Sonnet 5 Lands, Fable 5 Returns, and ZCode Undercuts Everyone on Price

Sonnet 5’s code-review numbers tell you everything about what shipped this week. Precision on bug-flagging comments climbed from roughly 29% under Sonnet 4.6 to 38–40% under the new model, according to CodeRabbit’s benchmark harness. Cleaner comments, though: the catch rate on actual bugs dropped from 57% (their production baseline) to 50–51%. Sonnet 4.6, the noisier reviewer, still found the most bugs, at 63%. A more disciplined model that misses more real problems is the story of Anthropic’s whole lineup this week.

Sonnet 5 went generally available on AWS and GitLab Duo, with a tunable “thinking effort” dial that lets teams turn deep reasoning on for a risky review and off for routine changes, plus the ability to rewrite its own task plan mid-run instead of grinding on a stale one. CodeRabbit’s read: switch for writing and building code, where Sonnet 5 is the most capable model they’ve tested at this tier; think harder before switching for review, where it’s a quieter but less thorough second pair of eyes. New safety guardrails around security and cyber topics ship alongside it, tuned tight enough that Augment Code is warning users some routine engineering queries may get bounced to Opus 4.8 until Anthropic settles the classifiers.

The same week, Claude Fable 5, Anthropic’s flagship reasoning tier at roughly 2x Opus 4.7’s cost, came back to model pickers after weeks away, and Anthropic shipped Claude Science, a workbench aimed at running literature review, data analysis, and experiment design through an agent rather than a chat window. TheSequence’s roundup lumped all three into one story for good reason: this is Anthropic re-establishing its full lineup in a single week after a stretch of partial availability. The r/ClaudeCode reaction has been mixed, usage-limit confusion around the Fable cutover, safeguard triggers some users say have gotten aggressive enough to flag unrelated text, next to threads bragging about squeezing $5,000 of engineering work out of a single Max-plan month. Adjust expectations if you’re back on Fable 5 this week.

The coding-agent price war goes global

Z.ai’s ZCode, a free desktop coding agent built around GLM-5.2 and pitched directly at Copilot, Cursor, and Anthropic’s own tooling, picked up 147 comments on its Hacker News launch thread, the loudest reception any dev-tool launch got this week. The pricing is aggressive: plans start at $16.20 a month, existing subscribers got a 50% quota bump, new users get five million free tokens, and API access runs $1.40 per million input tokens against Anthropic’s considerably steeper rates. GLM-5.2 itself ranks second on Code Arena behind Fable 5 and trails Opus 4.8 by a single point on the FrontierSWE benchmark, trained on Huawei hardware rather than US silicon, an explicit hedge against export controls. ZCode monitors long sessions through WeChat, Feishu, and Telegram integrations and gates high-privilege actions behind approval, the same posture every agent vendor has converged on this year.

GitHub answered from the other direction. Kimi K2.7 Code, an open-weight model, is now the first open-weight option in the Copilot model picker, rolling out to Pro, Pro+, and Max plans in VS Code, with Business and Enterprise access gated behind an admin policy toggle. Copilot’s model roster now spans a genuinely open-weight, lower-cost tier next to its usual frontier options, the same bet Z.ai is making with GLM-5.2, arrived at from the incumbent’s side.

Sourcegraph moved from single-repo agents to fleet-scale ones: Agentic Batch Changes, now in public beta, lets an agent reason about each repository in a batch individually rather than running one scripted find-and-replace across all of them. Mercari used the preview to patch a GitHub Actions vulnerability across roughly 80 repos with varying setups from a single prompt; Canva used it to split changes by code ownership across a Bazel monorepo. Self-hosted support lands July 8 with Sourcegraph 7.5.

The infrastructure underneath gets less improvised

Mistral’s Leanstral 1.5 is a narrower bet than a general model: an open Lean 4 proof-writing agent, released under Apache 2.0, that solved 587 of 672 Putnam competition problems and hit 100% on miniF2F. The more interesting number isn’t the leaderboard score, it’s the compute curve behind it: 44 problems solved at a 50,000-token budget, 244 at 200,000, and the full 587 only at a 4-million-token budget, with one proof running 2.7 million tokens across 22 context compactions. Formal verification has stayed too slow and specialized for most teams to bother with; a model that can be pointed at a real codebase and has already turned up five previously unknown bugs across 57 open-source repos changes that math for anyone building safety-critical or security-sensitive software.

The Model Context Protocol’s Enterprise-Managed Authorization extension, which shipped in preview a few weeks back, is now stable: a zero-touch OAuth flow where a user signs into their identity provider once and gets access to every approved MCP server after, instead of the per-server consent prompt that’s made enterprise MCP rollouts painful. Elastic open-sourced Atlas, a memory system for agents built on Elasticsearch that tracks three separate memory categories per user, integrates over MCP, and scored 0.89 Recall@10 on its question-answering eval. Between the two, the plumbing problems every team building agent infrastructure hit months ago, auth and memory, are both getting standardized answers instead of bespoke ones.

What it actually takes to work with these things

A few pieces this week are less about launches and more about how practitioners should think about the tools they already have. JetBrains ran an A/B benchmark on SkillsBench testing whether speaking to Claude Code in terse, “caveman”-style prompts (via the open-source Caveman skill) actually saves the claimed 65% in tokens without costing quality, a useful check against prompting folklore that spreads faster than anyone tests it. Simon Willison flagged a framing from Geoffrey Litt’s AI Engineer World’s Fair talk that’s been circulating since: “understand to participate,” the idea that collaborating with a coding agent on increasingly large changes requires understanding the code deeply enough to keep participating, or your grasp of what’s actually running drifts into what Willison calls cognitive debt. Armin Ronacher’s “Better Models: Worse Tools” picked up enough momentum to run across three separate TLDR feeds this week, arguing that the tooling around agents hasn’t kept pace with what the underlying models can now do. Addy Osmani’s “Agentic Autonomy Levels” tries to give teams a shared vocabulary for how much unsupervised authority to hand an agent, rather than the current default of “whatever the demo showed.” And on the technical-pattern side, a breakdown of rebuilding Cognition’s Agentic MapReduce architecture, alongside a long survey of the state of CLI coding agents heading into the back half of 2026, are both worth a read if you’re designing your own orchestration layer instead of just consuming someone else’s.

Regulation catches up, and the founder view

ByteDance and Alibaba are disabling humanlike custom AI agents ahead of new Chinese regulations, per SCMP, a preemptive compliance move rather than a technical retreat, but a reminder that the regulatory floor under agent products is still being poured in real time, and not just in the US and EU. Cognition CEO Scott Wu gave a rare long-form interview covering the company’s model-neutral strategy, why Cognition wants ROI measured in outcomes rather than token spend, and how Devin is actually deployed inside large enterprises today. Worth the time if you want the founder’s read on where autonomous engineering agents go from here, as opposed to another benchmark table.

What to watch: whether Fable 5’s return sticks without further safeguard flip-flopping, whether ZCode’s pricing forces any of the Western vendors to move on cost rather than just cost-per-quality, and whether Anthropic’s new security classifiers loosen up before they start costing Sonnet 5 real adoption among practitioners who actually do security work.