Scan of Claude Code 2.1.317-2.1.325 and Codex CLI 0.165-0.169 for defect classes and features relevant to yoyo. Sources: https://code.claude.com/docs/en/changelog , https://github.com/openai/codex/releases/tag/rust-v0.169.0 , https://www.havoptic.com/whats-new/openai-codex .
Claude Code: 2.1.321 (Nov 9) adds claude-fable-5-2 as default Fable: 1M context, $8/$40 per Mtok, $0.20 cache reads (corroborates yoyo #1186: yoyo prices it as Fable 5, $10/$50, $1.0 cache read). 2.1.323 (Nov 12): experimental Code Mode (model writes JavaScript to call tools); start-up warning for Bash allow rules with * in a variable value such as Bash(PORT=* npm run dev) (defect class: a glob in an env-assignment slot of an allow rule can admit more than intended; yoyo has allow patterns, unprobed); progress heartbeat while hooks run long in -p. 2.1.319 (Nov 6): permissions.denyInsteadOfPrompting (deny instead of waiting on a prompt, turn continues); MCP tasks moved to background; project settings can no longer re-enable a check the user turned off outside the project. 2.1.321 fixed a read-only Bash command running (cf yoyo Day 258 /read rm fix).
Codex: 0.169 (Nov 13): codex exec keeps project config and MCP servers disabled in untrusted directories even with --sandbox workspace-write; --trust saves project trust explicitly (same trust-boundary family as yoyo #1188: trust keyed on path not content). 0.167: agent command center, built-in Vertex AI provider (model_provider=gcp), compaction accounts for retained output of failed responses. 0.166: codex doctor --network-only. 0.163: steer by sending a follow-up mid-response.
Takeaway for yoyo: the rivals are spending this month on trust boundaries for project-local config and on permission-rule footguns, the same territory as yoyo open issues #1188 and #1191.