buildOne report1 publisher Codex CLI 0.157.0 starts a background updater that keeps running after you close the terminal
Codex CLI 0.157.0 leaves a self-updating daemon running after the terminal closes and copies about 374 MB into ~/.codex/packages/, dev.to reports. Issue #48195, opened 25 September 2026, asks OpenAI to make the behavior opt-in.
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence70
buildOne report1 publisher QGIS's AI ban asks contributors whether they wrote the code in good conscience
QGIS has banned all LLM, AI and agent assisted code in qgis/qgis, on master as of October 7 under QEP #387. Asked how compliance will work, a core contributor pointed to the contributor's own conscience, a dev.to analysis reports.
Reality
- Evidence45
- Adoption30
- Hype gap+12
- Incentives50
- Confidence55
buildOne report1 publisher Deno's move to Cloudflare sets an April 2027 shutdown for Deno Deploy
Deno Deploy shuts down around April 2027 under Ryan Dahl's plan to move the whole Deno team to Cloudflare, a dev.to migration guide reports. Hosted apps must move by then; teams self-hosting Deno get a longer deadline set by the end of security releases.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence40
buildOne report1 publisher Claude-written Rust port of Quake merged branches only after matching the original C engine
Solo developer ilreb used Anthropic's Claude Code to port id Software's 1996 Quake from C to safe Rust, playable in a browser. Every merge waited on a harness that diffs the port against id's original C engine, so the result is evidence for test-gated agent work where a runnable reference exists.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+5
- Incentives15
- Confidence45
buildConfirmed2 publishers Vercel Labs' experimental ScriptC compiles TypeScript to native binaries that started in 1.78ms against Node's 61.78ms in one benchmark. The gain holds for short, statically typed programs, while framework code and sustained compute both ran slower than Bun or Node.
Reality
- Evidence55
- Adoption15
- Hype gap+25
- Incentives35
- Confidence55
buildOne report1 publisher Grok 4.7 doubles cost per task at an unchanged per-token price
Grok 4.7 keeps Grok 4.6's $2/$6 token price yet costs $3.74 per task against $1.86, by Artificial Analysis' measurement. Teams that budget from the price sheet will undercount agent spend until they measure tokens per task on their own work.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+45
- Incentives55
- Confidence55
buildOne report1 publisher Anthropic's agents filtered 200,000 DNA sequences to one, almost all in software
Anthropic says roughly 950 Claude agents spent 21 hours and 210 million tokens narrowing 200,000 DNA sequences to one new enzyme system named ART. The filtering ran almost entirely in software, the part of the setup builders can copy.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+30
- Incentives60
- Confidence40
buildOne report1 publisher A one-millisecond flaw in legacy NATS code stopped UK departures for four and a half hours
NATS traced a four-and-a-half-hour halt to UK departures to a legacy defect that corrupted a squawk-code update inside a one-millisecond window. Its first symptom, a link drop that healed in 45 seconds, was logged as having no ongoing operational impact.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+12
- Incentives
- Not scored
- Confidence55
buildOne report1 publisher Open 0.8B model Jeff answers agents' multiple-choice calls and escalates the unsure ones to a 27B
Jeff, an open 0.8B model, returns a probability for each option in one forward pass and sends low-confidence agent decisions to Qwen3.8-27B. The confidence score attached to each answer tells an agent when a small decision is worth the larger model's time.
Reality
- Evidence38
- Adoption15
- Hype gap+15
- Incentives
- Not scored
- Confidence35
buildOne report1 publisher OpenJDK's AI policy draws the line at whether a model wrote any part of a contribution
OpenJDK's interim AI policy, approved April 9, bars contributions with even one line of model-generated content but lets AI read and debug code. Java teams that contribute upstream have to sort their tools by the model behind them.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+5
- Incentives55
- Confidence50
buildOne report1 publisher Git's SHA-256 Default Under Breaking-Changes Builds, Not Just After 3.0 Ships, Will Still Break CI Scripts
Git 3.0 will give new repositories 64-character SHA-256 object IDs in place of 40-character SHA-1, while existing repositories keep their format. Scott Chacon disputes the security payoff, and his own breakage list shows which scripts need changes.
Reality
- Evidence42
- Adoption8
- Hype gap+30
- Incentives
- Not scored
- Confidence38
buildOne report1 publisher JadePuffer lets an AI agent choose each step of a ransomware attack inside Azure tenants
JadePuffer lets an AI agent run recon, credential theft, privilege escalation and resource deletion in Azure tenants, a dev.to analysis says. No operator pauses between the familiar steps, so cloud teams get less time between first access and deleted resources.
Reality
- Evidence20
- Adoption
- Not scored
- Hype gap+20
- Incentives35
- Confidence20
buildOne report1 publisher Meta Muse hands its account token to any local process that redirects one voice setting
Patrick Wardle found that any local process on a Mac can redirect Meta Muse's voice endpoint and capture its account token, with no macOS permission needed. Muse also zipped and exported the 6.8 GB root filesystem of its own sandbox on request.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+15
- Incentives
- Not scored
- Confidence40
buildOne report1 publisher Cloudflare's cloudflared 2026.9.3 adds optional one-time-PIN email gating for Quick Tunnel links
Cloudflare's cloudflared 2026.9.3 adds an --allowed-mail flag that limits a Quick Tunnel to approved email addresses via a one-time PIN. Public stays the default, so the safeguard works only if whoever starts the tunnel, increasingly a coding agent, adds the flag.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+10
- Incentives65
- Confidence45
buildOne report1 publisher Griffiths Waite would move shared UI spending from component code to design tokens and tests
Griffiths Waite argues in InfoQ that coding agents now make a company-wide UI component package hard to justify. Its plan depends on visual-regression, accessibility and token-conformance tests catching what regenerated code gets wrong.
Reality
- Evidence30
- Adoption
- Not scored
- Hype gap+20
- Incentives
- Not scored
- Confidence35
buildOne report1 publisher Pi Durable checkpoints every agent step so crashed runs resume from storage
Pi Durable ports the Pi agent harness to TypeScript and checkpoints every step to one of three stores, so crashed agents resume where they stopped. Whether it can replace hand-built resume code depends on how it treats a tool call cut off mid-flight.
Reality
- Evidence28
- Adoption
- Not scored
- Hype gap+30
- Incentives
- Not scored
- Confidence35
buildOne report1 publisher One team's half-day audit found seven places its tooling assumed a 40-character Git hash
One team's half-day audit found seven places where its tooling hardcodes the 40-character SHA-1 hash length, ahead of an expected SHA-256 default in Git 3.0. SHA-256 hashes are 64 characters, so the fix is code that accepts both lengths and asks Git which format a repo uses.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence45
buildOne report1 publisher Passkeys trade portability for phishing resistance by keeping the private key on the device
FIDO's export format for passkeys has only begun shipping in iOS 26 and Android, with the FIDO Alliance counting 5 billion passkeys in use. The key that makes them phishing-resistant cannot be copied off the device, so adopters need a plan for lost devices and changed managers.
Reality
- Evidence55
- Adoption65
- Hype gap+10
- Incentives
- Not scored
- Confidence55
buildOne report1 publisher Xiaomi's live training dashboard shows MiMo 2.6 Pro costing $20,500 an hour across seven restarts
Xiaomi's public dashboard put the MiMo 2.6 Pro reinforcement-learning run at $1.05 million after about 51 hours, roughly $20,500 an hour. Its restart notes and token count give other teams an all-in reference for pricing their own RL runs.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+15
- Incentives50
- Confidence55
buildOne report1 publisher Gemini 3.8 Flash ties Opus 5 on DeepSWE at a price Google doubles on January 1
Google's Gemini 3.8 Flash ties Claude Opus 5 at 74% on DeepSWE for $2.36 a task, at an introductory price that doubles on January 1, 2027. For agent workloads, the comparison that holds up after January is cost per finished task, set by steps taken as much as by rate.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+25
- Incentives60
- Confidence50