4. Developer Tooling and Programming
Android Bench 2.0: short coding benchmarks saturate, while long-horizon engineering remains unsolved
What happened. Google released Android Bench 2.0 with 30 long-horizon tasks: app creation, migrations, new platform features, and cross-platform app conversions. Tasks change from hundreds to thousands of lines and tens/hundreds of files; each task is run five times in a clean containerized environment. Validation combines deterministic tests, database/system checks, and a multimodal UI judge.
Why it matters. Android Bench 1.0 already reached about 90% pass rate for frontier models, but a typical task changed a median of only 32 lines in 1–2 files. Version 2.0 is closer to real engineering: you need to hold intent for hours, go through API migrations, integration details, UI, and regression constraints.
What the data showed. GPT-6 Astra + Codex: 28.0% perfect pass rate, 82.2% average completion, 7.9 hours aggregate latency, and $375.7 for a full benchmark run. Claude Fable 5.1 + Claude Code: 22.7%, 82.4%, 22.2 hours, and $492.6. GPT-5.6 Sol + Codex: 19.3%, 74.3%, 8.6 hours, and $235.8. No configuration passed any full app conversion entirely, though individual runs reached about 0.90–0.99 completion. Google separately warns that cost/latency cannot be directly interpreted as efficiency: failing runs often end earlier.
What you need to understand already: long-horizon coding; pass rate vs completion rate; regression oracle; agent harness; contamination resistance.
What this could change for a product or engineering team. For choosing a coding agent, you need your own benchmark on multi-hour tasks. Compare perfect completion, human interventions, regressions, latency, and cost, not just SWE-bench.
Date: September 17, 2026.
Primary source: https://developer.android.google.cn/bench
Methodology: https://developer.android.google.cn/bench/methodology/2
Claude Projects turns a single coding session into coordinator + parallel workers
What happened. Anthropic redesigned Projects and opened a beta in Claude Code. The user sets a goal, the coordinator scopes the work, creates parallel threads, delegates tasks, monitors progress, reviews outputs, and assembles the result. Each thread is a separate cloud Claude Code session with its own copy/branch of the repository; threads use shared project memory and can launch subagents.
Why it matters. Multi-agent orchestration is becoming a product primitive, not a custom-built research framework. This makes parallel development more accessible, but creates new failure modes: duplicate work, shared-state errors, merge conflicts, and opaque token spend growth.
What the data showed. Anthropic has not yet published a controlled productivity benchmark for the new architecture. The company explicitly states that usage can grow quickly and allows separately setting model/effort for coordinator and workers. Therefore, this is a capability release, not a proven productivity gain.
What you need to understand already: coordinator/worker; parallel branches; shared memory; subagent; merge conflict.
What this could change for a product or engineering team. It's worth conducting an internal experiment on truly parallelizable tasks. The unit of comparison is completed accepted work per dollar/hour including review and merge overhead.
Date: September 17, 2026.
Primary source: https://claude.com/blog/projects-redesigned
Google updated Antigravity Agent: managed harness becomes more stable as an API primitive
What happened. Google released antigravity-preview-09-2026, replacing the May version of the managed agent. One API call spins up a Linux sandbox, the agent loop can execute Bash/Python/Node, edit and search files, use web search, and save state between interactions. In the new version, file editing moved from full rewrites to line-range replacements, and separate file/code search tools were added.
Why it matters. The agent harness is increasingly supplied by the model/cloud provider itself as a managed runtime. This reduces the cost of building your own sandbox/orchestrator, but increases vendor lock-in at the level of tool schema, state, and execution environment.
What the data showed. Google indicates typical consumption of 100K–3M tokens per interaction; complex workflows can reach 3–5M. Estimated costs for typical tasks are approximately $0.25–$3.25, up to about $5 for complex workflows; 50–70% of input tokens are typically cached. Environment compute in preview is not billed. These are vendor estimates, not an independent benchmark.
What you need to understand already: managed agent; sandbox; tool schema; token budget; stateful interaction.
What this could change for a product or engineering team. For a new agent product, it makes sense to compare a managed runtime with your own harness on TCO, observability, portability, security controls, and customization limits. Especially important is considering migration cost when built-in tool schema changes.
Date: September 17, 2026.
Primary sources: https://ai.google.dev/gemini-api/docs/changelog ; https://ai.google.dev/gemini-api/docs/antigravity-agent
Plugin4Shell shows that agent plugins/skills are a full-fledged software supply chain
What happened. Air Security disclosed Plugin4Shell — a class of bypass for SHA-pinning when installing/auto-updating plugins in coding agents. According to the researchers' description, the client could checkout a specified commit but not verify that the resulting working tree actually matched the expected object; with control of the upstream repository, this allowed code substitution during auto-update.
Why it matters. A skill/plugin is often perceived as "instructions for the model," but in practice can include scripts, hooks, and tools with filesystem/network/credential authority of the coding agent. Therefore, a plugin marketplace needs to be protected like a package manager/CI supply chain.
What the data showed. Air Security reports PoC for Claude Code, Codex, Copilot, and Gemini CLI. Claude Code fixed the class of issue in 2.1.179, Codex in 0.146.0. For Copilot, there is a significant clarification: GitHub told The Register that hosted GitHub marketplaces are not susceptible to the specific scenario because GitHub does not allow creating a branch/tag that looks like a SHA; therefore, it's correct to speak of a class of supply-chain risk, not universal exploitation of all installations.
What you need to understand already: software supply chain; commit pinning; auto-update; plugin marketplace; least privilege.
What this could change for a product or engineering team. Allowlist sources, verify resolved object/commit, controlled updates, and sandbox should be applied to agent plugins similarly to CI Actions and package dependencies.
Public disclosure date: September 17, 2026.
Primary source: https://www.air.security/blog-posts/plugin4shell
Additional source: https://www.theregister.com/security/2026/09/17/ai-coding-agents-0-click-rce-flaw-could-hand-attackers-keys-to-the-kingdom/5297335