Entire ships a GitHub rival that scores every push with agents, with or without a pull request

Today's lead is Entire's Git forge. It leads because review is the half of the agent workflow nobody had rebuilt, and this is the first host to try. Also today: Cloudflare says 155 replies from a hosted coding model carried other users' prompts, over 13 days. GitHub Copilot's Assisted tier is generally available, auto-approving the commands a model calls safe. And Cursor's pricing table now carries DeepSeek V4.1 Flash, hidden by default. The Copilot change is the one to check in your own settings today.

What changed this week

Entire ships a GitHub rival that scores every push with agents, with or without a pull request

Entire, whose command-line tool already checkpoints coding-agent sessions into a git repository, now hosts the repository too. Thomas Dohmke, GitHub's CEO from 2021 to 2025 and now Entire's, calls it "the first Git forge," a GitHub-style code host, "built specifically for agent-human collaboration." What GitHub doesn't do: on every push, review agents each submit "a score and a rationale" through a review view it calls Trails, and a repo can hold the merge until a human approves and CI passes. Its review agents run on Claude Code and Codex; it works "on top of pull requests" or in place of them, and hosts a repo natively or mirrors one from GitHub. The launch post names no price, and nobody outside the company has reported running the hosting yet. We run its CLI here; we haven't tried the hosting. If your review queue is already agents answering agents, this is the host to test first.

The Git Forge for Agent-Human Collaboration

Source control is at a breaking point. Today, we open the portal to a new kind of Git forge: reimagined review, CI integrations, code hosting, and continuous memory for every agent. Welcome to the rebellion.

EntireThomas Dohmke

Cloudflare says 155 replies from its hosted coding model leaked other users' prompts

Cloudflare disclosed Monday that GLM-5.3, Z.ai's model on its Workers AI service "built for agentic coding workflows," leaked other customers' data for 13 days from its August 27 launch. A tenant-isolation misconfiguration and an SGLang inference-engine bug let cache pages carry other users' prompts. 155 responses were affected, all on prompts over 681,280 tokens, and Cloudflare says it found no evidence of deliberate exploitation. Knostic's Gadi Evron reported it via HackerOne on September 8; Cloudflare restored it a day later.

Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang

A configuration mismatch in GLM 5.3 on Workers AI triggered an SGLang bug that exposed KV cache pages across requests. Here is how we addressed the issue.

Cloudflare BlogKevin Flansburg

GitHub Copilot now auto-approves commands a model calls safe

When Copilot asks to run a command, touch a file path, or open a URL, a new tier called Assisted now auto-approves anything it calls "clearly safe," surfacing only the rest for you to confirm. It's generally available today in the Copilot CLI, the Copilot app, and VS Code. Admins can disable Assisted entirely, or allow it while still blocking the broader "Allow All" setting. The default doesn't change. Only how often you're asked does.

GitHub Copilot assisted permissions generally available - GitHub Changelog

Assisted permissions are now generally available in GitHub Copilot CLI, GitHub Copilot app, and Visual Studio Code. When Copilot requests permission to run a command, access a file system path,…

The GitHub BlogAllison

Cursor lists DeepSeek V4.1 Flash, hidden by default

Cursor's pricing table now lists DeepSeek V4.1 Flash 1017, the 1017 build of DeepSeek's Flash model, at $0.3 per million input tokens and $1.2 for output, hidden by default in the model list. On Cursor's own CursorBench leaderboard the same model, run at four effort settings, scores 47.7% at Max for $0.98 a task and 44.9% at Low for $0.60. Cursor's changelog has no entry for it. Two r/cursor threads spotted the row first.

Models & Pricing | Cursor Docs

Compare plans on The X Subscription, see what the weekly usage pool covers, and check per-model rates for third-party models.

Cursor Documentation

Also worth your time

• The Mythical Man-Month in the Age of AI
• AI Promised Less Work. I Have Never Worked More.

Know someone who'd want this in their inbox? Forward it — that's how this grows. And if we got something wrong, or you think we buried the real story today, hit reply. A person reads every one.

The New Way is written with AI. It gathers the day's stories, checks them against their sources and drafts every summary. A person decides what runs and reviews every issue before we hit send.