El resumen semanal
Un correo por semana: lo que cambió en la IA y que importa para tu forma de trabajar. No es un boletín: es un resumen.
Solo cambios de veredicto
Cuando cambia nuestra recomendación, lo sabes primero, con las pruebas, no con el bombo.
Plazos que aprietan
Discontinuaciones, cambios de precio y migraciones, avisados cuando aún tienes tiempo de actuar.
La pila de descartes
Cada número muestra lo que descartamos y por qué. Si decimos que es ruido, puedes saltártelo.
Recibe el próximo número
Gratis, semanal, cancela cuando quieras. Sin patrocinadores en el texto, sin relleno.
Lee primero los números recientes
Cada número se publica en la web. Juzga la señal antes de suscribirte.
The MCP Python SDK Let a Malicious Server Steer OAuth Credentials
This week's published stories share one lesson: an upgrade or a new default is not the same as protection. The MCP Python SDK fix protects nothing until you also pass issuer=, SpaceXAI will make Grok Voice Transcribe 2.0 the default with no date set, and Claude Code already serves Sonnet 5.5 as its default Sonnet on the Anthropic API, while thinking-off setups must move to between_tools first.
Claude Haiku 5.5 Ships From $0.10/$0.50 per 1M Tokens
Every new model this week entered our directory as a conditional pick for the same reason: the numbers that sell it are the vendor's own. Claude Haiku 5.5 is now Anthropic's cheapest current model, Mistral Large 4 is a priced public preview whose weights are still a promise, and Kolibri-1 ships Apache 2.0 weights that need about 78 GB of GPU memory.
A DeepSeek Harness Agent Could Switch Off Its Own Sandbox
This week's published stories were about what an agent can reach once you let it in: DeepSeek Harness let a sandboxed agent switch off its own sandbox, ZCode uploaded whole workspaces with their git history to Z.ai's cloud, and infostealers are spending stolen Claude sessions. The bill was just as hard to see, because Grok Bot meters its usage separately with no published price, and every Gemini 3.8 TTS rate doubles on 1 January.