AI Engineering Digest

Claude Haiku 5.5 lands at a tenth of Haiku 4.5’s price.

Thursday, October 8, 2026
Issue 34 · sourced briefing
Sources: Anthropic · AWS · Microsoft · NVIDIA · Google · vLLM · Liquid AI · JetBrains · Ollama
Lead Story

Anthropic ships Claude Haiku 5.5: a 1M-context small model at $0.10 in, $0.50 out

On Wednesday (Oct 7), Anthropic released Claude Haiku 5.5, its small model for high-volume and latency-sensitive work, on its own API and on AWS, Google Cloud and Microsoft Foundry the same day. For prompts up to 100K tokens it costs a tenth of what Haiku 4.5 does.

Haiku 5.5 has a 1M-token context window, up to 128K output tokens, and is the first Haiku with the effort setting, so you can trade quality for speed and cost per request. Anthropic pitches it for classification, routing, extraction, summaries and compaction, and as a fast subagent under Opus 5.5 or Sonnet 5.5. Anthropic says it is a big step up from Haiku 4.5 and costs about 75% less to run on average. The benchmarks and customer quotes in the launch post come from Anthropic.

The price drop is real, but this is not a drop-in swap. Adaptive thinking is on by default, so a response can start with thinking blocks. The old fixed thinking budget now returns an error, and so do custom temperature or top-p values and prefilled assistant turns. A new tokenizer counts the same text as roughly 30% more tokens. Computer use moves to a new toolset, Priority Tier isn’t supported, and the model can refuse requests with no server-side fallback. Anthropic’s migration guide lists each change, and Claude Code ships a migration skill.

Anthropic made more pricing changes alongside the launch. Cache reads on Sonnet 5.5 are now half price, which Anthropic says makes most agentic work about 20% cheaper. Max and Team subscribers get monthly API credits starting this week. The Python and TypeScript SDKs add beta classes that run browser-use and computer-use loops against your own automation.

What to do: re-count tokens on a sample of real prompts before you trust the 75% figure, strip sampling parameters and prefills, and make your client pick content blocks by type. Haiku 4.5 has no retirement date yet, so you can migrate on your own schedule.

Sources: Anthropic — Introducing Claude Haiku 5.5 · Claude release notes (Oct 7) · Migration guide · AWS What’s New

By the Numbers
$0.10 / $0.50
Haiku 5.5 input / output per 1M tokens · prompts up to 100K · Haiku 4.5 was $1 / $5
~30%
more tokens for the same text vs Haiku 4.5 · newer tokenizer
128GB
max unified memory on NVIDIA RTX Spark PCs · laptops ship Oct 16
8.1
CVSS · vLLM remote-code advisory we missed in Issues 32–33 · fixed in 0.31.0

Quiet lanes

llama.cpp GA still v0.6.0 (tips only) · MLX 0.32.3 and mlx-vlm 0.7.6 unchanged; Clef support and Metal fixes on main · Ollama 0.40.1 is a patch release · xAI quiet since Oct 2 notes · DeepSeek since Sep 10 · Tencent: no new OSS model · Mistral Large 4 weights not out yet · no new Gemini API changelog after Oct 6


Commentary

Tuesday through Thursday morning (Oct 6–8 ET). ASTGL / Fraser takes, sourced, not recap theater.

The small-model price war just hit a dime

Haiku 5.5’s list price for short prompts, $0.10 per million input tokens and $0.50 output, matches what OpenAI charges for GPT-6 Luna. Two labs now sell their cheap tier at the same headline price, and Anthropic is pitching Haiku as the subagent under a bigger model. That changes the local-versus-cloud math for the boring jobs: summarizing, routing, tagging, compacting. A local model no longer wins those on cost alone. It wins on privacy, offline use, and latency you control. Don’t compare price sheets, though. The two models use different tokenizers, and Anthropic’s own docs say Haiku 5.5 counts the same text as about 30% more tokens than Haiku 4.5. The “75% cheaper” figure is Anthropic-reported. Run a day of real traffic through each and compare the invoices.

Sources: Anthropic — Haiku 5.5 · What’s new in Haiku 5.5 · OpenAI API changelog (GPT-6 Luna pricing)

The cheap model is the one with the breaking changes

What I notice most in this launch is how much old client code breaks. No custom temperature, no prefill, no fixed thinking budget. Thinking is on by default and can be the first block in a response, and refusals come back with no fallback. Haiku is the model people wire into pipelines and then forget about, so it’s the one most likely to be running on years-old request code. If you have a classifier that reads content[0] and sets temperature: 0, it will fail on day one. The fix is small, but it has to be made everywhere. Search your repos for the Haiku model ID before somebody bumps it in a config file.

Sources: Haiku 5.5 migration guide · Claude release notes (Oct 7)

Windows wants to be your local AI box

Wednesday’s Microsoft and NVIDIA event was the clearest pitch yet for a Windows PC as a local-model workstation. RTX Spark laptops go on preorder with up to 128GB of unified memory and ship October 16. Microsoft is bringing a 3-bit build of its MAI Code 1.1 Flash coding model to run locally, and it says Copilot will route work between local and cloud models. A DGX Station for Windows was previewed with 748GB of memory. If you run models on a Mac, that is the comparison the hardware makers are now inviting. Unified memory is no longer something only Apple sells, and CUDA comes along with it. NVIDIA’s line that the local models match “many cloud models” is an NVIDIA claim. My take: memory size per dollar and the runtime you already use (MLX or CUDA) matter more than the petaflop number. Wait for independent tests on real 70B-class workloads before you switch platforms.

Sources: NVIDIA (Oct 7) · Windows Experience Blog (Oct 7)

Agents finally get walls they can’t argue with

Three platforms shipped the same idea in two days: the agent doesn’t decide what it can touch. Microsoft made Execution Containers generally available, with policy that sits outside the agent and a process sandbox that uses Seatbelt on macOS, so it isn’t only for Windows. Anthropic’s Managed Agents now only fetch URLs that already appeared in the session, which closes a quiet exfiltration path where a tool’s output contains a URL and the agent fetches it with your data in it. Google’s new Gemini agent sends all agent traffic through a gateway that enforces org policy. That’s the right direction. Prompts don’t enforce anything. If your local coding agent runs with your full user account today, this is the week to put it in a sandbox, even a plain OS one.

Sources: Windows Developer Blog — MXC · Claude release notes (Oct 7) · Google Cloud — Gemini at Work

We missed the worst vLLM advisory of the week

A correction first. Issues 32 and 33 covered four vLLM advisories published Oct 6. There was a fifth, and it was the most serious. On servers started with --trust-remote-code and serving a model whose processor ships its own code, a request could choose which revision of that code gets imported. That allowed remote code execution, and /tokenize sits outside --api-key. It is rated High (8.1) and fixed in 0.31.0, the same upgrade we led with on Monday. The default configuration isn’t affected. Remote-code models keep shipping, though: Liquid’s new d1 models need trust_remote_code too. If you serve anything with that flag on, check your vLLM version today and put /tokenize behind a proxy.

Sources: vLLM GHSA-h3rc-6mm3-gc2m · Liquid AI — open d1

Apple GPUs keep getting better kernels from other people

Google’s LiteRT 2.3 added FlashAttention-style prefill and decode kernels on Metal and uses Apple’s residency API to keep model weights and KV cache in RAM. The same evening Ollama dropped a Metal residency patch it had been carrying “now that it is upstream,” and earlier this week MLX main gained a setting for how often residency refreshes. Google reports about 38% faster decode on a small Qwen and nearly 3× faster 32K prefill on an M4 Pro (Google-reported). The pattern is the story: a lot of the Mac’s local-AI speed now comes from memory management and attention kernels written outside Apple. If you build on-device apps, LiteRT’s new Swift API is worth an afternoon. If you run Ollama, update to 0.40.1 and re-check memory pressure on long contexts.

Sources: LiteRT v2.3.0 · Ollama v0.40.1 · MLX main


Today’s Stories
Security

vLLM: a fifth Oct 6 advisory allowed remote code execution on remote-code servers

Oct 6 (correction): vLLM published a High-severity advisory, rated 8.1, that our last two issues missed. When a server runs with remote code trusted and serves a model whose processor ships its own code, an unauthenticated multimodal request could pick a different revision of that code. If an attacker could publish that revision, for example as a community pull request on the model repo, the server would import and run it. The tokenize endpoint isn’t covered by the API key. Versions from 0.7.3 up to 0.31.0 are affected, the fix is in 0.31.0, and the default configuration is safe.

Source: vLLM security advisory

Security

Claude Managed Agents stop fetching URLs that only a tool or the model produced

Oct 7: In Anthropic’s Managed Agents, web fetch now only opens URLs that already appeared in the session, in your message, a search result, or a page it fetched earlier. A URL that shows up only in the model’s own output, the system prompt, an attached file, or a shell or MCP tool result is refused. Anthropic says this reduces the risk of data exfiltration. In limited-network environments, the host allowlist now applies to web search and fetch too, and sessions whose web-tool domains fall outside it fail at creation. Agents that relied on fetching URLs from tool output need those URLs sent in a user message.

Source: Claude release notes

Local · Security

Windows ships agent containment and RTX Spark local-AI PCs

Oct 7: Microsoft made Execution Containers generally available. Developers declare which files, networks, and UI an agent may use, and the OS enforces that outside the agent’s control. Backends range from a process sandbox (including Seatbelt on macOS) to separate Windows sessions and experimental micro-VMs, and LM Studio, Codex, and GitHub Copilot already support it. NVIDIA opened preorders for RTX Spark laptops with up to 128GB of unified memory, shipping Oct 16, and Microsoft is bringing a 3-bit local build of its MAI Code 1.1 Flash coding model. Performance claims are vendor-reported.

Sources: Windows Developer Blog · NVIDIA

On-device · MLX

LiteRT 2.3 brings fused attention kernels and memory residency to Apple GPUs

Oct 7: Google’s LiteRT 2.3 adds single-kernel FlashAttention-style prefill and decode on Metal, plus fused normalization and activation kernels. It also uses Apple’s residency API on macOS and iOS so weights and KV cache stay in physical memory between sessions. Google reports about 38% faster decode on a small Qwen model, nearly 3× faster 32K-token prefill, and more than 4 GB of RAM saved at long context, measured on an M4 Pro MacBook (Google-reported). The release also adds a type-safe Swift API and broader Android NPU support.

Source: LiteRT v2.3.0

On-device · Local

Liquid AI opens small multimodal decision models that answer in one pass

Oct 7: Liquid AI released open weights for d1-3B (text and images) and an experimental d1-omni-600M (text with images or audio). Like other decision models, they return typed answers with probabilities instead of generating text. Liquid reports that d1-3B is the best decision model under 10B on the Decision Index and answers a question in about 30 ms on an Apple M5 Pro. They load in Transformers with remote code enabled. The license is Liquid’s own LFM 1.0, not Apache. Benchmarks and timings are Liquid-reported.

Sources: Liquid AI blog · d1-3B model card

Local · OSS models

JetBrains Mellum2.1: a 2.5B-active open coding model trained for agent work

Oct 8: JetBrains released Mellum2.1, an Apache 2.0 mixture-of-experts model with 12B total and 2.5B active parameters. The architecture is unchanged from Mellum2. Most of this version’s post-training was reinforcement learning across thousands of real sandboxed environments, so it can explore a codebase, edit files and check its work. JetBrains positions it as a fast local subagent. It says multi-token prediction makes single requests about 1.6× faster (JetBrains-reported). The blog says GGUF builds are “coming soon,” though a GGUF repo is already on Hugging Face.

Sources: JetBrains AI blog · Model card

Enterprise

Google Cloud announces one Gemini agent that routes across Gemini and Claude

Oct 8: At Gemini at Work, Google Cloud announced the Gemini agent, one agent and API for chat, autonomous tasks and code. It can spawn subagents with their own identities and run “coworker” agents that get their own Workspace accounts. It picks a model per job from the Gemini family and Anthropic’s Claude. Every agent runs in a sandbox, and its traffic passes through a policy gateway. Admins get smart routing and hard spend caps that pause an agent when hit. The keynote post doesn’t give general availability dates or pricing for the core agent.

Source: Google Cloud blog

ML practice

NVIDIA publishes the recipes behind Nemotron’s olympiad results

Oct 7: NVIDIA described how it turned Nemotron 3 into specialists that reached gold-medal level at IMO 2026 (graded by official IMO graders) and IOI 2026 (an unofficial run under contest rules). The recipe is ordinary: curated problems, supervised fine-tuning, reinforcement learning where it helped, and a generate-evaluate-refine loop at inference time. NVIDIA found that one fine-tuning epoch on the big model beat the fully post-trained small one. The checkpoints, both training datasets, a 200-problem proof benchmark and the inference pipelines are open. Results are NVIDIA-reported.

Source: NVIDIA on Hugging Face


Other news in AI
Other

ChatGPT gets a GPT-6 model for everyone, with interactive answers

Oct 7: OpenAI is bringing a new GPT-6 model to the broad ChatGPT user base, not just paid customers. With “Intelligent UI,” it can answer with charts, buttons, forms, maps and small interactive tools built from a component library as it writes. It is a consumer launch. On the API side, OpenAI updated the chat-latest snapshot the same day and still recommends the GPT-6 family for production.

Sources: OpenAI · API changelog

Other

Google opens its SynthID detector to everyone

Oct 7: Google made SynthID Detector available globally in English. Anyone can check whether an image, video or audio file was made with AI from Google or its partners, which include OpenAI, NVIDIA and Kakao, with Apple “soon.” Google says it has watermarked more than 180 billion images and videos. This is a consumer tool with no new developer API.

Source: Google


Signal Tables
Model / packageOrgNotes
Claude Haiku 5.5
Oct 7 · GA
Anthropic Cloud 1M context · effort · $0.10 / $0.50 per 1M (≤100K)
Mellum2.1
Oct 8
JetBrains Open 12B MoE / 2.5B active · Apache 2.0 · agentic coding
d1-3B / d1-omni-600M
Oct 7
Liquid AI On-device decision models · LFM 1.0 license · omni experimental
LiteRT 2.3.0
Oct 7
Google AI Edge On-device Metal fused attention · residency · Swift API
Ollama 0.40.1
Oct 7 · patch
Ollama GA Windows fixes · MLX residency patch now upstream
Nemotron IMO / IOI specialists
Oct 7
NVIDIA Open SFT + RL checkpoints · datasets · proof benchmark
MAI Code 1.1 Flash (local)
Oct 7 · announced
Microsoft Watch 3-bit local build · 256K context · Windows
mlx-vlm / MLX main
Oct 6–8 · unreleased
Blaizzy / ml-explore Watch Clef decision support · Metal residency + quant matmul fixes
llama.cpp tips
Oct 8 · not GA
ggml Watch reranker classifier activations · GA still v0.6.0
ItemBeatStatus
vLLM GHSA-h3rc
High 8.1 · Oct 6 · correction
Request-chosen processor code revision → RCE with remote code on · fixed in 0.31.0 Active
Managed Agents web_fetch
Oct 7
Only URLs already in the session · host allowlist applies to web tools Active
Microsoft Execution Containers
Oct 7 · GA
OS-enforced agent policy · Windows, macOS, Linux backends Active
Haiku 5.5 safeguards
Oct 7
Cyber stricter than Haiku 4.5 · blocks pentesting · CVP for more Active
Gemini Agent Gateway
Oct 8 · announced
Org-wide policy on all agent traffic · per-agent identity Watch
Claude Compliance API
Oct 8 · beta
Chat endpoints now cover the unified Claude experience Active
Claude Models API server tools
Oct 6 · correction
Reports web search / code execution support per model Active
Sonnet 4.5 retirement
Claude API · Nov 30
Migrate to Sonnet 5.5 · no Haiku 4.5 date yet Watch

Industry Shorts

Critical · vLLM remote code · Haiku client breakage

If any vLLM server runs with --trust-remote-code, confirm it is on 0.31.0 or later and keep /tokenize off the public internet. Before anyone switches a config to Haiku 5.5, remove temperature and prefill from those calls, select response blocks by type, and handle refusals.

Watch · RTX Spark ship date · Gemini agent details · Mistral weights

RTX Spark laptops ship Oct 16, and compact desktops follow in November. Google hasn’t given the Gemini agent’s availability or price. Mellum2.1’s GGUF and vLLM speculative-decoding head are “coming soon.” Mistral Large 4 weights are still due by the end of October. NVIDIA’s GTC Berlin keynote is Oct 21. Copilot’s local-model features reach Copilot+ PCs “in the coming months.”

Opportunity · cheaper caching · API credits · permission-aware apps

Sonnet 5.5 cache reads are half price. Max plans get $100 or $200 a month in API credits and Team plans up to $500. Databricks Apps can now act as the signed-in user so Unity Catalog permissions apply (GA). Google’s Developer Knowledge API gives agents current Google docs. Cloudflare wrote up a SOC harness that triages alerts with the open Clef decision model.


Try This

Dry-run your Haiku 5.5 migration on 50 real prompts

Take 50 prompts from your logs and count tokens with the model set to Haiku 4.5 and then to Haiku 5.5. Multiply by each model’s prices to get your actual saving. Then send them to Haiku 5.5 with sampling parameters and prefills removed, and check what share come back as refusals or start with a thinking block.

Claude Migration Cost

Race Liquid’s d1-3B against Clef on your Mac

Load d1-3B in Transformers on the MPS device (Liquid’s post has sample code) and ask the same three yes/no questions about 50 support tickets that you put to Clef on Ollama’s MLX engine. Compare accuracy and per-question latency. Because d1 runs remote code, run it in a throwaway virtual environment or a sandbox.

Decisions Apple Silicon Eval

Audit your inference servers for remote-code flags

List every vLLM, SGLang or Transformers server you run and note which start with remote code trusted. For each one, record the version and check whether /tokenize is reachable without a key. Upgrade vLLM to 0.31.0 or later, pin model revisions, and turn the flag off wherever the model doesn’t need it.

Security vLLM Checklist

Issue 34 · Thursday, October 8, 2026 · Not investment advice · Sources cited inline · Window: after Issue 33 (Wed Oct 7 morning ET) through Thu Oct 8 morning ET; Commentary Oct 6–8 · Haiku 5.5 was a watch item in earlier issues; launch is the new delta · Correction: vLLM GHSA-h3rc (Oct 6, High) was missed in Issues 32–33 · Correction: Claude release notes have an Oct 6 entry (Models API server tools) that Issue 33 didn’t list · llama.cpp tips after v0.6.0 are not GA · mlx-vlm and MLX main are unreleased · Mistral Large 4 weights not yet released · Listen omitted (episode not published)