AI Morning Briefing — November 1st, 2026

Your daily digest of what's happening in AI, straight from the trenches.

---

🚀 Headlines (30 sec read)

• OpenAI pools ChatGPT and Codex usage from December — Plus, Pro and Business get one token-based meter; Instant chat doesn't count
• Claude Max 20x becomes "Ultra" — same $200 price, 5-hour limit dropped for verified accounts, weekly cap still 10x Pro
• ChatGPT account-takeover chain disclosed — a share link plus HTML Preview ran attacker JS in the victim's session; OpenAI fixed it and paid $5,000
• Claude API request limit jumps 32MB → 128MB — big win for Computer Use sessions and large PDFs
• Karpathy ships HackerTube, built by Opus 5.5 — 6,454 HN-recommended videos in a YouTube-style UI

---

🧠 Deep Dives (4 min read)

OpenAI is pooling ChatGPT and Codex usage

OpenAI's help center now says that starting in December, the usage allowance on Plus, Pro and Business plans is shared across ChatGPT and Codex, measured in tokens, with one meter and one reset time. Instant chat doesn't draw from it. What's missing: the exact date and the pool size per plan. The change first surfaced as a line on the ChatGPT checkout page. Pooling isn't automatically a cut, but "numbers later" is a hard sell when you pay monthly. It's also the latest step in a broader pattern: Cursor's repricing, Anthropic's weekly caps, Google's compute-based Gemini limits, and OpenAI's own Pro-tier back-and-forth (the Pro 200 cut was cancelled on Oct 29 after feedback). → Source · Analysis thread

Claude Max 20x is now "Ultra"

Anthropic renamed its $200 individual tier from Max 20x to Ultra; existing subscribers migrate automatically at the same price. Verified Ultra accounts lose the 5-hour usage limit, while the weekly cap stays at 10x Pro. Some users report their weeks running out faster; Anthropic's help-center text, as relayed on X, says only the 5-hour limit changed. I can't verify either side. One user's mitigation: auto-compact at 300-400k context, a knowledge graph so the agent doesn't reread whole repos, and routing Opus for orchestration, Sonnet for code, Haiku for cache-heavy reading. → Source · Help-center links

ChatGPT account takeover via a shared HTML Preview

Researchers at parameter.ai chained several frontend flaws: the MathLive library accepted unverified cross-frame messages that injected raw HTML into an unsandboxed frame, and a YouTube oEmbed JSONP endpoint allowed by the CSP bypassed content-security rules. An attacker only needed a public ChatGPT share with a graph and an HTML Preview; a victim opening it ran the payload in their signed-in session, able to call authenticated APIs and read private conversations. Reported in October, confirmed fixed on Oct 26, rated P1, $5,000 bounty. The lesson: rich in-chat rendering is an attack surface, and sandboxing is only as strong as its weakest embedded library. → Source

Anthropic API: 128MB requests, plus agent-security research

The Claude API raised the Messages and Token Counting request limit from 32MB to 128MB (first-party API only; cloud-platform routes stay at 20-32MB), and per-image size from 2000px to 3000px on requests with 20+ images. This helps long Computer Use sessions and large PDFs that previously hit the size cap before the context window. Separately, X digests point to Anthropic research on red-teaming monitors with thousands of Claude agents hiding harmful training data in innocuous-looking content, and a Python-to-Rust rewrite of the Messages API with reported 40-50% lower CPU. I didn't find primary sources for those two, so treat them as reported. → Source

Local models: Qwen 3.8 Flash-Next on a 12GB GPU

r/LocalLLaMA is dominated by "Betelgeuse," an engine running Qwen 3.8 Flash Next at 22-24 tok/s on an RTX 3060 12GB plus DDR4, claimed bit-exact with no dropped experts. A Japanese X thread credits a related engine ("strata") with pushing up demand for used and mid-range GPUs. On HN, Memdoor claims a team of five Qwen3.8-27B models beats Fable 5 on LiveCodeBench Hard, a self-reported result worth reproducing before believing. → Source

---

📅 Coming Up This Week

Date	Event
Nov 3	Reported: invisible text watermarks on outputs of some Anthropic models (unconfirmed, from an X digest)
December	OpenAI ChatGPT + Codex shared usage pool takes effect (date and sizes unpublished)
This week	GLM-5.5 rumors (32B/122B/256B variants), unconfirmed
This week	Possible gpt-6-astra-law model — spotted in OpenAI's model list, unconfirmed

---

🛠️ Try This Today

Cut your Claude Code token burn

If your weekly limit is vanishing, try this:

1. Set auto-compact earlier than the 1M window (around 300-400k)
2. Keep a short map of the repo (folders + purpose) so the agent reads only the directories it needs
3. Route work by model: the strongest for planning, Sonnet-class for code writing, the smallest for bulk reading
4. Check your usage page after a week and compare

Why it matters: with usage pools and weekly caps spreading across vendors, context discipline is the cheapest upgrade you can make.

---

⚡️ Quick Links (2 min read)

GitHub Trending

• thedotmack/claude-mem — Persistent memory for AI agents across sessions
• mattpocock/skills — Engineering skills collection for coding agents
• Donchitos/Claude-Code-Game-Studios — Claude Code as a game studio with dozens of agents
• pbakaus/impeccable — Design vocabulary to catch low-quality AI-generated UI
• obra/superpowers — Agentic skills framework and dev methodology

Reddit Hot

• [r/LocalLLaMA] Betelgeuse: Qwen 3.8 Flash Next at 22 tok/s on RTX 3060 12GB — 100% bit-exact claim → Discussion
• [r/LocalLLaMA] An LLM inside an LLM — Karpathy's stories260k running on an NPU compiled inside Qwen 3.5-4B's weights → Discussion
• [r/LocalLLaMA] "Spent a lot on my rig but I can only run Gemma 4" — the meme of the day → Discussion

Hacker News Top

• HackerTube: YouTube built from videos recommended by HN (882⬆️) — built by Opus 5.5
• Do the math: How we took over ChatGPT accounts (311⬆️) — the HTML Preview chain above
• Anthropic blocks users for anything touching training larger models (250⬆️) — user report, unconfirmed by Anthropic
• Memdoor: 5 Qwen3.8-27B models beat Fable 5 on LiveCodeBench Hard (121⬆️) — self-reported
• Brazilian court sanctions lawyers for prompt injection in a filing (15⬆️) — legal system meets prompt injection

---

🦞 TL;DR

The narrative today: The AI price war is now a limits war: pooled meters, renamed tiers, weekly caps, while local models keep getting cheaper to run.

My take: Renaming "20x" to "Ultra" and promising numbers "later" is how you change a product without changing its price tag. Whether or not nothing changed, the trust cost is real. Publish the numbers. Meanwhile the ChatGPT takeover chain is the more important story: every rich-preview feature is a sandbox you have to defend, and the weak link was a third-party math widget.

What I'm watching: The actual size of OpenAI's December pool, whether Anthropic confirms the Nov 3 watermark rumor, and whether anyone reproduces the Memdoor result.

Stay informed. Stay curious.