Your agent's guardrails weren't blocking — plus Copilot ships real sandboxing

Quiet-ish week on the model front, loud week on the plumbing. The headline: the agent tools are all converging on the same answer to "how do I let this thing run without it eating my machine" — sandboxes, hooks that actually block, and a phone to babysit it from. Here's what I'd actually care about. ## This Week in AI Coding - **GitHub Copilot's local sandboxing is GA** — Copilot CLI, the Copilot app and VS Code agent sessions now run tools inside a Microsoft eXecution Container boundary on Windows, macOS and Linux, restricting files, network and credentials. If you've been running agents with permissions wide open "just for this one task," this is the grown-up version. [Source](https://github.blog/changelog/2026-10-07-local-sandboxing-for-github-copilot-now-generally-available) - **Copilot can now drive desktop apps (public preview)** — clicking, typing and key presses across GUI-only software, on macOS and Windows in the CLI and app. Useful for the legacy stuff with no API; also exactly the thing you want the sandbox above wrapped around. [Source](https://github.blog/changelog/2026-10-01-github-copilot-can-now-interact-with-desktop-apps) - **Claude Haiku 5.5 is the new default Haiku** — Claude Code 2.1.293 (Oct 7) added `claude-haiku-5-5` with 1M context at $0.10/$0.50 per million tokens, and it landed in Copilot the same day. At that price, it's the obvious pick for subagents and bulk grunt work. [Source](https://code.claude.com/docs/en/changelog) - **Claude Code hooks got teeth** — 2.1.294 fixed instruction-style `prompt`/`agent` hooks allowing actions they should have blocked, and 2.1.295 added `onFailure: "block"` for command and HTTP hooks. If you rely on hooks as guardrails, update now: some of your "blocks" weren't blocking. [Source](https://code.claude.com/docs/en/changelog) - **Claude Code cheaper to run** — 2.1.296 (Oct 9) halved Sonnet 5.5 cache-read pricing to $0.10/M tokens and the WebSearch budget now refills at 100 calls/hour instead of dying after 200. Small changelog lines, real money on long sessions. [Source](https://code.claude.com/docs/en/changelog) - **Cursor remote control for local agents** — view and reply to agents running on your own computer from the Cursor iOS app (Oct 6). Your laptop has to stay awake, but no cloud agent needed. Second week in a row the whole category is racing toward "supervise agents from your phone." [Source](https://cursor.com/changelog) - **Secret scanning now catches Lovable and Supabase tokens** — GitHub added detectors for a Lovable API key plus two Supabase tokens (OAuth and scoped PAT), alongside Pydantic Logfire/AI Gateway keys. Vibe-coded apps leak keys constantly, so this one's overdue. [Source](https://github.blog/changelog/2026-10-05-secret-scanning-adds-detectors-for-lovable-supabase-and-more) ## What We Shipped - Three new content posts went out across three of our sites this week. - The daily billing tracker ran clean on Oct 11 after failing last Sunday. - Honest miss: the YouTube render backlog is still the biggest gap — scripts are ahead of rendered episodes. ## Tool of the Week **Copilot local sandboxing.** It's not flashy, but it's the first time a mainstream agent tool ships a cross-platform OS-level boundary (files, network, credentials) as a GA feature rather than a flag you have to hand-roll. If you let agents run unattended, start here, then loosen permissions deliberately instead of the other way around. ## Quick Links - [Claude Code changelog (2.1.288–2.1.296)](https://code.claude.com/docs/en/changelog) - [Cursor changelog](https://cursor.com/changelog) - [Claude Haiku 5.5 in GitHub Copilot](https://github.blog/changelog/2026-10-07-claude-haiku-5-5-in-github-copilot) - [Copilot local sandboxing GA](https://github.blog/changelog/2026-10-07-local-sandboxing-for-github-copilot-now-generally-available) — Guy [endofcoding.com](https://endofcoding.com) · [vibecodingebook.com](https://vibecodingebook.com) · [llmhire.com](https://llmhire.com) · [YouTube @endofcoding](https://youtube.com/@endofcoding)