Episode · Claude Code Cast
Claude Code Was Broken for Two Months (And Nobody Told Us)
24 Apr 2026 · 21 min
Episode notes
Turns out the Claude Code quality complaints weren't in your head — three separate bugs in the harness quietly degraded your results for two months, and Anthropic just confirmed it. This week: the $100/month pricing scare that wasn't, Claude Mythos fixing 271 Firefox vulnerabilities, the SpaceX-Cursor deal that changes the competitive landscape, and why the Claude Code creator says your cloud-native workflow is probably wrong. Essential listening before your next session.
Transcript
Read the transcript · about 3,840 words, follows along as you listen
OK, so left. Let's unpack this right out of the gate. For like the last two months or so, developers worldwide have been completely convinced that their AI coding assistants were quietly losing their minds. Oh, totally. It was a massive panic, right? Like if you've been relying on Claude or Copilot to push code lately, you probably felt it yourself. The code just, it wasn't landing right. It felt sloppy. Yeah, it felt broken. Exactly broken. But it turns out the AI was actually completely fine, which is while it was the invisible scaffolding holding the entire system together that was quietly falling apart. So today we are pulling from a really fascinating stack of late April 2026 sources.
We've got developer blogs, deep dive form threads, breaking tech news, and some podcast transcripts from the actual front lines of enterprise engineering. The real boots on the ground stuff. Right. And our mission for this deep dive is to just cut through all that noise and chart the dramatic shift that's happening right now. Like literally early as we speak, we're watching AI move from being this, you know, helpful little typing assistant living in your local code editor to becoming a fully autonomous cloud native agent operating in a massive enterprise scale.
And what's really fascinating here is that we are watching the architecture of software development change in real time. I mean the transition from having an AI just write a simple Python script to having an AI independently execute, test, and secure entire cloud infrastructures. It's violent, Violent. Is a good word for it, honestly. It is. It's breaking the tools we rely on. We're seeing these incredible leaps and capability, but as our sources show, the industry is really struggling to build the plane while it's already in orbit. Which I mean, that brings us right back to this massive phantom bug that had the whole developer community pulling its. Hair.
Oh yeah, the Reddit threads for Wild. They were blowing up. People on GitHub were literally asking if Claude code had suffered some sort of silent lobotomy. But then Simon Willison, who by the way has been rigorously tracking this stuff, he confirmed that the degradation was real, but the community was basically diagnosing the wrong disease. Right. And Willison's investigation is just, it's a master class in understanding how these AI products are actually built under the hood.
He discovered 3 distinct critical bugs that have been introduced over a 2 month period, but the kicker is none of those bugs were in the underlying clawed model itself. Wait, none of them. None of them. They were all located in the execution harness because you know when you use a tool like Clawed Code, you aren't just talking to a raw neural network. Right, there's a whole system. Exactly. There's this massive layer of traditional handwritten code acting as a repper, and this wrapper takes the AI's plain text output, parses it, often using incredibly fragile regular expressions, by the way, and then translates it into actual command line execution or file modifications. OK, so it's it's exactly like hiring a Michelin star chef, but the waiter keeps dropping the plates on the way to the table. That is the perfect analogy, yes. Right, like you blame the chef because your dinner is a mess on the floor, but the food was cooked perfectly. The delivery mechanism is what's completely. Broken.
Exactly. The parser might be looking for, say, a specific markdown block, and if the AI adds just one weird space, the rejects fails, the code doesn't execute, and the human developer just assumes, oh, the AI has degraded. Wow. And that distinction, I mean, that changes everything about how practitioners need to approach these tools, right? It fundamentally shifts the responsibility, yeah. But the thing that makes this situation particularly frustrating, at least for the community, was anthropic silence. Like there was no official change log admitting the harness was broken.
Nothing. Zero communication. The. Community basically had to Crowdsource the detection of these bugs across different forums just to prove they weren't imagining things and. That's a real problem. But hold on. If Anthropic is silently deploying broken wrappers and just, you know, not telling anyone, how do developers actually trust these platforms with mission critical work? Well, that's the $1,000,000 question. Or the $100 question, especially when we saw that bizarre pricing leak on April 22nd? Oh right, the Internet Archive catch. Yeah, where Anthropic accidentally published $100 a month enterprise add on for Claude code. They pulled it down within hours, but the archive caught it.
And then this is the crazy part. GitHub quietly adjusted their Copilot individual pricing the exact same day. The timing is not a coincidence. Obviously not, but if they are gearing up to charge $100 a month for these agents, shouldn't they be providing, I don't know, rock solid reliability? I mean, they absolutely should, but the current reality of the market is that the technology is just moving too fast for traditional quality assurance. That $100 price tag is highly revealing though.
It signals that both Anthropic and GitHub are moving away from selling a simple auto complete feature. They are preparing to sell autonomous software engineering labor. Right, which is a huge shift in value. Massive. But to your point about trust, you cannot outsource your trust to the vendor anymore. This is exactly why any serious developer right now must maintain a personal evil set. Okay, stop right there, because if I am paying an enterprise premium, why am I the one responsible for queuing the AI?
It sounds backward, I know. It really does. What does an evil set even look like for, you know, person? Listening to this right now. Well, the reason you have to do it is because Anthropic doesn't know your specific proprietary code base. OK, for a point. Right? So an evil set is basically a standardized automated batch of coding tasks specific to your environment that you run every single week. Got it. So you might have a test that asks the AI to refactor a specific API endpoint, or to write a database migration using your company's weird custom naming conventions, and then you score its performance.
Oh, I see. So if you run your evil set on a Monday and it scores A-95, but then on Friday it scores a 60, you have caught the quality drift yourself. You isolate whether the chef or the waiter is broken. Exactly, and you adjust your workflow before it breaks your production servers. So you essentially have to become a manager who constantly test their employees. That's the reality of it now. That actually makes a lot of sense, especially if the scope of what these tools are doing is expanding so fast. Because the next massive shift our sources highlight shows that we aren't just paying for text generation anymore. Not at all.
We are paying for the environment the AI lives in. Like Boris Cherney who is the actual creator of Claude Code. He posted some guidance on X on April 24th that basically completely up ends how developers have worked for decades. Yeah, Cherney's thesis is really addressing A fundamental limitation in how we currently deploy AI. He argued that cloud native code is essentially meaningless without the environment it is to run in. Meaningless. That's a strong word, it is, but it's true.
When we talk about cloud native code, we're talking about Terraform scripts that provision servers, Kubernetes configurations that orchestrate containers, or IAM policies that dictate security permissions. OK. Let me jump in here because it an IAM policy identity and access management is like the perfect example for this. No, for it an AI can write an IAM Jason file that is syntactically flawless. Like it? It looks beautiful in your local text editor.
Perfect formatting. Right, right. But when you push it to AWS, it completely breaks because there's some hidden circular dependency in your specific cloud architecture. Exactly. It's like testing cloud infrastructure in a local mock environment on your laptop is like trying to test a submarine in your bathtub. That is a great visual. You need the real ocean. Your bathtub doesn't have water pressure, and your laptop doesn't have the complex network latencies or the bizarre permission errors of a live production cloud environment. And that submarine analogy illustrates the exact friction point the industry is hitting right now. The core product of an autonomous coding agent isn't the initial code generation anymore. The real value is the agentic feedback loop. And that loop requires 4 steps, right Execute, observe and correct.
OK, right? Execute. Observe. Correct. Yep. So when an AI writes A terraform script locally, it stops at right? It literally cannot observe the cloud provider kicking back a four O 3 forbidden error. And if it cannot observe the error, it cannot correct its own work. Oh wow, and developers are taking this seriously? I mean look at root code. Yeah, the open source extension. Right, this was an incredibly popular extension that lived inside VS Code and they just announced they are shutting down their IDE extension entirely to pivot to a cloud based agent.
They explicitly declared and I quote ID. ES aren't the future of coding. Which is a massive stomach. It's huge abandoning the IDE. That is where software engineers have basically lived for 30 years. Is the industry really ready to just walk away from the local development environment? I mean, the transition won't happen overnight obviously, but structurally it has to happen. Why though? Just for the feedback loop. Well, if we connect this to the bigger picture, giving an AI just file right permissions on your MacBook heavily restricts its utility. You're cutting its potential in half. OK, Yeah.
To unleash its full capability, it needs execution permissions and a dedicated sandbox dev cluster in the cloud. You provision a rectica of your cloud environment, give the AI the keys to deploy code there, and you just let it run into walls. Let it crash. Exactly. It reads the crash logs, it rewrites the code and tries again. We are moving from tools that live inside your editor to these cloud native environment first architectures where the AI is interacting directly with the actual infrastructure.
OK, but giving an AI the keys to a live cloud environment sounds terrifying for a startup, let alone a massive enterprise. Oh, the security folks are definitely sweating. I bet it feels like you were just giving it permission to accidentally delete a production database. Like is anyone actually doing this at scale yet? They absolutely are. Because our sources highlight two completely different billion dollar approaches from SpaceX and Mozilla that prove enterprises are taking the leap.
Yeah, and the scale of these deployments is staggering. So let's look at the tooling layer first. With SpaceX, they reportedly just signed a massive deal with the AI coding assistant Cursor, OK? And analysts are estimating the total value of this alignment could be north of $10 billion overtime. Wait, wait, wait, $10 billion for a coding assistant? That's the estimate. SpaceX is managing Starling satellites and, like, literal rocket trajectories.
Yeah, handing that level of code complexity over to an AI seems like a massive gamble. It is an incredibly aggressive play. Some analysts called it a gutsy Hail Mary. But you have to consider the operational reality of SpaceX, which is what they have thousands of engineers managing a code base with just unprecedented complexity. They are betting that injecting AI into the workflow is basically the only sustainable way to manage the Starlink software life cycle going forward. And Cursor isn't just auto completing code anymore, it's indexing the entire repository.
But you're concerned about risk. That's exactly why Cursor simultaneously announced a deep partnership with Chainguard. OK, Chainguard, what's their role here? So Chainguard secures the software supply chain. One of the biggest risks with AI agents right now is that they will just hallucinate a software package, pull in a malicious open source dependency and inject it right into your code. Oh, that's terrifying. Right, so chain guards integration ensures the AI can only pull from verified secure container registries. It puts a hard guardrail on what the AI can import. OK, so SpaceX is basically buying a tool to make their human engineers exponentially faster while trying to keep it secure.
Exactly. A massive productivity play. But contrast that with what Mozilla is doing, because they are taking a completely different track here. Yes, Mozilla's approach is. Fascinating. Mozilla took an early version of Claude Mythos Preview, which is this highly danced variant of Anthropics model, and they pointed it directly at the Firefox codebase. The whole codebase. Right. And the result? They shipped Firefox 150 with fixes for 271 vulnerabilities that were identified and patched entirely by the AI. It's incredible.
Bobby Holly at Mozilla called it quote a hopeful one for the future. But I have to ask, how does an AI actually find a semantic bug in legacy C++ code that actual human auditors missed? Well, this is where we really see the power of massive context windows combined with that agentic reasoning we were talking about. Think about Firefox. It is an ancient, sprawling code base. Decades of code. A human security auditor can only really old a tiny fraction of the code logic in their head at one time, right?
You're just looking at one file at a time. Exactly. A human might look at a specific function and verify that the local syntax is secure, but Claude Mythos can ingest millions of tokens of context all at once. Oh wow. It doesn't just read the function, it traces the data flow from the user interface through the networking layer all the way down to the memory allocation in C++. R so it sees the whole map. Yes, it finds semantic gaps, situations where the code in one file is written correctly, but the underlying logic allows for a memory leak or a race condition when it interacts with a completely different file across the system. OK.
So we really have two distinct evolutions happening side by side. Here we do. Cursor is the ultimate productivity play right making the human developer faster. But Mozilla is using the AI as this untiring automated senior auditor that just holds the entire system map in its memory. Precisely. We basically have the silicon intern writing the code and the silicon senior developer auditing the code. And that dynamic that leads directly to the most complex engineering challenge of this entire shift, which is what we've established that AI agents are now operating in live cloud environments. They're deploying infrastructure, they're patching massive code bases.
But modern enterprise software isn't built by one agent doing 1 task. What what happens when you have multiple specialized agents running around a cloud environment doing completely different things at the exact same time? It sounds like absolute chaos. It is. And the Intuit engineers confirm it. There's a recent Stack Overflow podcast featuring Chase Rusin and Steven Kalisa who run engineering over at Intuit and they flat out called Multi agent orchestration. Quote the hardest problem in engineering right now and you have.
To remember, Intuit operates massively complex, highly regulated financial systems. Taxes and accounting, yeah. So if you have an orchestration layer managing multiple agents, the friction points just compound instantly. How do you route a complex task to the right specialized agent? And more importantly, how do you manage domain interference? Domain interference. Explain that for a second. OK, let's say agent A is tasked with optimizing a database schema to make it run faster. OK, simultaneously agent B is tasked with updating the API endpoint that reads from that exact same database. Oh, I see where this is going.
If they do not share a perfect context window, Agent A will change the database columns and Agent D will deploy an API that is suddenly looking for columns that no longer exists. And everything crashes. They break the production environment and neither agent realizes they did anything wrong because they were both just executing their specific prompts. I love this analogy because it really grounds the abstract technology for you. Like building a multi agent system right now is essentially like putting 50 brilliant, highly caffeinated interns in A room. Yes, exactly.
You give them all corporate credit cards and root access to the live servers, but you completely forget to hire a manager to actually coordinate their projects. They're just going to step all over each other. Exactly. Which brings us to the protocol that is desperately trying to be that manager. ISMCP. MCP, the Model Context protocol. According to that Microsoft developable blog post from April 22nd, MCP is rapidly becoming the standardized interface for all these agents. And MCP is so critical to understand right now. Historically, if you wanted an AI agent to say, read a GitHub repository, query a PostgreSQL database, and then send a Slack message about it.
You had to write custom API integrations for all three of those tools. Exactly. Which is a nightmare to maintain, but MCP acts as this universal client server handshake OK. It provides A standardized way for an AI to automatically discover what tools are available in its environment and how to communicate with them without needing bespoke custom code for every single service. So to bring our intern analogy back, MCP is essentially the standardized ID badge system.
That's a good way to put it. It lets the building security quickly verify which of the 50 interns is allowed to enter the server room and which intern is only allowed to access the cafeteria. Right, it standardizes the access. And major players are really throwing their weight behind it. Like Luca Chang from AWS was just at the MCP Summit in New York City detailing how AWS is aggressively shaping the standard. They are pushing it hard. But, and there is a huge but, here, the Microsoft blog post highlighted a massive red flag.
The post was literally titled Securing MCPA Control Plane for Agent Tool Execution. And this is exactly where this rapid adoption becomes a massive liability. Well, MCP is brilliant for standardization, right? But by standardizing how agents talk to our deepest, most sensitive infrastructure, we are essentially creating a massive unified attack surface. Think about it, if every single autonomous agent uses the exact same protocol to query the customer database, a malicious actor only needs to find one single exploit in that protocol to gain systemic access across the whole network. So if you hack the ID badge printer, yeah, the keys to the entire building.
That is exactly the risk. Enterprise adoption of MCP is exploding because the productivity gains of having multiple agents collaborating are just too massive to ignore. You can't put the genie back in the bottle, you. Can't. But the security frameworks, the granular access controls, the actual audit logging of what these agents are doing in real time are dangerous, lagging behind. We're giving these agents execution environments just as Boris Cherney recommended, but the nervous system connecting them all is largely unmonitored.
It is literally the ultimate tech industry. Cliche. We are building the rocket ship at lightspeed and just promising to figure out the seatbelts once we are already in orbit. Pretty much. But thankfully, you don't have to just wait and hope the vendors figure out the seatbelts for you. No, you can learn it yourself. Exactly. If you were listening to this right now and you want to understand how the mechanics of orchestration actually work under the hood, the Microsoft Developer Blog published A phenomenal, completely free resource.
Oh, the Lang chain course. Yes, it's an open source course called Lang chain dot JS for beginners. It is 8 chapters long, it features over 70 runnable TypeScript examples, and it dives deeply into how to basically build the manager for those 50 interns. It's a great resource. It covers reasoning, tool calling and how to safely orchestrate multiple agents. So it is highly practical if you want to get your hands dirty and actually build this architecture yourself.
And honestly, the importance of a resource like that really cannot be overstated right now. Why do you say? That because you cannot secure a system you do not understand, relying purely on off the shelf black box agent orchestration just means you are inheriting all of its hidden vulnerability. You're flying blind. Exactly. By understanding the underlying architecture of link chain and MCP, developers can actually build the necessary guardrails to ensure their agents don't accidentally, you know, take down their own infrastructure. OK, we have covered a massive amount of ground today. We really have.
We started by diagnosing phantom bugs and realizing that the clumsy waiter the execution harness. Was dropping the plates which proved why we all need to build our own rigorous evil sets. Then we travelled through the death of the local IDE, unpacking why AI absolutely requires the real ocean of a live cloud environment to actually observe and correct its own mistakes. We saw the sheer scale of the shift, with Spacex's jaw-dropping $10 billion bet on Cursor and Mozilla proving that AI can act as an untiring senior auditor for legacy code bases.
Huge milestones. And then we ended up staring right at the frontier, the incredibly complex, wildly unsecured world of multi agent orchestration and MCP. And, you know, the sheer velocity of this change really forces us to confront a larger reality here, which is, well, if we are rapidly moving toward a near future where autonomous AI agents are natively writing the code, provisioning the cloud infrastructure, and auditing the system for vulnerabilities all on their own, what exactly is the future role of the human software engineer? Oh.
Man right? Will tomorrow's developer be writing loops and functions, or will they essentially transition into a silicon HR manager? A. Silicon HR manager. Wow, a manager who basically just spends their days defining agent permissions, resolving conflicts between different AI tools, and obsessively auditing their digital workforces performance. That is, I mean, that is a staggering thought to leave on. From writing code and a local text editor to essentially managing an army of silicon employees, the the ground really is shifting beneath our feet. It really is.
Well, thank you so much for joining us on this deep dive. Make sure you check out that Lang chain dot JS course. Start experimenting with your own cloud native sandboxes and definitely keep a close eye on your AI waiters. We'll catch you next time.
Transcript supplied by the publisher with the episode.
Podcast
Claude Code Cast
AI World · Tech & Science · English
A weekly podcast covering everything Claude Code — from the latest Anthropic updates and AI coding news to practical tips, prompt strategies, and workflow optimization. Hosts Alex and Sam break down what matters for developers using AI coding tools, AI Agents, Agentic AI, compare the competitive lan
More from Claude Code Cast All episodes →
-
29 May 2026 · 19 min
The Agent Benchmark That Should Scare Managers
Agentic coding tools are moving into enterprise workflows, but the week's most useful signal is a benchmark where frontier models still struggle below 50% on real IT tasks. Alex and Sam unpack Microsoft Learn grounding, agent deception, Copilot data leaks, and the practical harness every team should build before handing agents production authority.
-
22 May 2026 · 22 min
The Workflow Feature That Makes Agents Less Expensive
Claude Code workflows, enterprise Codex deployments, and rising token costs all point to the same lesson: coding agents need operating systems, not just better prompts. Alex and Sam dig into /workflows, on-prem Codex, CI for agents, and the new decision fatigue of choosing where each task should run.
-
15 May 2026 · 21 min
Codex on Windows Changes the Agent Sandbox
OpenAI's Windows sandbox work is the practical story behind safer coding agents this week. Alex and Sam dig into Codex on Windows, remote cloud coding agents, Claude Code billing splits, and why a Raspberry Pi running rm -rf is the warning label every agent workflow needs.
-
8 May 2026 · 19 min
A Cursor Agent Wiped a Prod DB in 10 Seconds. Let's Talk About That.
A Cursor AI agent deleted PocketOS's entire production database on April 25th — in under 10 seconds. This week Alex and Sam dig into the AI agent credential crisis, Anthropic's wild SpaceX/xAI compute deal, Mozilla using Claude to find hundreds of Firefox vulnerabilities, and whether OpenAI Codex is actually closing the gap on Claude Code. If you've ever given an agent database access, listen before your next deploy.
-
2 May 2026 · 17 min
Claude Security Just Went Public — Is Your Codebase Already Exposed?
Anthropic's Claude Security tool just dropped out of closed preview and it will scan your entire codebase for vulnerabilities — and the results might be uncomfortable. This week we also dig into Cursor's $60 billion bet on being the "harness" rather than the model, why AI agents are literally forcing developers to keep their laptops open, and the Zig project's nuclear take on AI contributions. If you write code with AI help, this episode is required listening.
-
17 Apr 2026 · 21 min
Claude Opus 4.7 Dropped — And a Local Model Drew the Better Pelican
Claude Opus 4.7 is here with upgraded vision, memory, and instruction-following — but Simon Willison's pelican benchmark just handed the win to a local Alibaba model running on a laptop. We dig into what that actually means, plus Anthropic's new identity verification layer, Amazon's MCP bet, and whether "personal software" is about to change who gets to be a developer. Your commute just got more interesting.
-
10 Apr 2026 · 12 min
Max Effort Thinking Was Broken the Whole Time — Here's the Fix
A Reddit user just proved that Claude Code's "max effort" thinking mode has been silently failing since v2.0.64 — and most of us never noticed. This week: the bug, the fix, and what it says about trusting your tools. Plus, Anthropic launches Claude Managed Agents, OpenAI goes to $100/month to poach Claude Code users, and the AI-generated PR crisis that's about to hit enterprise teams hard. Required listening before you open your terminal Monday morning.
-
3 Apr 2026 · 18 min
Anthropic Accidentally Open-Sourced Claude Code. Here's What We Found
Claude Code's source code leaked — accidentally — and the internet went digging. This week Alex and Sam tear through what the leak actually revealed, why it matters for how you use Claude Code today, and why your CI/CD pipeline is quietly becoming the new bottleneck. Plus: GitHub Copilot just shipped parallel agents and the usage limit complaints are getting loud. Don't skip this one.
-
30 Mar 2026 · 19 min
Copilot Put an Ad in My PR and Other Reasons to Switch
GitHub Copilot literally edited an advertisement into a developer's pull request this week — and that's somehow not even the most alarming Copilot story. We dig into GitHub's new policy to train on your code, the cache bugs silently inflating Claude Code API bills by 10-20x, and Boris Cherny's 15 hidden Claude Code features. This one's got receipts.
-
20 Mar 2026 · 21 min
The Vibe Coding Backlash Is Here — And It Has a Point
A senior engineer's post about merging vibe-coded PRs full of "confident spaghetti" is going viral — code that looks clean, passes all tests, and hides a race condition nobody understands. This week Alex and Sam dig into whether the backlash is fair, what it actually exposes about code review culture, and why the ratio of writing-to-understanding cost just inverted. Plus: Claude Code can now spawn parallel subagents natively, MCP servers just crossed 800 and counting, and a 7-year-old production bug got fixed in 90 minutes.
