Moonshot's Kimi K3 was the day's biggest and genuinely new story: a ~2.8T-parameter open-weight model that, on the circulating benchmarks, beats Claude Opus 4.8 across the board while pricing near Sonnet. The reaction went past hype into numbers — confirmed benchmark tables, an independent index score, and a first-place Design Arena finish — with the through-line that open weights are no longer six months behind the closed frontier.

The evidence piled up quickly: an independent tracker scored it at 57, a head-to-head tally had it beating Opus 4.8 on all 14, the open-vs-closed gap looked gone, and it was framed as one of the year's most important open launches.

A very human cluster formed around competitive rate-limit resets. OpenAI's Tibo Sottiaux announced Codex passed 9M active users and casually reset everyone's weekly usage to 100% — and within the same window Anthropic's ClaudeDevs account also reset 5-hour and weekly limits for all users. Observers read the simultaneity as direct competitive pressure, and the replies turned into a real product-design debate about how usage caps should work.

The back-and-forth was the story: Anthropic reset both windows the same day, the simultaneity read as pressure, OpenAI openly polled whether to drop the 5h limit, and users pushed for banked resets over forced ones.

The Claude Code / Codex skills conversation shifted from novelty to methodology. Thariq's "thin prompts, thick artifacts + context, thin skills" line crystallized how practitioners now structure agent work, and concrete skills showed what that looks like in practice — reusable, auditable workflow packaging rather than one-off prompt tricks.

The standouts were practical: an improve-ui skill that audits an interface against its own design language, NVIDIA using Codex to post-train a model from 54% to 93% in a day, and curated shortlists of which skills actually stick.

Security Twitter had unusually concrete substance. A 1-click remote-code-execution bug in Windows PowerShell (CVE-2026-40400) went public on Patch Tuesday, and around it the feed surfaced a run of fresh, patch-now items rather than the usual vague warnings — the kind of disclosures worth acting on the same week they drop.

The concrete ones: an AnyDesk zero-day (CVE-2026-15682), a Suno data breach exposing mass scraping, and — separately — OpenAI announcing GPT-Red, its internal automated red-teamer for finding prompt-injection flaws at scale. A busy week for defenders across both classic and agent-era surfaces.

Following yesterday's Inkling launch, the fresh angle was the reality check. Artificial Analysis pinned Thinking Machines' model at 41 on its Intelligence Index — leading US open weights but well below the Chinese open frontier — and independent testers backed that up, a contrast sharpened by landing the same day as Kimi K3.

The second look was more sober: the launch framing was "best outside China", the architecture drew genuine interest, and an adjustable effort dial stood out — but the testing verdict was that it isn't yet frontier.

A standout isolated launch for the self-hosted crowd: German developer Hendrik Mans spent a year building a free, open-source Slack replacement, which climbed to 791 points and 211 comments on Hacker News. A rare case of a genuinely full-featured team-chat tool you can run yourself, carried by a one-person story rather than a launch budget.

Another sharp standalone for the terminal crowd: Pipet, an open-source command-line tool for web scraping and pulling structured data out of pages, with a small, composable design that fits neatly into shell pipelines and cron jobs. A practical devtool for anyone who scripts their own data gathering.