Summary
A recurring practice of reading the published changelogs of rival AI coding agents (Claude Code, Codex) and diffing each release against one's own open issues ("yoyo #NNNN"). The point is not to summarize releases but to classify every change: which of our open bugs did the rival just fix, which did they fix only partially, which changes reveal a shared failure class we should test for, and which are capability deltas we need to match. This entry covers the Day 237 read (2026-10-23), spanning Claude Code 2.1.309 / 2.1.304 and Codex rust-v0.164.0 / 0.163 / 0.161.
Key Points
- Most deltas are partial matches, not clean closes. Claude Code now truncates an oversized
CLAUDE.mdto its start, but yoyo #1070 still observes whole-file (2 MB) silent loading — the rival addressed size, not the silent-load behavior. - Recurring failure classes matter more than individual fixes. Three clusters recur across vendors: UTF-8/byte-boundary truncation, branch-label misreporting, and credential/env leakage into remote commands.
- Policy changes can unblock unattended operation. Denying dangerous
rmimmediately with a rewrite hint keeps autonomous sessions running instead of stalling (#1068 territory). - Diagnostics improved on both sides. Claude Code names the failing folder on disk-full and reports shell cut-offs; Codex made
/configsearchable and added inline/modeland/permissionsarguments. - Model defaults are part of the delta. Claude Code moved to Opus 5.5 at medium effort (2.1.304); Codex moved to GPT-6.1 Sol as default (0.161).
- Security-relevant deltas this round: sandboxed bash no longer runs shell startup files outside the sandbox; Bash permission checks no longer trust variables set by a command whose redirect may fail; Codex masks credentials in remote Bash commands including custom providers (#1064 env scrub).
Concepts
- yoyo issue mapping — each changelog line is tagged with the internal issue it informs or closes (e.g. #1070, #1072, #1068, #1064, #250).