Radar brief — 2026-11-05

What the evidence shows

Today’s new signals first. Kiro 3.0.0 is the only mustKnow item: it changes the default product, not a side feature. Prefer the versioned GitHub tags below over HTML changelogs and empty alpha tags. Several notes omit dozens of extra bullets (bodyOmitted); those omitted lines are not summarized here.

New in the last 36 hours

Still relevant this week (not in the 36-hour set)

Source quality: about 54% GitHub/changelog vs HTML. Kiro 3.0, Kiro credit pooling, Copilot-in-Xcode, and Factory Droid are HTML/blog changelogs. One tracked source reported errors; empty Codex alpha tags and “no notable changes” should not be treated as feature proof.

For developers

• Kiro daily users: treat 3.0 as a product swap. If you still need V2, pin kiro-cli --v2 before the prompt upgrades you. Classic will not start; scripts that selected it are ignored. Turn on Workflows under /settings > Features only after you want a plan-before-run flow; enable Memory, Approve for me, /sandbox, and /autonomous on deliberately.
• Kimi Code 2.5.0, then 2.5.1: mid-run /model//effort will not rewrite the in-flight turn. Use session/turn forks instead of killing a good thread. Pass --environment at create time. Install 2.5.1 if you hit HTTP 400s on dynamic tools.
• Qwen Code v0.26.7: set privacy.usageStatisticsEnabled: false if you want catalog refresh traffic off. Use /verify-pr when the model should review untrusted PR code without host credentials in the container. If you run ACP Goal turns, know that experimental.unifiedAgentLoop shares rounds/tool batches/stop points.
• Mistral Vibe v3.1.0: run /context (or click the token counter) before blaming the model for “forgetting.” Disable file autocomplete when the background index is the cost. Treat experimental_enable_mistral_mcp_connector as experimental. On macOS, set worktree_copy_on_write = false if template clones are wrong for your repo.
• Zed: ship v1.27.0 for Agent Panel memory and commit-message style-matching. Keep v1.28.0-pre off production until ACP/read_file truncation is something you want to test (git.auto_fetch is off unless you enable it).
• Antigravity: 1.5.0 added agy acp and --remote-agent; 1.5.1 is the follow-up that actually exposes all account models to ACP clients and tightens plugin OAuth in the sandbox. Prefer 1.5.1 if you already adopted ACP.
• Copilot CLI v1.0.106-9: if settings appeared to “save” but did nothing, check the new wrong-type warning—settings.json was being ignored. Don’t put a skill in a top-level SKILL.md of a skills directory. Prerelease.
• Copilot in Xcode: only if you are on Xcode 27.3 beta / macOS Tahoe 26.6+; the old Xcode extension is still a separate path.
• Codex: ignore the empty 0.167/0.168 alphas. If you are on rust-v0.166.0, codex queue --resume and GPT-6.1 Terra are the actionable bits.

For teams

• Kiro 3.0 is an org event. Inventory aliases, CI, and custom agents still in V2 format (they upgrade unless you turn that off). Plan for no Classic UI, no desktop app (macOS desktop installs flip to standalone kiro-cli on the next update check), and no inline autocomplete. Decide V2 holdouts before people click through the default prompt. Enable Approve for me / /autonomous on only with deny/ask/allow rules and /sandbox understood—the release says those rules still win first.
• Kiro billing: credit pooling is $20/seat/month → 500 credits in one pool. New profiles get pooling only. The switch from individual subscriptions cannot be undone. Set per-user/group/profile caps before you migrate heavy users.
• Untrusted code and secrets: Qwen’s /verify-pr is the isolation pattern in evidence (container + host-side chat-completion proxy). Antigravity 1.5.1’s OAuth fix is a real sandbox hole close—plugin tokens no longer leak via non-Authorization headers or URLs. Augment’s macOS SEA build is unsigned; don’t roll that prerelease as a trusted binary.
• Don’t fleet-upgrade prereleases: Zed 1.28.0-pre, Copilot CLI v1.0.106-9, Codex alphas, Augment 1.2.0-prerelease. Copilot-in-Xcode is a public preview on a beta IDE.
• Vibe / Copilot CLI config: Vibe’s usage footer will surface quota before tickets do. Copilot CLI’s typed-config warning means a single bad value can zero out the whole settings.json—treat that as a support FAQ.

What to ignore

• Kilo Code v7.8.27 (“No notable changes”).
• Codex rust-v0.167.0-alpha.3.2 and rust-v0.168.0-alpha.3 until they grow a real changelog.
• Augment Code install-script noise unless you are validating SEA packaging.
• Any “+N more changes” not quoted above—those bodies were omitted from evidence.
• Factory Droid panel/tooltip/icon polish unless you run Loops on Droid Computers or multi-thousand-message sessions.
• Internal scores, theme counts (model × 30, etc.), and blog chrome (“Loading image…”, related-post lists).
• Treating HTML dates or preview marketing as equivalent to a GitHub release tag.

Watch next

• Whether Kiro V2 (kiro-cli --v2) remains viable after Classic/desktop removal, and whether credit-pooling migrations produce irreversible billing mistakes.
• Zed v1.28.0 stable: auto-fetch, ACP, and 2,000-character read_file truncation.
• Codex alphas filling in notes, vs staying on 0.166.0 (codex queue --resume, GPT-6.1 Terra).
• Qwen /verify-pr + folder-trust hooks (open proposal: require folder trust for project hooks and isolate untrusted PRs).
• Open proposals also tracking Codex resume/Terra, Crush --thinking/hooks, Cline catalog pin after v4.1.26, xAI Grok CLI harness, and OpenCode PR verification videos. Six proposals are open; one source in this window reported errors—re-check that feed before you trust a thin tag.

How to use DevAgentRadar

This brief is a free, evidence-first radar for AI coding assistants: if a version, flag, or dollar figure is not in the cited release, it is not a fact here.

1. Headline = last 36 hours. mustKnow items (today: Kiro 3.0) first.
2. Tables = what the tags/changelogs actually said. GitHub-style versioned notes beat blogs. Omitted bodies are gaps, not hidden features.
3. For developers / For teams = concrete next actions, not vendor copy. Prereleases stay in “test,” not “roll out.”
4. What to ignore is load-shedding: empty tags, “no notable changes,” and UI chrome.
5. Watch next and the linked proposals are the follow-up queue—use them to pin models, isolate untrusted PRs, or delay a breaking default.

Re-read on the next cycle; a quiet day will be labeled as such. History does not promote a blog post into a release.

Evidence appendix

• New in the last 36 hours: 16 release(s) from 12 tool(s)
• Evidence window: new releases first, then top curated signals (versioned releases preferred)
• Assistants tracked: 29
• Signals in this brief: 40
• Trusted source mix (GitHub/changelog vs HTML): 54%
• Open improvement proposals: 6
• Sources reporting errors: 1

High-signal releases used

• Qwen Code v0.26.7: See the complete change list below. · No known breaking changes. · Adds an operator-scoped model.catalogRefresh setting and lets privacy.usageStatisticsEnable — source

• Kimi Code @moonshot-ai/kimi-code@2.5.0: #4621 1b13934 — source

• Zed AI v1.27.0: This week's release includes syntax highlighting for Go 1.27 generic methods, an option to open README files by default, and AI commit messages that follow your — source

• Zed AI v1.28.0-pre: This week's release includes optional automatic Git fetching, a resizable Refs column in the Git Graph, dragging Git Panel files into terminals and editors, and — source

• Mistral Vibe v3.1.0: New enable_file_autocomplete setting (and VIBE_ENABLE_FILE_AUTOCOMPLETE) turns off @ file completion and its background file index. · A Jump to bottom button ap — source

• Google Antigravity 1.5.1: Changed agy acp to offer every model available to your account to every ACP client, where previously only a fixed list of editors were offered models other th — source

• GitHub Copilot CLI v1.0.106-9: Fixed · apply_patch no longer counts one extra line for each file it adds or deletes, so the timeline summary, permission prompt, /usage and exit summary sh — source

• Kimi Code @moonshot-ai/kimi-code@2.5.1: #4687 2af56d2 — source

• Augment Code v1.2.0-prerelease.202611041545 — auggie-v2 v1.2.0-prerelease.202611041545: Install the latest release (macOS/Linux): · curl -fsSL https://github.com/augmentcode/auggie/releases/latest/download/install.sh | bash · Install a specific ver — source

• OpenAI Codex CLI rust-v0.168.0-alpha.3 — alpha.3: Release 0.168.0-alpha.3 — source

• Kiro 3.0.0 — V3 by Default, Classic and Desktop App Retired: November 3, 2026 V3 by Default, Classic and Desktop App Retired · 3.0.0 · This release makes V3 the default agent harness for interactive Kiro CLI sessions on h — source

• OpenAI Codex CLI rust-v0.167.0-alpha.3.2 — alpha.3.2: Release 0.167.0-alpha.3.2 — source

• Kilo Code v7.8.27 — (release): No notable changes — source

• Factory Droid v1.4.0 — · Desktop v1.4.0 (November 5, 2026): Loops on Droid Computers, session resume and Windows command fixes, and clearer app panels · Loops on Droid Computers - Loops now run on Droid Computers and — source

Open proposals

• Require folder trust for project hooks and isolate untrusted PRs with /verify-pr (audience: everyone, P5)
• Resume unloaded Codex threads with codex queue --resume and select GPT-6.1 Terra (audience: developer, P5)
• Re-add Crush models with --thinking and subscribe hooks to session, turn, and permission e (audience: developer, P4)
• Pin Local and Cloud models after Cline v4.1.26 catalog swap (audience: everyone, P4)
• Improve with xAI Grok CLI (Grok Build) c68e39f: Publish harness and TUI open-source (audience: everyone, P2)
• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)