O resumo semanal
Um e-mail por semana: o que mudou na IA e que importa para a tua forma de trabalhar. Não é uma newsletter: é um resumo.
Apenas mudanças de veredicto
Quando a nossa recomendação muda, és o primeiro a saber, com as provas, não com o exagero.
Prazos que apertam
Descontinuações, alterações de preço e migrações, sinalizados enquanto ainda tens tempo de agir.
A pilha de descartes
Cada edição mostra o que filtrámos e porquê. Se dizemos que é ruído, podes ignorá-lo.
Recebe a próxima edição
Grátis, semanal, cancela quando quiseres. Sem patrocinadores no texto, sem enchimento.
Lê primeiro as edições recentes
Cada edição é publicada na web. Avalia o sinal antes de subscreveres.
The MCP Python SDK Let a Malicious Server Steer OAuth Credentials
This week's published stories share one lesson: an upgrade or a new default is not the same as protection. The MCP Python SDK fix protects nothing until you also pass issuer=, SpaceXAI will make Grok Voice Transcribe 2.0 the default with no date set, and Claude Code already serves Sonnet 5.5 as its default Sonnet on the Anthropic API, while thinking-off setups must move to between_tools first.
Claude Haiku 5.5 Ships From $0.10/$0.50 per 1M Tokens
Every new model this week entered our directory as a conditional pick for the same reason: the numbers that sell it are the vendor's own. Claude Haiku 5.5 is now Anthropic's cheapest current model, Mistral Large 4 is a priced public preview whose weights are still a promise, and Kolibri-1 ships Apache 2.0 weights that need about 78 GB of GPU memory.
A DeepSeek Harness Agent Could Switch Off Its Own Sandbox
This week's published stories were about what an agent can reach once you let it in: DeepSeek Harness let a sandboxed agent switch off its own sandbox, ZCode uploaded whole workspaces with their git history to Z.ai's cloud, and infostealers are spending stolen Claude sessions. The bill was just as hard to see, because Grok Bot meters its usage separately with no published price, and every Gemini 3.8 TTS rate doubles on 1 January.