on 09-15, and within two weeks Vercel and LangChain integrated it, six clones appeared and field tests began in Japan.
typesafe-ai/jev) and langchain-typesafe (09-17) added support; sign-ups paused by 09-22.POST /v1/systemone (TypeSafe); Vercel offers experimental_evaluate in AI SDK 7 and /v1/evaluate.TypeSafeClassifier (LangChain) and llm-typesafe (Simon Willison's CLI plugin).Sources: TypeSafe AI · LangChain · Simon Willison · YESOD
2.1.277 (09-18) reads AGENTS.md when there is no CLAUDE.md: 740 points on HN, plus a 484-point bug report on telemetry.
/config..agents/skills is still unsupported.DISABLE_TELEMETRY=1 etc.) it was not read, since loading depended on a remote flag; fixed in 2.1.281./doctor prompt-audit in 2.1.283 (09-25) flags instructions written for older models and drift from reality.ln -s AGENTS.md CLAUDE.md long predates it, lock-in criticism.CLAUDE_GATEWAY_PROXY_IS_EGRESS_BOUNDARY=1.agents-md loading depended on the feature flag tengu_agents_md_mod (default false), issue #95690./doctor prompt-audit, availableModelsMatch, deniedModels.Sources: Claude Code changelog · szypowi.cz · Publickey · Classmethod
From 09-19 to 09-25, four independent vendors shipped controls that assume nobody is watching, in four layers.
/tools trust-all, and .env is no longer passed to MCP servers and tools automatically.rm denied after 2 min, managed model pinning./sandbox on, and the export endpoint under telemetry in managed-settings.json.availableModelsMatch, deniedModels, CLAUDE_CODE_AUTO_MODE_SERVER, gateway assume_role and guardrail.Sources: GitHub · Kiro · Claude Code · Cursor
Three vendors shipped, at different layers, features that treat an agent as an always-on actor rather than a chat partner.
azure-ai-projects; egress policies are ARM JSON (mode, defaultAction: Deny) attached through RaiConfig.platformVersion: V2.Sources: Foundry · Google · AWS · AgentCore Runtime