SOC 2 Type II
Verify each vendor’s current trust center and the product and contract scope of its SOC reports.
The AI Developer Toolkit changelog records two things in one timeline: what changed in Cursor, Claude Code and Codex — releases, model launches, pricing and breaking changes — and what shipped in the guide itself. Entries run newest first, from September 2026 back to the version 1.0.0 release of July 2025, each carrying its date and version numbers.
The AI development landscape changes weekly. New models drop, pricing shifts, features land across all three tools, and the documentation that explains them has to move with it. This page is the record of both, so you can see at a glance whether a guide predates the release it describes.
ladder/index (the six-level table and a self-placement checklist), level-1-2-assisted-paired (where Shapiro puts about 90% of AI-native developers, and the per-tool setup that leaves it), level-3-review-diffs (parallel agents, worktrees, agent views and review automation in all three tools, with review bandwidth named as the ceiling), level-4-write-specs (plan mode, /goal, /loop, hooks, TDD, compound engineering, and the stop-condition rules), level-5-run-the-factory (the six stations — intent, harness, loop, graph, verification, release — mapped cell by cell to what Claude Code, Codex and Cursor document, each cell linked and dated), and the-humans-job (taste, architecture, product direction, eval and stop-condition design, permissions, and the disqualifying loops that must not run unattended). The Ladder group now opens the sidebar, written by hand rather than autogenerated so the order runs Level 0 to Level 5; no article moved and no URL changed (#371)./schedule, the rule that a routine pushes to a claude/ branch instead of your default one, scoping which environments and connectors a routine may reach, the daily cap, and the untrusted-text wrapper a fire payload has to go through before an agent reads it. EN+PL (#371).agents/ and commands/ both 404 and the repository ships 33 skills, 27 reviewer personas owned by ce-code-review, and 14 agent hosts; the marketplace URL it gives you redirects after a rename. Also the five-stage adoption ladder, the three different time splits Every publishes for one loop, why /lfg does not merge, and the argument almost nobody raises — the compound step as the guide describes it writes into CLAUDE.md, the always-loaded configuration Gloaguen et al. measure as net negative, which the shipped plugin avoids by making docs/solutions/ retrieved instead. Four copy-paste prompts run the loop with nothing installed; verified against plugin v3.23.3. EN+PL (#337).https://developertoolkit.ai/mcp: a public, unauthenticated, read-only endpoint carrying the two tools the ChatGPT and Claude connectors look for — search across every guide on the site and fetch for one article’s full markdown. The guide covers the one-line setup for Cursor, Claude Code and Codex, the response contract that makes a connector’s citations resolve, why a Polish query returns Polish articles with no language parameter, and what the endpoint does not do. EN+PL (#319).theclaymethod/unslop and bartekpucek/miodkuj: the three deterministic Python scanners that run in CI with no agent in the loop, the progressive-disclosure mechanics that let a skill ship a 50 KB rule catalogue for about 100 tokens of standing cost, the eval-first maintenance loop, and the finding that separates unslop from the rest of the category — its own core benchmark records a no-ship, while the most-starred skill in the genre, at more than 36,500 stars, ships no eval suite at all. miodkuj covers the Polish tells no English word list reaches (officialese, nominalisations, impersonal fog, genitive chains) and makes the opposite architectural bet, declining a deterministic linter on the grounds that a match list cannot resolve context. EN+PL (#323)./goal and /loop tool support re-verified and corrected. The two autonomous-run guides asserted that /loop was native only to Claude Code and that Codex’s /goal was experimental and had to be enabled. Both were out of date: Cursor 3.5 shipped a /loop skill on May 20, 2026 (a month before the article was written), and Codex CLI 0.133.0 made goals stable and on by default on May 21, 2026. Re-checked against Claude Code 2.1.231 and Codex CLI 0.145 rather than the cached doc snapshots, which stop at 2.1.37 and February 2026. Also folded in the /loop behaviour that had accumulated since — the v2.1.196 rule that a scheduled fire only runs self-invocable skills, ScheduleWakeup stop: true in v2.1.202, the cloud-provider fixed-interval fallback, jitter and the 50-task cap — plus Codex’s /goal edit, and new parity rows in the feature matrix and command reference. EN+PL.dbreunig/drskill, the read-only loadout diagnostic CLI: the tool-loadout research behind it (routing accuracy collapsing past 30 tools, a 600-skill enterprise agent), 34 checks grouped into skill hygiene, description quality, injection surfaces and MCP configuration, drskill audit reading the session traces your agents already write, a CI gate with a fingerprinted ack ledger, the invocation-time shell-command exposure, and the limits that make a clean scan less than a clean loadout; verified against version 0.6.7, cross-linked from the skills-ecosystem index, skill security, best practices and the skills CLI reference. EN+PL.faq and contentType frontmatter was added where it applies, and the rule was promoted into the build gate so a regression fails the build rather than shipping quietly (#214-#225).CLAUDE.md, .cursor/rules and AGENTS.md as a budget to cut rather than a log to grow: a dated map of why the guides contradict each other, what each tool actually loads and when (including Codex’s silent 32 KiB truncation), a routing table for all five destinations a rule can live in, nine prompts that do the cutting, and observed stumbles; three accuracy corrections followed post-merge. EN+PL (#212, #213).July reset the baseline across the stack: Anthropic closed the month with Claude Opus 5, OpenAI launched the GPT-5.6 family and folded Codex into ChatGPT desktop, Cursor shipped 3.11 plus Grok 4.5, and Claude Code added Sonnet 5 then Opus 5 to its account- and provider-specific model routing while hardening its always-on background-agent runtime.
idle, working or blocked: how state detection actually works, sessions that outlive a closed laptop, the herdr agent CLI and the socket API beneath the TUI, the orchestrator pattern where one agent spawns and supervises the rest of the fleet, and where herdr fleets break down. The Moshi iPhone/iPad terminal was added to the mobile-access section shortly after, with its “no relay” claim scoped to hosting rather than data locality. EN+PL (#196, #205, #206).git worktree add” guide a layer too low: session per task, send-keys as the agent-to-agent channel, capture-pane polling, wait-for barriers, and hooks that report exact state instead of screen-scraping. EN+PL (#196).high effort. v2.1.219 also adds category-based fallback — cybersecurity-flagged requests re-run on Opus 4.8, while biology-flagged Opus 5 requests end in a refusal.craft deprecated in favour of conversational job classification), Live Mode’s pins/strokes/three-variant workflow, the critique overlay, design hooks with two-speed reporting, doctor staleness checks, the native iOS/Android alpha, and the detector catalog at 64 patterns and 59 enforced rules, up from 44. EN+PL.Leonxlnx/taste-skill (~65K stars), the anti-slop frontend skill library: how it constrains AI generation up front (brief inference, three dials, design-system map, hard ban list, pre-flight check), all 13 aesthetic variants with their install names, per-agent install, honest scope limits, and how it composes with Impeccable and the design pipeline; verified against upstream v2. EN+PL (#170)./verify and /code-review and made them explicit skills, added the EndConversation tool, /fork to background sessions, a screen-reader mode, and Windows PowerShell permission hardening. Codex CLI 0.144.6 tightened dangerous-command detection and corrected GPT-5.6 Sol/Terra/Luna to a 272K working context. Cursor added Slack multi-repo environments and plan-before-start on July 17.obra/superpowers: how a 14-skill plugin turns brainstorming, worktrees, executable plans, TDD, subagent review and fresh verification into one enforced design-to-PR workflow, with all ten installation targets, evidence, security and honest limits; verified against upstream v6.1.1, cross-linked from the skills ecosystem, core methodology and the scorecard guide. EN+PL (#159)./automate, cloud subagents, iOS, Team MCP marketplaces, side chats), and Codex v0.142-0.144.1. GPT-5.5 was removed from current defaults and replaced by role-aware GPT-5.6 Sol/Terra/Luna guidance. The docs also began distinguishing SpaceX’s pending Cursor acquisition from the inaccurate claim that xAI already bought it, explaining why Grok 4.5 does not replace Composer 2.5, and separating provider claims from current Artificial Analysis v4.1/v1.1 results./effort controls, and a /doctor that both diagnoses and fixes.The autonomous-work race kept pace: Cursor pushed Design Mode into the browser and canvases, Claude Code locked in ultracode as its dynamic-workflow trigger keyword, Codex shipped controller pairing for headless fleets, and Anthropic shipped Claude Fable 5, a new model tier above Opus.
/grill-me and /grill-with-docs. Two of Matt Pocock’s most-installed skills: a relentless one-question-at-a-time agent interview that resolves every branch of your plan before you build, plus, with docs, a ubiquitous language (CONTEXT.md) and ADRs written as you go. Cross-linked from Plan mode and the skills ecosystem. EN+PL./goal and /loop, plus two skill deep dives. Cross-tool coverage of goal-directed and looping agent runs, with the gaps in each tool mapped honestly (tool support corrected on Aug 13). Alongside them, deep dives on shadcn/improve — an architecture audit that writes plans for cheaper executors — and Impeccable, a design vocabulary that catches AI slop; both verified across Claude Code, Cursor and Codex. EN+PL (#129)./automate. Describe an automation in plain language and the agent wires up the triggers, instructions and tools. Plus a Slack emoji trigger and five new GitHub triggers./in-cloud, /babysit). Spin up cloud subagents in isolated VMs, have them prepare PRs remotely, and set up a cloud dev environment in under 10 minutes.--safe-mode, /cd, Fable 5)./model fable) and in Cursor’s model picker. $10/$50 per 1M tokens.fallbackModels tried in order when the primary is overloaded, glob patterns in deny rules (* denies all tools), and hardened cross-session messaging.local.customTools, route headless tool calls through an auto-review classifier, pick JSONL or SQLite stores, and nest subagents to any depth.codex remote-control clients can initiate pairing and manage controller grants; plugin list gains JSON output; standalone web searches run in parallel. v0.136 added /archive sessions.ultracode is the workflow keyword. The dynamic-workflow trigger was renamed from workflow to ultracode, highlighted in violet; typing “workflow” no longer starts a run, though asking in your own words still does. v2.1.156-158 added .claude/skills plugin auto-load and auto mode on Bedrock, Vertex and Foundry.TeamCreate/TeamDelete removed), parameter-scoped permission rules, and auto-mode guardrails against destructive git and terraform commands.A pivotal month: Anthropic shipped Claude Opus 4.8 and dynamic workflows, and all three tools rounded out their first-class autonomous-work primitives within weeks of each other.
ultracode to let Claude decide when to run one. Also /workflows, fast mode at 2x and 2.5x, and a lean system prompt by default./loop skill, shared canvases. /loop runs a prompt on a local schedule until an outcome is reached, self-paced when no interval is given. Automations move into the Agents Window, gaining multi-repo and no-repo forms./goal and the agent view. /goal sets a verifiable end state and Claude works turn by turn until it is met; claude agents is the new dashboard for every background session.@Cursor in any Teams channel to delegate work to cloud agents, with automatic repo and model selection from prompt context.codex remote-control for headless orchestration, plugin sharing with link metadata and discoverability, AWS Bedrock console-login, and multi-environment view_image./vim, /hooks browser. Vim modal editing in the composer, a redesigned resume/fork picker, a theme-aware status line, and a /hooks browser with pre- and post-compaction execution./resume for background sessions and claude agents --json; /simplify and /code-review become distinct commands in the current command set.codex doctor, goals on by default, history search, --profile standardization, and codex remote-control in the foreground. GPT-5.5 was the default at that historical point./goal, permission profiles. Persistent /goal workflows that survive --resume, built-in permission profiles, plugin marketplace install, and MultiAgentV2 made explicit./multitask. Async subagents running in parallel rather than queued, plus multi-root workspaces for cross-repo agent sessions in a single conversation.Cmd+Shift+P → Agents Window). Design Mode adds browser-based UI annotation for precise visual feedback (⌘+Shift+D to toggle, Shift+drag to select areas, ⌘+L to add elements to chat, ⌥+click to add to input). Agent Tabs and Worktrees show multiple chats side by side or in a grid, with a new /worktree command for isolated git worktrees and /best-of-n to run a task across multiple models in parallel. On the enterprise side, MCP Apps support structured content, third-party plugins default to off, directory group names appear in audit logs, and self-hosted cloud agents gain secret management./powerup command with animated lessons; per-model and cache-hit cost breakdown in /cost; deferred hook permissions (a "defer" decision in PreToolUse hooks for headless sessions, plus a PermissionDenied hook firing after auto-mode denials); the Write tool 60% faster on large files; named subagents in @ mention typeahead with declarable initialPrompt frontmatter; conditional hooks via an if field using permission-rule syntax; and transcript search (/ in Ctrl+O mode, n/N to step through results). /tag and /vim were removed in v2.1.84+./plugins; and sub-agents with path-based addressing (/root/agent_a) and structured inter-agent messaging.--bare flag for scripted -p mode that skips hooks, LSP and plugins; --channels permission relay for phone forwarding; a managed-settings.d/ drop-in directory for enterprise config composition; transcript search; Ctrl+X Ctrl+E to open an external editor for prompt composition; and pasted images inserting an [Image #N] chip./title; CLI 0.118 adds Windows sandbox proxy-only networking, ChatGPT device-code sign-in, prompt+stdin for codex exec, and dynamic bearer tokens for custom model providers.pages parameter (for example pages: "1-5"), a new /usage command with detailed input/output token breakdown, better OAuth error handling and refresh-token management, and MCP health checks with automatic restart for failing servers..cursor/agents/; reusable skill definitions with SKILL.md manifests shareable across projects and teams; 40x faster hooks; Cursor Blame, an AI-powered git blame with context; agents that ask clarifying questions before complex tasks; CLI Plan and Ask modes (cursor --plan, cursor --ask); and cloud handoff with an & suffix.SKILL.md support for custom skills in .claude/skills/, session forking from any conversation point, a --from-pr flag to start with context from a GitHub pull request, arrow-key prompt history, and cloud handoff with an & suffix.@codex, Slack integration for team channels, Linear ticket automation, and scheduled cron-based tasks — all running as sandboxed cloud agents./rename and resume them with /resume <name>, use a .claude/rules/ directory alongside CLAUDE.md, accept suggested follow-up prompts with Tab, and switch models mid-prompt with Alt+P.A snapshot of what the tools had reached by the end of the guide’s first quarter. Cursor had shipped Cursor Browser (beta) for in-app testing, native Plan Mode (beta) for AI-assisted task planning, Claude Sonnet 4.5 support and the GPT-5.2 Codex model, on top of background agents, BugBot, Max Mode, checkpoints and branching, multi-root workspaces, enhanced @ symbols, and Memories (beta). Claude Code had architect mode (--enable-architect), extended thinking controls (a thinking toggle and /effort, with ultrathink as a one-turn prompt hint), the hooks system, enhanced MCP integration, headless-mode automation, multi-directory workspaces, and custom slash commands.
https://cursor.com/blog/gpt-5.| Model | Provider | Context | Typical use | Pricing (per 1M tokens) |
|---|---|---|---|---|
| Claude Fable 5 | Anthropic | 1M | Tasks that outlast a single sitting; thinking always on | $10 / $50 |
| Claude Opus 5 | Anthropic | 1M | The default Opus: agentic coding, computer use, knowledge work. Account default on Max, Team Premium, Enterprise pay-as-you-go, the Anthropic API and the managed clouds. Requires Claude Code v2.1.219+ | $5 / $25 |
| Claude Sonnet 5 | Anthropic | 1M | Default on Pro, Team Standard and Enterprise subscription seats | $2 / $10 introductory |
| Claude Haiku 4.5 | Anthropic | 200K | Cheap parallel and bulk work, subagents | $1 / $5 |
| GPT-5.6 Sol / Terra / Luna | OpenAI | 1.05M API (~272K working context in Codex) | Frontier / balanced / efficient | $5/$30 · $2.50/$15 · $1/$6 |
| Grok 4.5 | SpaceXAI / Cursor | 500K API* | Long-running coding and computer work | $2 / $6 |
| Cursor Composer 2.5 | Cursor | 200K | Fast local iteration in Cursor | $0.50 / $2.50 |
| Gemini 3.1 Pro | 1M | Multimodal, extreme context, Deep Think mode | $2 / $12; $4 / $18 above 200K input |
* A host such as Cursor may expose a smaller working context; verify the current model picker.
opus to Opus 4.6)Recent official MCP servers worth knowing: Atlassian (Jira and Confluence), Cloudflare (Workers, R2 and D1), Vercel (deployment automation), Supabase (database and auth operations), Linear (issue tracking) and Stripe (payment processing).
On the skills side, the Skills.sh marketplace now hosts 200+ skills, and the universal CLI npx skills add <owner/repo> works across 35+ agents. Popular skills include Cloudflare deployment, code review, Atlassian integration and API documentation generation.
SOC 2 Type II
Verify each vendor’s current trust center and the product and contract scope of its SOC reports.
Data controls
Business and API offerings provide contractual data controls; consumer settings, retention, and training choices vary by product and plan.
Audit logging
Enterprise audit capabilities vary by tool, surface, and contract; confirm the events covered before relying on them for compliance.
GDPR
Data-processing terms and regional residency depend on vendor and enterprise contract; verify the current DPA and region support.
/simplify and /code-review are distinct commands — /simplify for reuse, quality and efficiency review, /code-review for the dedicated review workflow./tag and /vim removed; use /config → Editor mode instead.workflow to ultracode — typing “workflow” no longer starts a run, though asking in your own words still does.These rows describe documentation or workflow migrations, not blanket API deprecation or end-of-support claims. Verify product availability with the provider.
| Previous guidance or workflow | Snapshot changed | Current path |
|---|---|---|
| GPT-5.5-era Codex guidance | July 2026 | GPT-5.6 Sol / Terra / Luna |
| Cursor Composer 2 | May 2026 | Composer 2.5 |
| Cursor v2.x Editor cloud agents | April 2026 | Agents Window |
| Cursor Composer 1 | March 2026 | Composer 2 / 2.5 lineage |
| Cursor v1.x UI | February 2026 | v3.x Agents Window |
| Claude Code WSL-only setup | August 2025 | Native Windows or optional WSL |
| Older MCP specification revisions | Date-specific revisions | Current dated MCP specification and SDKs |
Settings > Update > Auto-update. Choose the “Stable” or “Beta” channel.
claude update # update to latestclaude --version # check current versioncodex update # supported standalone installsnpm install -g @openai/codex@latest # npm alternativecodex --version # check current versionBeyond the changelogs linked at the top of this page, the vendor blogs are Cursor, Anthropic and OpenAI; each also announces on X/Twitter and in its Discord.
Every entry above goes through four steps before it ships. Official documentation review: vendor release notes, API changes and pricing updates. Community validation: Discord and Slack channels, GitHub issues, user feedback. Hands-on testing: new features, workflows and examples run rather than paraphrased. Expert review: technical accuracy, best-practice validation and enterprise scenarios.
Articles carry version tags recording the tool versions their content assumes:
---version: 1.0.0lastUpdated: 2026-07-27tools: cursor: ">=3.11" claude_code: ">=2.1.215" codex_cli: ">=0.144.6"---Content moves through four lifecycle stages: Active (current best practice), Legacy (still valid, but newer methods exist), Deprecated (marked for removal) and Archived (historical reference only). GPT-4 examples, for instance, were deprecated in July 2025 and removed in October 2025; the old pricing tiers were marked Legacy in July 2025 and removed in December 2025; the Claude 3.x guides were marked Legacy in July 2025 and removed in January 2026.
New or refreshed documentation lands most weeks. Feeds are published at /en/feed.xml, /en/atom.xml and /en/feed.json.
July 24 brought Claude Opus 5 at Opus 4.8's $5/$25 price, requiring Claude Code v2.1.219+. July 9 brought GPT-5.6 Sol, Terra, and Luna, and folded Codex into the ChatGPT desktop app alongside CLI 0.144.1. July 8-10 brought Cursor 3.11 with Grok 4.5. Claude Code 2.1.207 made background agents durable across restarts and added MCP CLI auth.
Claude Fable 5 ($10 / $50 per 1M tokens) for tasks that outlast a single sitting; Claude Opus 5 ($5 / $25) as the default Opus for agentic coding; Claude Sonnet 5 ($2 / $10 introductory) as the default on standard subscription seats; GPT-5.6 Sol / Terra / Luna at 1.05M context for frontier, balanced, and efficient work. Grok 4.5, Cursor Composer 2.5, Claude Haiku 4.5, and Gemini 3.1 Pro round out the table.
Claude Sonnet 5 became the default on Pro, Team Standard, and Enterprise subscription seats on June 30, with introductory Sonnet API pricing ending August 31, 2026. The GPT-5.6 family replaced GPT-5.5-era guidance. Cursor 3.0's Agents Window replaced the old layout. Claude Code v2.1.84+ removed /tag and /vim, and v2.1.160 changed the dynamic-workflow trigger keyword from workflow to ultracode.
Fifteen new guides -- the six free hubs of the autonomy-ladder section and The State of Agentic Engineering 2026, the research article behind it; Claude Code routines and Cursor cloud agents; the site's own MCP server; software factories; the Dr. Skill loadout audit; the ablation protocol for pruning CLAUDE.md and AGENTS.md; the anti-slop writing skills; and compound engineering -- plus an answer-first rewrite of every article in the corpus, now enforced by the build. All of it shipped EN+PL.
Four steps: official documentation review of vendor release notes, API changes, and pricing updates; community validation across Discord and Slack channels and GitHub issues; hands-on testing of new features, workflows, and examples; and expert review for technical accuracy and enterprise scenarios. The model and pricing baseline was last rechecked against vendor sources on July 27, 2026.