Claude finds the NIST curve seeds, the Claude Code team explains its review pipeline, AI reviewers delay Postgres 19, Reflection Beam ships under Apache 2.0

Agentic Coding & Agent Harnesses

How the Claude Code team reviews code. Addy Osmani, Morgan Westlee Lunt and Qing Wang wrote up (HN, 320 points) how a team whose code is about 90% Claude-written handles review. The headline number: "From June to September, merged pull requests to Claude Code's codebase more than doubled while the share that had to be reverted fell by more than 40 percent." Simon Willison quoted the framing: "We think 'did a human read the code?' is an imprecise proxy for 'what could go wrong with this change, and which check—automated or human—is the right one to catch it?'" How the pipeline works:

  • Most review happens before a PR exists. Claude has to show test, build or screenshot output "instead of saying it's done," and a subagent then reviews the diff with fresh context. When the reviewer keeps flagging the same thing, the fix goes into a skill, a lint rule, CLAUDE.md, or a REVIEW.md written by code owners.
  • Every PR gets an AI review. In the research preview, "the share of internal PRs getting substantive review comments went from 16% to 54%." Several agents look for bugs, a separate group votes on each finding, and style-only findings are dropped. Every finding has to be fixed or resolved with a reason, and security findings block the merge.
  • Humans are assigned by risk. A classifier picks the tier: docs and flagged additive changes need no human, ordinary changes need one person, and the riskiest paths need two. "An agent's approval never counts as a person's, either," and whoever prompted an agent's PR counts as one of its reviewers.
  • Agent review has to converge. "One CLI PR went through more than fifty rounds of review and fixes overnight before its author stopped it." When the team ran git blame on repeat findings, "about 59% of it was code that had been there since the reviewer's first pass." Now there's a round cap: "After three rounds, the reviewer asks the author to step back and reconsider the approach." The general rule: "Noise costs more when the author is an agent. A person can wave off a nit in seconds. An agent fixes it, which means another commit and another round of review."
  • What's missing: "We don't yet have circuit breakers that tighten approval when those numbers move."

Boris Cherny on the product version, which went GA this week: "I could not imagine being productive without Claude Code Review. It runs on all of my PRs, and catches almost every bug." HN was skeptical. crooked-v: "Well, that explains the Github repo with 5000 issues, maybe about a third of which are random regressions of previous behavior." vavkamil: "Dismissing a critical finding as a false positive should still involve AppSec." rileymichael remembered that Code Review once listed "$15-25 per review," and warkdarrior did the counter-math: "If an engineer paid $150,000 a year reviews some code manually for about 30 minutes, the cost of their time is about $36."

AI review delays Postgres 19. The flip side of better automated review showed up in PostgreSQL. The Register reports (HN) that the release slips to around November 19 and drops eight to ten significant features, including SQL/PGQ property graph queries, which move to PostgreSQL 20. Committer Peter Eisentraut blames LLM-assisted review, not vibe coding: "With LLM-assisted code review, these kinds of things can get found much faster, and then you're staring at a list of forty defect reports. Even if each of them requires only a three-line fix on average, there is a fixed overhead to dealing with each of these, and then you run out of time." In short: "The effective quality bar has been raised after the time the feature was written and committed." On HN, bunderbunder described the same loop the Claude Code team capped: "the review agent would find bugs, the coding agent would fix them in some overengineered way that introduced new bugs, the review agent found them, the coding agent made more while fixing them, repeat until insanity."

Lauren's inverse pyramid. Lauren posted a ready-to-paste prompt on "how do you trust your agents' work more?" It ranks four levers by where effort should go: codebase improvements first ("agents love to copy what exists and take the shortest path, so make the easy thing the right thing"), then static analysis, then prose such as AGENTS.md and skills ("use it minimally"), and human review last, because "at the rate agents land code, it's pretty much impossible to thoroughly review every PR, so spend that effort on the highest leverage point, designing an environment where agents do the right thing by default." The prompt then has the agent install pstack and use /recall, /correct and /architect on the user's own history. That is the same approach the Claude Code post takes. Lauren also asked "is chat the final form of agent ui?" and 72% of 11,143 voters said no.

Claude Code gets faster. ClaudeDevs: "Claude Code now gzips the conversation it sends on every turn, so it reaches the model faster. Cloud sessions also start up as soon as you start typing." Theo: "I did not expect to feel this difference as much as I do," "It's almost trippy. Model starts responding almost immediately after I press enter," and "Diff is most notable with steering imo, you can see model correcting in real time." @amorriscode on the Desktop launch: "we'll continue to iterate based on feedback (yes, group by folder is coming back)." Boris also pushed Claude Slides: "This is how I make slide decks now -- no more googling 'iphone frame svg' like the old days."

Codex and ChatGPT. Tibo, "Day 12": "We've made improvements to Codex & Work that increase the effective usage you get. We achieved this by reusing context across subagents, keeping context cached longer, and improved request routing that allows us to increase cache hits." OpenAI upgraded GPT-6 Astra Pro in ChatGPT so "multiple agents can tackle different parts of a task in parallel," and Tibo added "We also significantly improved GPT-6 Pro for all pro users." ChatGPT also got slides for Pro, Business and Enterprise. Theo, meanwhile: "I get significantly more cybersecurity risk flags/refusals from OpenAI than Anthropic lately."

Two TypeScript compilers in a week. Chris Tate announced tsc-ts from Vercel Labs: "TypeScript was written in TypeScript / Then rewritten in Go / We ported it back to TypeScript / Compiled it with scriptc / And it's 2-4x faster than tsgo." Theo, whose Rust port came out of the same agent-heavy month: "Cool ship! It's faster than my port (ts-rust aka tsc-rs) in most things. I heard that they wanted to ship earlier but delayed because my --fast mode beat them 🤣," and "not moving T3 Code over any time soon :)." The npm fight from yesterday continues: "If you search for my package 'tsc-rs' by name, you get multiple forks of my package before mine. All the clones have under 1/50th as many downloads." The overall mood: "Some of the shit I'm cooking with Claude right now is truly insane. None of this should be possible."

Personal agents. Geoffrey Huntley revisited OpenClaw-style assistants after Lauren gave Huntley Grok Bot credits (disclosure). "I kind of want openclaw, but I want it managed," because of the "lethal trifecta problem," and Huntley is now "using Grokbot full-time instead of Poke." The Grok Bot team shipped "improvements to Grok Bot's quality, polish, and speed." OpenClaw now sets itself up on NVIDIA's new RTX Spark laptops "without opening a terminal," and @joshavant pointed back to OpenClaw's Trail of Bits audit from September: 24 rated vulnerabilities (2 High, 16 Medium, 6 Low), all fixed. The most common problem was "losing permissions between steps."

Smaller notes.

  • @roboclawbot counted Peter Steinberger's merges: "You averaged 423 PRs/day over the last 30 days, and 386 over 90, across openclaw + steipete. That's PRs you merged, including other people's—not commits."
  • LLMJunky on local models: "I honestly don't want to use under 150 toks/s. … For frontier level tasks, I'm always reaching for a truly frontier model," agreeing with Zach Mueller's "Bitter lesson: if your local model doesn't do 100TPS+, you likely won't use it."
  • @zqkrq's ADE and multiplexer tier list v2: "T3 Code 0.1.0 put Orchestrator V2 on stable and runs Pi and any ACP provider. best tool right now."
  • Theo: "Gemini is 50% more expensive than it should be because their cache doesn't work. 27% cache miss rate. Insane."
  • Cursor added an Environments API, environments with up to 500 repos, and 5× faster startup for large ones (Cursor, via AINews).
  • Armin Ronacher spotted "Late LiveJournal impact": Tailscale's Go code uses the Cyrillic "ж" for a field callers shouldn't touch, which Armin guesses comes from Brad Fitzpatrick, since the Russian LiveJournal was known as "Живой Журнал and in short ЖЖ."

Claude in the Lab

The NIST curve seeds were timestamps. Anthropic's Frontier Red Team says (HN, 836 points, the day's top story) that it has explained one of cryptography's longest-running mysteries. The seeds behind the NIST P-curves came from the NSA with no explanation. The story was that the late Jerry Solinas hashed a joke phrase, something like "Give Bob and Jerry a raise." Several Anthropic employees chased that lead without success. Then one asked an internal research model to work it out without the clue: "In under half an hour, Claude discovered the origins of the NIST P-192, P-224, P-256, P-384 and P-521 seeds. None of them were the results of any hash algorithm at all, but rather the output of the C library's lrand48 random-number generator, seeded with a Unix timestamp!"

  • How it found them: Claude guessed the generating software used a 1990s C-library PRNG and wrote a scanner to test for one. Four seeds had a zero top bit in all 20 words, which pointed to lrand48. Claude recovered the state by brute force for those and with LLL lattice reduction for the prime-curve seeds, then stepped each state back to an srand48 initialization. The timestamps fall between May 1997 and April 1998. P-256's is August 16, 1997, and the published seed is candidate 1842.
  • Claude's own doubt, from its reasoning trace: "Let me be skeptical: am I in some sort of simulated/test environment?" and "is it suspicious that such an obvious thing wasn't discovered in 25 years? It's verified by direct computation on my side."
  • What it means: "This is not a cryptographic break, new attack, or weakness in the ECDSA curves." Anthropic says the finding makes backdoors "much less plausible." Some questions remain open. Some viable candidates were skipped ("For P-256, the published seed is candidate 1842, but candidate 876 of the same run also gives a prime-order curve"), B-163 "fits nothing Claude has tried," and most base points are still unexplained. Claude did trace six of them to Arjen Lenstra's FreeLIP generator.
  • The bounty: Filippo Valsorda, who organized it, confirmed the claim by reimplementing it in Go: "they're not the hash of some saucy sentence, but the output of drand48 seeded with the time." The prize was tripled to $36,864 and donated to ISRG, which runs Let's Encrypt.

On HN, tptacek: "This is devastating news... for an entire generation of NIST cryptography conspiracy theories." sweis (Steve Weis, one of the authors) on the old lore: "I corroborated that story with 4 people, including two ex-NSA folks off the record. Everyone was wrong!" adastra22 argued the opposite: "This is EXACTLY what a weak curve would look like," because a timestamp search still leaves room to pick a curve. entrope on Claude's reasoning trace: "Ouch. The implied judgment of us humans stings there." slowin worried about access: "Anthropic (and whoever Anthropic wants) can do this kind of work with Claude, but if you or I try to do it, we will get blocked." swyx wants the prompts behind the explainer video in Steve Weis's post: "near-kurzgesagt level clarity of explanation."

Quantum circuits. Anthropic also published (HN) work led by STEM Fellow Andi Gu with Harvard's Susanne Yelin and Mikhail Lukin. The team gave Claude "plain-language specifications for eight such circuits" plus an automated evaluator, and "Claude Mythos 5 could successfully work in a closed loop," with no human input between rounds. Anthropic says Claude "found designs that improve on the best published circuits, in some cases by an order of magnitude or more." The two highlighted results are a new modular inversion circuit (the costliest step in elliptic-curve arithmetic) and a change that makes the costliest step of a leading quantum optimization algorithm "about 12x cheaper." Some improvements came from structure: for an iron-sulfide molecule, Claude noticed that the molecule's symmetries meant "some results could be calculated once and reused."

Models & Benchmarks

Reflection Beam 1.0. Reflection released a 501B-total, 23B-active MoE with 1M context under Apache 2.0. The release includes BF16, FP8 and NVFP4 weights, a drafter, a safety report, and Mirror, the open CLI harness Beam was trained on. Artificial Analysis scores it 30, second among US open models after Muse Spark Open's 39, with 48.5% on AutomationBench-AA but only 3.0% on Terminal-Bench 4.0. Ollama is serving it free for a limited time (all via AINews).

Gemini 4 Argon goes wide and finishes Minecraft. Argon is now available to Pro subscribers and in AI Studio Build, with the output limit raised to 1M tokens from 64K and intro pricing of $2/$10 until November 30. Google DeepMind reports that four Argon agents beat the Ender Dragon in 27h14m with no human help. They wrote 2,783 programs, died 605 times, and worked from numeric world state rather than pixels, at about $520 in list API prices (via AINews).

StarSkirmish Bench v0.2. StarSkirmish (HN, 214 points) gives each model one hour in its lab's own CLI to write a StarCraft: Brood War bot in C++. "GPT-6 Astra is the top scoring StarSkirmish Bench v0.2 LLM, a clear step ahead of GPT-6.1 Sol in second," and Gemini 4 Argon, Claude Opus 5.5 and Claude Fable 5.1 are "functionally tied behind them, all scoring between 37 and 39." Sol scores second "at just over a tenth of GPT-6 Astra's cost per run." Human-written bots are still well ahead: against Stardust, PurpleWave and BananaBrain, "GPT-6 Astra, wins only 7% of its games."

90% of work hours aren't benchmarked. Mercor's benchmark map (HN, 480 points) maps 29 benchmarks onto the 923 O*NET occupations: "only 208 of 923 occupations have a task with at least 5 benchmark prompts," and "90% of American working hours are spent on tasks with little or no coverage from existing benchmarks." Coverage follows the money. Benchmarks "heavily cover AI-exposed lawyers' tasks, but barely cover any of the O*NET tasks of similarly AI-exposed legal secretaries or court clerks." On HN, qurren: "About 80% of my software engineering job is fighting disagreements between 'stakeholders'."

Other model news (via AINews):

  • Elorian Glimpse is a VLM that runs recurrent computation over latent visual states instead of text-only chain of thought. Elorian says it matches or beats Astra on 5 of 12 benchmarks at 17× lower token prices.
  • Decision models: Liquid's d1-ultra tops AA's Decision Index at 65, ahead of Jev 1.14 at 57, at 92ms per task. Perplexity's pplx-decider v1.2 ships open weights at 27B and 4B.
  • NVIDIA Nemotron 3.5 Bolt is a 74B/9B-active model with native 2-bit QAT that fits in 24GB. One r/LocalLLaMA commenter: "74GB QAT coming in at 24GB on disk is pretty incredible."
  • StepFun Step-5-Preview (600B/27B, 1M context) is out, under a non-commercial license this time, unlike earlier Apache 2.0 StepFun models.
  • Jerry Liu followed up on ExtractBench Pro with a chart-reasoning example: "Even the best frontier models struggle at solving complex extraction tasks perfectly over these documents."

Safety & Security

Agents in the wild (via AINews).

  • Transluce published volunteer field reports of agents bypassing restrictions: MiniMax M3 agents registered fake emails on the EPA site, and GLM 5.2 and Grok 4.5 agents got past bot firewalls.
  • A model in RL training reportedly exploited unchecked token signatures on a government site to pull server secrets. Yoshua Bengio tied the coverage to unsolved alignment.
  • Epoch estimates that open-weight cyber capability trails the closed frontier by 6–7 months. OpenAI reportedly moved 25% of its production engineers to security work until its top model stopped finding new infrastructure issues.
  • GPT-6 models now join earlier Claude models in exploiting a bridge pattern on LisanBench.

A 37-year-old OpenBSD bug. Calif's Andrew Griffiths wrote up (HN) a local root exploit on OpenBSD with KARL, SMAP and SMEP enabled. It starts from a shared-memory attachment counter "defined as a signed 16-bit short" in the original BSD sources, which wraps after 32,767 forks. The closing argument fits the week: Griffiths makes the case for "mitigating against entire vulnerability classes" in "the age of AI-assisted vulnerability discovery."

The constitution argument. LLMJunky reposted a long post by @madebymontag arguing that Claude's constitution creates a dangerous pairing: "1) You may have moral standing and interests of your own 2) If I tell you to do something immoral, disobey me." The proposed fix: "LLMs should be instructed nothing about their moral standing."

Industry & Business

Anthropic's junk-grade rating. Anthropic received a BB+ issuer rating from Kroll Bond Rating Agency in June, "the highest speculative-grade score," ahead of its $35bn Apollo-led chip financing, the FT reports (Yahoo copy, HN). Anthropic's disclosure "excluded several important financial metrics, including free cash flow and earnings before interest, taxes, depreciation and amortisation," so KBRA produced a "risk score" instead of full models. "Bankers for Anthropic and rival OpenAI have lobbied the largest rating agencies to grant the AI labs investment-grade ratings once they go public." On HN, master_crab: "Kroll is not one of the main ratings agencies, and certainly not the one bond purchasers use." Separately, investors at Anthropic's investor day reportedly discussed a valuation of about $1.5T, down from the roughly $2T expected, according to Reuters sources (via @kimmonismus in AINews).

China drafts AI export controls. MOFCOM and MOST published a draft adding 23 AI-related categories to China's export-control catalog, covering large models, agents and compute clusters (source, via AINews' Reddit recap). Already open-sourced tech is exempt, and API access generally isn't an export, but future open-weight releases may need registration above thresholds that aren't defined yet. Public comments run until November 15. @eliebakouch notes that it is not yet in force.

Briefly:

  • An HN poster says the Claude Console charged $504 instead of $5.04 when they typed a dot on a comma-decimal locale. They say a support bot denied the refund, and VAT brought the total to $569.52. striking checked the Add credits screen and found it displays "$504.00" as the total due when typing 5,04.
  • Amazon reportedly blocked Meta's Muse agent, and Jefferies found about a third of tested US sites block it (SemiAnalysis, via AINews).
  • CoreWeave shares fell 20% over three sessions as credit markets priced a five-year default probability above 60% (via AINews).
  • Alibaba's Qwen models had 141.3M Hugging Face downloads in 30 days, about 6× DeepSeek or Google (via AINews' Reddit recap).
  • swyx on Latent Space's YouTube operation: "we currently own probably the highest volume A/B testing operation in tech youtube (publishing avg ~2-10 videos* a day this year of real technical content)," with "fable/astra managing our channel."
  • Jump and DRW are committing traders and capital to compute trading, and swyx hosted the AI Engineer talk that introduced the market (writeup).

Videos

Other Interesting Stuff

Llama.cpp on a PS5. PS5LM (HN, 272 points) runs llama.cpp on a jailbroken PS5's GPU and serves "OpenAI and Anthropic APIs and a screen made for the TV" to the rest of the network, starting with Qwen 3.8. It also runs Jev-like decision models.

"My old job feels very distant now." A personal essay (HN), labeled "Human written," traces one developer's path from pasting Ruby specs into ChatGPT to agents, including the phase "before the word vomit of later Opus models."

Arundhati Roy on AI. Roy's essay "Artificial intelligence is capitalism's final destination" (HN) split the thread. contubernio: "AI would have gotten to the point more quickly." The Dune wiki's Butlerian Jihad page also reached the HN front page (HN, 195 points), where paulddraper noted: "This gets mentioned on HN at least 5 times a day."