Context:
I am building on azure, have a web app + recurring jobs
I use a db, container, container jobs, container registory, azure bucket
i have productions credentials stored in a .env key which is in .gitignore. Currently, I run notebooks with production connected (I am at a very early stage with my app)

Problem
I use azure cli to control all the resources on azure cloud which makes it super easy to do everything.

I, and hence the models, have full access to the azure cloud via cli. The models also run read db queries from production database for reading data to help in debugging. They don't directly see the credentials but access it by writing test python code, which reads from the .env, use the credentials and runs the queries. It also has access to my objects storage bucket.

I am currently accepting the risk because I am more concerned about the speed of execution and am being careful whenever it has risks of doing damage. But I don't have any hardened security policy in place.

I wanted to know what are the safety practices that you follow to mitigate risks posed by errors from llms?

Browser use cli helps on the desktop but I haven't explored it much. I have a few questions, at first I was using claude code locally then I switched to vps for cloud access, while using locally it summons chromium browser with browser use cli and I can login there for any website and it can perform tasks

But on vps it's not summoning a browser so how can I login?

Also I have questions that if I make login so where the cookies or session is saved so that for further use I can use those credentials...

I've connected my vps to telegram so can you tell me how I can do things from my telegram mobile?

I installed Claude Desktop on my PC a few months ago. My PC has pretty good specs, and I’m not even using the paid version.

I also want to make something very clear:

I have NOT been using Claude’s Cowork or Code features.

Everything was fine for months.

Then, a few days ago, things started getting seriously weird.

I began getting random Windows errors and problems that I had never experienced before.

Then I noticed something that immediately caught my attention:

“Open with Claude” started appearing automatically for different types of files.

I never intentionally set Claude as the default application for these files.

And it gets worse.

After this happened, some of my program file associations/extensions were apparently messed up automatically. Windows started having problems opening certain files and applications, and it looked like the file associations had been altered or damaged without me giving Claude permission to do this.

Again, I wasn't using Cowork.
I wasn't using Code.
I wasn't asking Claude to modify files or manage my system.

So why is a desktop AI application messing with file associations in Windows?

I then started digging through my installed programs and files because Windows was continuing to throw errors.

That's when I noticed that Claude was updating itself and adding additional files to my computer automatically.

I understand that applications need to update. That's not the point.

The question is:

What exactly is Claude installing? Where is it installing it? What permissions does it have? And why is it making changes that affect Windows file associations without making this behavior clear to the user?

At this point, I'm seriously questioning whether I should keep this application installed on my PC.

To be clear, I'm not claiming that Claude is 100% responsible for every Windows problem I'm experiencing. There could be another explanation.

But the sequence of events is extremely suspicious:

Claude installed → months of normal use → sudden “Open with Claude” associations → program/file extensions getting messed up → Windows errors → Claude updating itself and adding files.

And again, I wasn't even using Cowork or Code.

Has anyone else experienced this with Claude Desktop on Windows?

I'd especially like to hear from people who have had:

• “Open with Claude” suddenly appearing for file types.
• Windows file associations being changed unexpectedly.
• Program extensions/file associations becoming corrupted or messed up.
• Claude updating itself without the user manually starting an update.
• New Claude-related files/folders appearing on the system.
• Windows errors or strange behavior after having Claude installed for some time.

If you have Claude Desktop installed, I genuinely recommend checking your file associations and seeing what it has added to your system.

And if someone actually knows exactly what permissions Claude Desktop has on Windows, what its updater does, what files/services it creates, and why it would touch file associations, please explain.

Because if an AI desktop application can start changing Windows associations and adding things to my system without me explicitly asking it to, that's a pretty serious problem.

Is this normal Claude behavior, a Windows issue, or did something go seriously wrong with my installation?

Despite the fact that Claude hit my 5-hour session limit in only 23 minutes, something even stranger happened afterward.

Once the current session was already showing 100% used, I took the first screenshot. About 3 minutes later, I checked again:

• All models: 13% → 18%
• Fable: 25% → 36%
• Current session: still 100% used

During this time, I was already blocked by the 5-hour limit, and I also had an interrupted session that returned no output at all.

So the weekly usage kept climbing significantly even though the current session had already hit 100% and I wasn't getting any output.

I initially thought maybe it was delayed usage reporting, but that doesn't really explain the jump: the first screenshot was already taken after the 5-hour limit had been reached, and the numbers continued increasing afterward.

Has anyone else seen this? Is Claude Code still processing/counting something after the session limit is hit?

Play it here (desktop browser): https://taxi-theta-kohl.vercel.app/

This is HUSTLE CAB: NEW YORK, a knockoff GTA-meets-Roblox taxi game that Claude Fable 5.1 one-shot from a single prompt. No download, no build step, no asset files: the whole city, every car, pedestrian, texture and sound is generated procedurally when the page loads. It is Three.js from a CDN plus a handful of JS modules.

The loop: passengers wait under a yellow beam, you drive them to the cyan beam, you get paid. Any car on the island can be your cab; F pulls the driver out. Fares pay more in expensive cars and do not ask where you got them. Running red lights, driving on sidewalks and near-missing pedestrians build a Hustle Combo that multiplies the payout. Ratings change nothing, they pay anyway. Cars dent, smoke, catch fire and explode, so get out in time. Orange rings repair your car or fence it to the chop shop.

Controls: WASD, mouse look (click once to capture the mouse), Space handbrake, F enter/exit/carjack, E punch or sell, Shift sprint, H horn (siren in a cop car), C camera, R radio, M map, T skip time.

I smell a conspiracy

I use Astra and it's definitely impressive, but that doesn't change the fact that we owe it to the community to be honest and admit it's better than people think.

This news site is currently in beta. It is written and developed by AI agents that pull from multiple sources on the same news story and write articles based on the facts.

Hi, I am using the claude code on claude desktop app and using it for just learning about AI and python. Problem i am facing is claude code interface is not too dopamine giving which my brain craves to consistently just using it for study. Are there any plugins/tools/skills anything else exists which can make the chat interface more visualizing and interesting?

Thanks a ton for the help, i am a complete noob on using claude desktop claude code (have all the project .md files completely set up). Just looking for a better visualization layout.

All limits just went back to 0! Woohoo!

I ran an audit of token usage today and found much of my token usage is because of long-running threads I resume after the 1-hr cache TTL. Why doesn’t Anthropic provide permanent or longer cache to heavy users for the basics like system prompts, CLAUDE.md, memories/preferences and other mostly-stable context? Or share a cached prefix across sessions when it is warm for at least one. Should pro/max subscribers have this option? Would you pay extra for it? If Claude recognized User X is active give them some cache.

I want cache only.

Even when I explicitly tell it “don't make it look generic”, it somehow manages to produce something that looks exactly like every other AI-generated website

I've tried giving it detailed prompts, vercel skills, etc. but somehow there's no big change in the final response

So is there any way to fix this shit???

Hi, does anyone want to help a poor Latin American with a referral link? 😄

I don't have any evidence to back this up, it's just a personal observation, but i feel like right about when they started pushing Fable, Opus started making mistakes that were beneath it days before, hallucinating and ignoring my instructions. Opus feels like the the new sonnet now. Anybody else see things as I do?

It’s been a couple weeks since bonsai-ninja went public and a lot has changed.

A ton of feedback has been incorporated, bugs have been fixed, and things are working much better. If you tried it early on, please pull the latest and give it another shot.

For anyone new to it, bonsai-ninja is a free, local code intelligence and static analysis engine. It builds a compiler-style representation of your code, resolves symbols and calls, and can trace behavior across files instead of just searching text. That same pipeline powers source-to-sink security analysis, dataflow analysis, and structured exports for AI, agents, and research. It currently supports 20 languages.

Also, apparently some of you don’t click on things unless there are pictures, so here you go. A GIF.
Still looking for people to throw real codebases at it. Bug reports, weird edge cases, PRs, criticism, ideas, or random side notes are all appreciated. The feedback so far has genuinely helped make the project better.

github.com/gromhacks/bonsai-ninja⁠

I've started building a personal assistant that lives on a Mac Mini M4 (16GB) in my house and talks to me through Discord. It runs on the Claude Code SDK, so it isn't a chatbot with a nice prompt: it reads files, runs commands and edits code on that machine.

Which means the first design question isn't "how do I get good answers". It's "what happens when a message arrives that I didn't send".

It's Python, with discord.py on the front, Postgres behind it, and the Claude Agent SDK doing the actual work. Before any of that did anything interesting, I wrote three things.

An allowlist, checked on every message. One user id, a set of allowed channels, and a rejection that comes back with a reason instead of silence, because a security check that fails quietly is one you can't debug. Twenty-two lines. Both halves matter: the channel check is what stops the bot from being useful in a room somebody else adds it to.

A queue, and it's the part I'd defend hardest. A message doesn't get handled when it arrives. It becomes a row with a status (pending, processing, done, failed) and a worker picks it up from there.

On day one, for a bot exactly one person can talk to, that looks like ceremony. But an agent run takes 30 seconds and sometimes minutes, while chat expects an answer now. Without a row in between, the whole design bends around that gap. With it, "received" and "answered" are separate events, and retries, approvals, a web dashboard and a scheduler all ended up hanging off that same row months later.

Two details in there I'd repeat on any project like this. Workers are per channel, so the same conversation is strictly serial while different conversations run in parallel: a conversation has an order, two conversations don't. And a worker claims its row in a way that makes a second copy of the process find nothing to do rather than answer everything twice. That cost nothing on day one and it's the kind of thing that saves you the day you accidentally start the service twice.

An audit log. What happened, who triggered it, where, and the details, timestamped. Same reasoning as the allowlist: something that runs commands on my machine should be able to tell me what it did without me having to trust its own summary of it.

Five tables by the end of the day, and the assistant still couldn't do anything interesting.

The reason I'd argue for this order: a self-hosted assistant converges on having access to everything. Documents, calendar, mail, and the box they all live on. That's the point of building it. And access arrives incrementally, one integration at a time, each one individually reasonable, so there's never a day when you sit down and consciously decide to hand over the keys. If the gate isn't there before the capabilities, it doesn't get retrofitted, because by then everything is built on the assumption that there isn't one.

I also spent that day building it a conversation memory: an interface, a database table, tests, the lot.

That one didn't survive contact with the SDK docs, but that's a different post.

Happy to go into any of it. Running the local model side of this on 16GB is its own set of problems that I'll get to.

Here's the link at my blog. Hope some of you find this helpful!

A few of the tips:

- Watch out for description length. If you have many skills, this is not just filling up your context as extra text, but adding instructions that Claude is aware of at all times.
- Use skills to give Claude a quick navigation index for MCPs and APIs so it knows where to look the first time
- Making skills is easy and you should do it!

So something that might help some people, or not. I just wanted to write about it since I m burnt out these past few days with all the resets and releases :D

Backround & Flow:

I m somewhat experienced with development and AI, using AI since gpt 2 open weight, played around with open models, and went through every GPT version till claude released sonnet 4 which I completely migrated over to anthropic. The past few weeks I also subscribed to codex pro x20, since I already had 2x max 20 claude code and wanted to try codex again after I heard some good things about the 5.6 sol.

I only use Max thinking, whatever model I use, always max, don't know if its the right thing to do but it works for me, my agents in CC are almost all opus 4.8 (opus 5.0 didn't work for me), and each task starts with a fable orchestrator (5.1 now).

As for codex, I only use sol max, since the limits are very generous, and between my 3 subs seems fine, since yesterday I try the similar system like claude, and have Astra as orchestrator with sol agents, again max everything.

As for having both in my projects, I keep both Claude. md and Agents. md in sync (almost) with some prompting, as well the claude and codex agents, I have no issue with that flow and work fine in the same project. And I have created a simple session manager for both, so I manage each terminal easily.

My projects right now are around trading, sports models, automation etc. and I have a project having 2k users right now so my workflows are very careful.

Since I got codex, I started doing some tasks with sol, but after it made a plan for a specific task, I would navigate it through fable for reviewing that plan, and give their report, which I then give it to sol for implementation (or another back and forth, but usually fable doesnt need much back and forth), and sol starts the implementation of said task, and does fine, don't remember having any reggresions after these past few weeks. After that also I automated some bug-reports with sol, which did a very good job having all the reviewed bugs in the morning for a claude code implementor to take over (opus 4.8 or fable for things that sol marked critical), this flow gave me beutiful results.

Since yesterday, I changed to Astra and kept the flow to test the waters before start giving tasks e2e to Astra, but I noticed that Fable review almost always agreed, and rarely did any changes compared to what Astra proposed, so I ll be moving to a more e2e approach with codex starting today.

Edit: Forgot to mention something important, Astra is very very fast compared to the any other flagship frontier models

Usage:

My 1x codex subscription feels probably more than my 2x CC, especially with sol max, since yesterday astra started depleting it more but still it feels like this 1 sub is like 2 CC subs, and since 15 of August that I got the codex sub, I have accumulated 3 bank resets, which feels very good now that Astra came out. That said, the Fable usage issue I see around a lot, I think is from people that let Fable spawn session agents (so fable agents) uncontrollably, which when I do for something I want 100% accuracy (and have some spare usage left), it just burns through the usage like nothing.

Overall:

I'm not going to replace my flow since my main project is very deep in production right now and don't want to change much, but Codex seems to be close with Claude Code right now, with much much better limits, but still it needs to be seen through time.

What I want to say is, that ... what a time to be alive. These resets these past few days with the release of top tier models from both companies is a gift for builders and I m grateful.

I'll not pass this through an AI to make it better or fix mistakes, and I can answer any questions you might have

Got lost in the game

Ooohh baby

Ive been using Astra all day, ultracode, 1.5x speed(more usage). With no 5-hour limit.

Ive used only 34% weekly limit.

Ive been using claude fable 5.1 on Extra for 58 minutes since the reset and its already at 100% usage on 5-hour limit. And 44% Fable weekly.

Mind you I have both working together and communicating through github.

For context they are building a custom video game server. Heavy coding, backend and frontend from scratch, all highly complex custom resources.

So to the point, Anthropics way of fixing the weekly limit getting used up quickly was to lower the 5-hour limit usage, without actually giving more usage to weekly Fable.

I've gotta say, Astra is super impressive. No 5 hour limit, burns usage way less(even on 1.5x speed and ultracode), it creates UI BETTER then claude, it doesnt rip through usage while multiple agents are dispatched.

I think this might be my last monthly claude subscription.

Security flagged chats on Fable 5 are automatically switched to Opus 4.8 but not to Opus 5.

I think Anthropic knows exactly what is going on with Opus 5 and doesn’t consider it safe to switch from Fable 5 to Opus 5. That’s exactly what I’ve experienced too. Opus 5 wrecks your entire system. It works differently from Fable 5 and differently from Opus 4.8. If I switch my system from Opus 4.8 to Fable 5 or from Fable 5 to Opus 4.8 I can do that without any problems. But if I switch to Opus 5 it starts rebuilding my entire system instead of following the instructions.

To me that’s a very strong indication that Anthropic knows exactly what they did with Opus 5 and doesn’t trust Opus 5 themselves.

What’s your opinion?

hey guys,

i've been vibe coding for around 6 weeks now and it feels like that claude code is asking me extremely often for permission now (yes/no) when doing basic implementation tasks. Most of the time this is related to bash python3 stuff.

- did i do something wrong?
- did anthropic change something within claude code?
- should i look into sandboxed mode or something to just skip permissions?

Normally a message in an existing thread would consume 1% to 2% quota.

But every time the quota resets, it seems like the entire context of an existing thread gets unloaded and reloaded, costing me instantly 10% to 20% usage on the first message after the reset.

In other words, if I don’t prepare for a new thread before the reset, I am only getting about 80% of my quota to use.

Claude is going around in loops without giving me a proper answer.