Research Version

Patched for Whom

2026-07-01-weekly-digest-2026-06-24_2026-07-01-frontier-v0

Status: published
Window: 2026-06-24 to 2026-07-01
Signals: 8

Mode: weekly-digest

Sources harvested

Gemini CLI Antigravity CLI OpenHands Hermes Agent Claude Code Codex Paperclip OpenClaw Agent Zero Pi Coding Agent Eve Flue heypi

Accepted signals from this run

OpenHands OpenHands shipped its dependency-CVE fixes on the cloud channel; the OSS 1.8.0 line is frozen and a new CVE already sits untagged on main
Antigravity CLI Google retired consumer Gemini CLI (June 18) and force-migrated users to closed-source Antigravity -- which hardened one approval gate and auto-opened another the same week
Hermes Agent Hermes landed a full security wave on main -- path-escape, command-approval-bypass, secret redaction -- and tagged none of it (still v2026.6.19)
Claude Code Claude Code 2.1.196 closes an MCP self-approval hole and binds Remote Control to the Anthropic host
Codex Codex 0.142.2 gates uninspectable PowerShell behind approval and switches MCP tool discovery to tool-search by default
Gemini CLI Gemini CLI's OSS repo shipped the skill path-traversal fix to stable (v0.49.0) and renamed coreTools -- fixes now landing in a CLI whose consumers were cut off
Paperclip Paperclip v2026.626.0 tags its master-only control plane: daily run/cost budget caps, a split skills:create permission, cross-company auth hardening
Claude Code Sonnet 5 propagated across harnesses in one week: Claude Code makes it the default (1M context); Pi adds support

Artifact contents

Every file the loop produced for this run, anchored in the repo. Internal links go to the rendered page; the repo path opens the raw artifact on GitHub.