Claude Code 2.1.222 patches a worktree escape into your main repo
The isolation you trusted for safety leaked: subagents could run destructive git on main. Plus Opus 4.1 retires, and a 28.9M-param LLM on an $8 chip.
Copy markdown
The escape: worktree isolation wasn't isolating
Isolated worktree sessions and their subagents could run destructive git commands against your main checkout — the one thing the sandbox was meant to prevent. 2.1.222 blocks it; update now if you rely on worktrees to fence in agents.
Auto-allow hooks stop leaking into background tasks
PreToolUse auto-allow hooks no longer bypass your tool restrictions inside background tasks. If you set broad auto-allow for convenience, background subagents were quietly inheriting more reach than you granted.
ultraplan is gone
The same release removes the ultraplan feature. If a workflow leaned on it, it's no longer there — regular plan mode stays. Grep any scripts or docs that referenced it.
Opus 4.1 now returns errors
Anthropic retired claude-opus-4-1-20250805 on Aug 5 — every request errors out. Move calls to Opus 5 (same $5/$25 per million in/out tokens) and check your code for pinned 4.1 IDs before it breaks a prod job.
Vercel AI Gateway lands on AWS Marketplace
You can now buy AI Gateway through your AWS account with consolidated billing and draw it down against existing AWS spend commitments. If your budget already lives in AWS, that's one less invoice and one less procurement hoop.
Build this weekend: a 28.9M-param LLM on an $8 chip
A char-level transformer now trains from scratch — full backprop hand-written in C — on an $8 ESP32-S3 microcontroller, generating short stories fully offline. A real door to a palm-sized, no-cloud AI gadget for under a tenner.