Read the show (text)
Today in 60 seconds
7 stories, most important first · tap a headline for the full storyClaude Ships MCP Tasks and Elicitations in Claude Code — Durable Agent Workflows, Narrow Launch
Claude Code's terminal tool now lets outside tools run slow jobs in the background and stop to ask for your input, but only on a few developer surfaces.
Read the full story →Anthropic platform team shifts entirely to AI coding with Claude Code
An Anthropic engineering leader says her 200-person platform team no longer hand-writes code, a notable test of the company's own product and of what engineers now do.
Read the full story →OpenAI Detects Widespread PHP Vulnerabilities as AI Cyber Threat Concerns Grow
OpenAI's Project Daybreak says it found critical PHP flaws using an AI model, and a race to fix them is underway while attackers also use AI.
Read the full story →A developer gave a TV a dose of Claude, and this is what changed in its system (Chinese source)
An AI coding assistant disabled 25 system components on a Xiaomi TV and swapped in a clean home screen. The open-source recipe drew wide interest.
Read the full story →Who Is Dario Amodei? The Anthropic CEO Behind Claude
Read the full story →OneMemory – self-hosted shared memory for AI agents over MCP
A new open-source project keeps one memory file on your own machine that Claude Code, Cursor and other agents can all read and write.
Read the full story →Connecting a small travel agency in a Russian region to AI agents via MCP: practice with 22 tools (Chinese source)
Vedar, a local travel platform in Russia's Kamchatka, lets AI assistants check live tour availability and send booking requests, with real people confirming every order.
Read the full story →
Quick hits
- Claude on a TV (Ifanr, a Chinese tech outlet): a developer put Claude onto a TV and showed what changed in its system. The piece is framed around 'the era of great reverse engineering.' The details we have are thin, so treat it as a curiosity. Status: REPORTED, one source.
- Dario Amodei profile (The Profile, by Polina Pompliano): background on Anthropic's chief executive. Little new, but useful context on who steers the company. Status: background, no new claims.
The big story
Claude Code gets MCP Tasks and Elicitations — a narrow launch
On October 23, 2026, Anthropic shipped support for MCP Tasks and Elicitations in the Claude Code command line (a terminal-based coding tool). MCP, the Model Context Protocol, is an open standard for plugging AI into outside tools. Yahoo reported it and Forkast News carried the same story. The coverage says MCP tools move beyond a single request and response into durable, multi-step workflows. For anyone building on MCP, that is the more important change. Until now, a tool call was mostly one question and one answer. Support for longer-running, interruptible work is what lets an agent handle jobs that take minutes or hours.
Background from how the MCP spec is generally described, not from today's reporting: an elicitation lets a tool pause mid-job and ask you for input. A task lets a long operation be started, checked on, and collected later.
Status: REPORTED (shipped, per Yahoo and Forkast). STILL OPEN: exactly what the 'narrow' launch includes, and Anthropic's own release notes were not in the coverage. Cost: price not stated. Worth it for: builders already running MCP tools. Limit: a tool that interrupts you only helps if it asks at the right moments, and that design is on you.
What this means for you:
- Small business owner: a weekly job, like checking supplier stock, could pause and ask before it spends money.
- Job seeker or student: a small MCP workflow with checkpoints is a portfolio piece showing you can design for agents.
- Creator: a long batch job, such as captions for a set of videos, can check in with you instead of running unsupervised.
You're listening to SI Agent News. Still ahead: a Russian travel business making itself visible to AI agents, a shared memory project, and a security prompt.
Anthropic's platform team goes fully to Claude Code
TechGig reports that Anthropic's platform team has shifted entirely to AI coding with Claude Code. This is a dogfooding signal: a company using its own product for its own daily engineering. It carries real stakes for the engineers whose work changes, and it tells you the vendor is betting its own team's output on the tool. That is a stronger statement than a marketing page.
But the sourcing is thin, and 'entirely' carries a lot of weight. The report, as given, does not say whether it means no hand-written code at all, whether human code review is still part of the process, or how quality is measured. Status: REPORTED, single source. STILL OPEN: all three of those questions. Practical angle: if you run a team or a side project, do not copy the headline. Copy the discipline: decide what the AI writes, what a person reviews, and what you will measure. Before adopting anyone's setup, ask for numbers such as defect rates and review time (see the research section).
OpenAI reportedly detects widespread PHP vulnerabilities
The420.in reports that OpenAI detected widespread PHP vulnerabilities as worry grows about AI-driven cyber threats. PHP, a programming language, touches a huge share of the web per the editor's note. That is why this matters beyond developers. Many small business sites, online shops and blogs run on PHP-based software, often with nobody actively maintaining it. If AI tools can find weaknesses at scale, both defenders and attackers benefit, and slow-to-update sites are the easiest targets.
Status: REPORTED, one outlet. STILL OPEN: the scale, the severity, and whether fixes have landed. Practical angle: for any AI coding tool, Claude included, use it as a second pair of eyes on your own code, then verify the findings yourself. If you run a PHP-based site, check that your software and plugins are up to date and ask your host or developer what they are doing about it. The prompt later in this issue does exactly that kind of review.
A developer gave a TV a dose of Claude
Ifanr, a technology outlet, ran a piece titled 'A developer gave a TV a dose of Claude, and this is what changed in its system.' From the headline alone, a developer connected Claude to a television and the piece describes how the TV's system behaved differently afterward. The details given to us do not say what was changed, which TV or software was involved, or how Claude was connected, so we are not guessing at them.
Status: REPORTED, headline-level detail only. STILL OPEN: the mechanism and whether it can be repeated. Why it matters: it is a sign of AI reaching into everyday devices, not just chat windows and code editors. The useful takeaway for a hobbyist or tinkerer is to read the full piece for the method, and to think about permissions before you give any AI control over a device in your home.
Who is Dario Amodei?
The Profile, by Polina Pompliano, published a profile of Dario Amodei, the Anthropic CEO behind Claude. It is a background read, not news about a product or a change, and the details of the profile were not part of the material we were given, so we will not summarize claims it may make.
Status: REPORTED, profile piece. Why it matters: if you build on Claude or rely on it for work, knowing who runs the company and how they think helps you read its product and policy choices. It is lower priority than the tool stories above. Save it for a weekend, and treat it as context rather than guidance on what to do this week.
OneMemory: self-hosted shared memory for agents over MCP
A project on GitHub called OneMemory is described as self-hosted shared memory for AI agents over MCP. In plain terms, it is a memory store you run yourself that multiple agents can read from and write to through the same open standard covered above. The idea is that what one agent learns, another can use, without every tool keeping its own separate notes.
Status: REPORTED, an open-source listing. STILL OPEN: maturity, security model, and how well it works in practice, none of which the listing details give us. Cost: not stated; self-hosting means your own server time. Worth it for: builders who juggle several agents and keep re-explaining the same context. Limit: shared memory means shared mistakes, and anything stored there should be treated as sensitive. Test it with throwaway data first.
A small Russian travel agency connects to AI agents via MCP
A dev.to write-up describes connecting a small travel agency in a Russian region to AI agents via MCP, with 22 tools. The practical story is that a very small business exposed its own operations as tools an AI agent can call, rather than waiting for a big platform to do it. This is the 'make your business visible to agents' idea in a real, small-scale form.
Status: REPORTED, a developer's own account. STILL OPEN: results, costs and what the 22 tools actually do were not in the summary we have. Why it matters: for a small business owner, it shows the starting point is modest. List the few things a customer or assistant asks you most, such as availability, prices and bookings, and consider exposing those first. For a developer or student, it is a useful template for a real client project. Read the full post for the tool design before borrowing it.
The lead story
What happens when your business is invisible to AI: the Kamchatka case
A post on dev.to, written in Chinese, comes from the team behind Vedar (vedarai.ru), a travel platform for Kamchatka, the volcano region in Russia's Far East. Their problem: ask a model for volcano hikes and openings next week and you get a generic overview and 'contact a local agency.'
Why: most Kamchatka agencies are tiny teams. Their information sits on Russian-language sites, Telegram channels and phone calls. Search engines can't crawl all of it, and model training data has no live availability or prices.
Their answer was an MCP server with 22 tools so an agent can query routes, vehicle charters, rentals and more directly. Status: REPORTED (the builders' own write-up). STILL OPEN: bookings, accuracy, and whether 22 tools confuses a model's tool choice. No numbers on results appear in the coverage.
Analysis: agents answer from whatever they can reach. If your prices live in a phone call, you don't exist to the agent. MCP is one way to publish 'here's what's available' in a form agents can call. Booking is multi-step (dates, party size, deposit), which is where tasks and elicitations could fit. That is our inference, not the authors'.
Do this: write down the five questions customers ask that need live answers. Those are your first five tools. Cost: price not stated. Worth it for small businesses with live availability or prices.
Go deeper
For builders: how a shared memory layer over MCP works
OneMemory is a self-hosted shared memory layer for AI agents over MCP, hosted on GitHub. It is early: 2 points and 0 comments on Hacker News. Status: CONFIRMED that the project exists and is listed; we have not reviewed its code, so what follows describes how this kind of tool generally works, not what OneMemory does. Price not stated; hosting is on you. Worth it for tinkerers, not yet production.
Mechanism. An MCP server is a small program that exposes named tools to an agent. A memory server exposes tools like 'save this note' and 'search my notes.' Behind it sits a store, often a database, sometimes with embeddings (numbers representing meaning, so searches match ideas, not just words).
What 'shared' adds. Several agents or sessions connect to the same server, so a fact one agent saves, another can find. Because MCP is a standard, different clients can in principle plug into one memory. That is the useful part. The storage itself is incremental.
Risks. Staleness (old notes treated as current), conflict (two agents save contradicting facts), and poisoning (an agent saves web text containing hidden instructions, and later agents follow it). Self-hosting keeps data on your machine but fixes none of these.
Test one: save a note you know is wrong and see if an agent catches it; check who can write; scope memory per project; log every save.
Analysis: a long job that can pause (see the lead) could write progress to memory so a fresh session resumes. Promising, unproven.
A skill to pick up
Design a long job as phases with checkpoints
Illustrative workflow, not tested. It works even if your Claude Code setup lacks the new features. For: anyone with a repeating multi-step job, such as a weekly dependency check. Needs: Claude Code and a project folder. Cost: price not stated.
- Split the job into phases: scan, summarize, propose changes, apply changes.
- Mark each phase 'runs alone' or 'needs a human decision.' Anything that spends money, deletes, or sends something outward is a decision.
- Write the plan in a PLAN.md file. Add this line to CLAUDE.md (Claude Code's project instructions file): Read PLAN.md first. Stop before any step marked DECISION and ask me one question with two or three options. After each phase, update PLAN.md with results and the next step.
- Run it.
Verify: end the session halfway, start a fresh one, and say 'continue the plan.' If it resumes at the right phase without you re-explaining, it works. If it restarts, your plan file lacks state.
Limits: you do the checkpoint design yourself, and more questions means more interruptions. Mistake to avoid: too many checkpoints. If it asks about everything, you'll click yes without reading. Reserve questions for irreversible steps.
Save time or money
Time (estimate): if a recurring check takes you 10 minutes, five days a week, that is about 50 minutes a week, roughly a long meeting. A phased workflow with checkpoints can hand most of it to the agent and leave you the decision steps. Your real savings depend on the job.
Money: count your connected MCP tools. The Kamchatka build used 22. Every tool description is text the model has to read, so with 22 connected and 6 used (illustrative numbers), you are loading 16 for nothing. Audit: list your servers and remove what you did not use this month. Coding agents from Anthropic, OpenAI and Google each have their own plans; check the current price on each pricing page.
What you give up: setup time, and a tool you remove today is missing the day you need it.
Prompt of the day
Objective: a security review of your own PHP code with evidence, not guesses. Illustrative, not tested, and not a substitute for a professional audit.
Weak version: 'Check my PHP code for security problems.' No scope, no format, and it invites confident guessing.
Better version:
You are reviewing PHP code I own. Scope: only the files in the folder I name. Look for SQL injection, cross-site scripting, unsafe file uploads, and hard-coded secrets. For each finding give the file and line, a one-sentence explanation, how to confirm it safely, and a confidence rating of high, medium or low. If you are not sure, say so. Do not change any files. Finish with what you did not check.
Why it works: scope stops wandering, named categories focus attention, 'how to confirm' forces evidence, ratings stop everything sounding equally certain, 'what you did not check' exposes gaps, and no file changes keeps you in control.
Customize: swap the categories for your stack, or ask for results as a table.
Quality check: reproduce two findings yourself. If you cannot, discard them.
Research in plain English
No new paper today, so this is a lesson, not news. The Anthropic platform-team report is an anecdote: one team, one account, no numbers. A controlled study compares a group using a tool against a group that isn't. Decision this week: run a two-week pilot. First record a baseline, meaning how long a typical task takes and how many bugs come back after release. Then use the tool on half your tasks and compare. Limit: small samples are noisy, so a small gap proves little either way. Status: STILL OPEN whether any team-wide AI coding shift pays off for you.
What to watch next
Busiest lanes in today's coverage: open-source AI, policy, AI safety, agentic AI and China AI. MCP appeared in three of today's stories, from a coding tool to a hobby project to a travel business.
Watch: (1) fuller detail on how broad the Tasks launch is, STILL OPEN; (2) a primary source for the platform-team claim; (3) specifics on the PHP findings, such as scale and fixes.
The joke
Elicitation: when your agent finally learns to ask 'are you sure?' before touching production.
Until tomorrow
That's it for today. Tomorrow we're watching whether Anthropic publishes fuller details on the MCP Tasks launch, and whether the PHP findings get specifics.
Today you got a checkpointed workflow, a tool audit, and a security prompt, from today's sources, daily, with cases from places like Kamchatka. If this made you smarter, share it with one person who needs it. Thank you for listening.
SI Agent News — a podcast newsletter. Made by AI.
Issue notes · 2,717 words · 14 min listen · Claims checked against their sources · Published 2026-10-25 07:16 UTC



