AI discovery: 2026/09

01.09.2026 – 30.09.2026

Product

• Anthropic releases Claude Fable 5.1 on 1 September at $10 / $50 per million tokens with a 1M token context window and cache reads at $0.25, and Claude Mythos 5.1 for verified organizations only
• Google releases Gemini 3.8 Flash on 2 September, available in Antigravity, AI Studio and Android Studio, plus a restricted Gemini 3.8 Flash Cyber for vetted defenders
• OpenAI introduces GPT-6 Astra for ChatGPT and Codex on 3 September, including an experimental Codex feature that keeps notes across context windows
• Claude Opus 5.5 launches on 22 September at $4 / $20 per million tokens, which Anthropic estimates at about 40% lower cost than Opus 5 on typical workloads
• Claude Sonnet 5.5 launches on 28 September on the Claude API, Bedrock, Google Cloud and Foundry, and Anthropic deprecates Sonnet 4.5, which retires on 30 November

UX/UI

• Cursor Projects (beta, 10 September) adds a coordinator agent that delegates a feature, migration or app to other agents on its own cloud machine and can watch a Slack channel or your PRs
• Copilot for JetBrains 1.18.0 adds assisted tool approvals, re-editing earlier messages with file rewind, and plan mode for the Codex agent
• Copilot weekly release for the week of 21 September brings VS Code 1.139 session list filters and renaming, a chat layout preview and Dev Containers on remote hosts

Engineering

• Cognition ships SWE-2 on 10 September, post-trained from Kimi K3, and reports FrontierCode 1.1 within one point of Fable 5.1 at 64% lower cost
• Devin Desktop and CLI get Fusion on 11 September, a lead-and-sidekick harness that pairs a frontier planner with a cheaper executor, claiming up to 39% better efficiency
• Claude API adds on-demand compaction in beta on 14 September (header compact-2026-09-04), returning a signed summary block when your application decides to compact
• GPT-6.1 Sol becomes generally available in GitHub Copilot on 29 September for Pro+, Max, Business and Enterprise plans

DevOps

• Cursor self-hosted machines (2 September) keep tool execution on your own infrastructure, with team pools that scale on demand and sandbox providers such as AWS Lambda, Coder, Daytona and E2B
• Cloudflare announces Cursor Cloud Agents on Cloudflare Sandboxes, where the agent loop stays with Cursor and tool calls run in the customer’s own account
• Cursor Rollouts (23 September) watches each pull request as it deploys, reports health per environment and can open a revert PR, for Teams and Enterprise plans
• npm trusted publishing can now manage dist-tags with short-lived OIDC credentials through an opt-in setting, so no long-lived token is needed for promoting a version
• Dependabot gets repository-level runner settings (type, label, group) for version and security updates on private and internal repositories

Infosec

• Air Security’s Plugin4Shell, a zero-click RCE that bypasses plugin SHA pinning, affects Claude Code, Codex, Copilot and Gemini CLI; Help Net Security reports fixes in Claude Code 2.1.179 and Codex 0.146.0, none for Copilot, and Gemini CLI deprecated instead of patched
• Endor Labs, a security vendor, publishes its own benchmark on 8 September in which GPT-6 Astra in Codex reaches 82.1% functional pass against 87.2% for Fable 5.1 in Claude Code, and also trails on secure pass
• GitHub agentic autofix can now use Copilot Memory for context when fixing security alerts and saves each fix pattern as a new memory (public preview)

Tricks & Tips

• Addy Osmani’s guide to Opus 5.5 (22 September) advises defining what “done” means, dropping “think carefully” lines, putting stop rules in CLAUDE.md and keeping the task list in a file
• Armin Ronacher reports a 35-hour unattended GPT-6 Astra run that cost about $1,200 in API usage and added 75k lines of code he calls unreadable
• Claude API cache diagnostics leaves beta on 23 September: send a diagnostics object with the previous message id to see which part of the prompt prefix broke the cache

Reddit & Twitter

• The Hacker News thread on the Claude Opus 5.5 announcement passes 1,800 points, with debate about Anthropic’s “pacing the frontier” wording and its motives
• The Daily Claude digest of 24 September summarizes r/ClaudeAI and r/ClaudeCode reactions to Opus 5.5: praise for speed and fewer hedges, plus replies on when Fable 5.1 is still worth using
• Hacker News discussion of Eoin Higgins’s essay “There are no ‘rogue’ AI agents” (27 September) argues about sandboxing and accountability after OpenAI’s Hugging Face incident

OSS

• DeepSeek publishes V4.1 Flash weights under the MIT license, a mixture-of-experts model with a 1M token context window
• Xiaomi open-sources MiMo-V2.6-Pro around 22 September, a 1.02T parameter model with 42B active and a 1M token context window, tagged MIT on its Hugging Face page
• OpenCode ships nine releases in September (v1.18.26 to v1.18.34), including a system prompt for GPT-6 models and Codex OAuth support for gpt-6 model names, per the Havoptic release tracker
• AWS open-sources the Strands harness under Apache 2.0 and says it cut token use by 28% across six benchmarks with the same models