Claude Code Usage Limits in 2026: 5-Hour Windows, Weekly Caps, and Cost
How Claude Code usage is metered in 2026: 5-hour and weekly windows, wind-down, plan vs API credits, Haiku 5.5 subagents, Codex tiers, and a quota checklist.
Remy (Redreamality)
AI Engineer · Independent Thinker
Building with AI agents, and thinking out loud — projects, writing, talks, and reflections in one place.
Visuals
View all visuals Interactive explainer
Even a Fierce Virus: Why Does Spread Self-Extinguish Past a Coverage Threshold?
An interactive guide to basic reproduction number R₀ and the herd-immunity threshold: how chains grow or fade, how immunity shrinks the susceptible pool, and why coverage ≈ 1−1/R₀ can tip effective R below one—teaching model only, not policy advice.
Explore the visual Interactive explainer
In a World of "About Average," Why Do Extremes Keep Showing Up?
An interactive guide to the normal (bell) curve: why most outcomes pile near the mean, how independent small shocks stack into that shape, what 1/2/3σ bands mean, and why rare tails still appear in large samples—mechanism only, not a formula drill.
Explore the visual Interactive explainer
Same Lab Result—Why Do Two People Reach Opposite Conclusions?
An interactive guide to Bayesian updating: how different priors plus the same positive test can yield opposite posteriors—base rates, likelihood ratios, and tree/area intuition. Teaching numbers only; not a medical diagnosis.
Explore the visual Interactive explainer
0.1% Extra a Day—How Far Ahead Are You in a Year?
An interactive guide to compound growth: why discrete compounding pulls away from linear add-ups, how a tiny daily rate becomes a large gap over 365 steps, and why time horizon matters as much as the rate—mechanism only, no investment advice.
Explore the visual Interactive explainer
When More Money Is Printed, Why Does Your Pocket Feel Thinner?
An interactive guide to inflation as purchasing-power dilution: how money or demand shocks lift the price level, why nominal cash is not the same as real buying power, and how a single rising price differs from a general rise.
Explore the visual Interactive explainer
Can a Butterfly's Flap Really Start a Tornado?
An interactive guide to sensitive dependence in chaos: tiny initial differences, exponentially diverging trajectories, predictability horizons, and why the butterfly is a metaphor—not a literal cause.
Explore the visual Interactive explainer
Why Two People Who Want Less Jail Time Both Get More
An interactive guide to the prisoner's dilemma: payoff matrices, dominant strategies, Nash mutual defection, the welfare gap, and how repeated games with punishment can protect cooperation.
Explore the visual Interactive explainer
Why Pacific Warming Shows Up in Grocery Prices
Follow ENSO from equatorial Pacific heat anomalies through rainfall teleconnections and crop stress to grocery price pass-through—kept distinct from the typhoon Visual.
Explore the visual Interactive explainer
How Price and Volume Work Together
Read price and volume as contextual evidence about participation, liquidity, and market response—not as a certain trading signal.
Explore the visual Interactive explainer
How Air Conditioners Work
Follow the refrigerant through evaporation, compression, condensation, and expansion to see how an air conditioner moves heat outdoors.
Explore the visual Interactive explainer
What Is Loop Engineering?
Learn Loop Engineering in plain language: contracts, bounded attempts, evidence, durable state, budgets, stop routes, human review, and system improvement.
Explore the visual Interactive explainer
How Typhoons Form
Thirteen interactive steps explain how a warm ocean disturbance becomes an organized tropical cyclone.
Explore the visualRecent Blog Posts
View allMistral Large 4 vs. 2026 Open-Weight Flagships: Params, Licenses, Hardware
Mistral Large 4 is in preview, weights due at month-end. We compare it with Beam, Kolibri, GLM-5.3, DeepSeek, Kimi and Qwen on params, licenses and hardware.
GPT-6 Intelligent UI: Four Generative UI Routes and Their Risks
GPT-6 in ChatGPT turns default answers from plain text into clickable, editable interfaces. Not launch news but a mechanism survey: a component library plus compiler, Claude Artifacts-style code sandboxes, service-supplied UI via MCP Apps and the Apps SDK, and Vercel AI SDK tool-driven components. Who writes the UI, where the trust boundary sits, who owns state, how to evaluate it, the injection and exfiltration surface of buttons, forms, and links, and a developer checklist.
Prompt Injection in 2026: Self-Replicating Attacks and Agent Defenses
Prompt injection now copies itself through email, files, memory, and code comments. Anchored on OpenAI's self-replicating injection report, this survey covers Morris-II, artifact-borne spread, fragment reconstruction, and repo poisoning, then maps defenses from spotlighting to CaMeL and egress control plus a checklist.
What Claude Code Sends Off Your Machine: Four Outbound Channels and a Secrets Checklist
Claude Code runs locally, but every turn ships context to the model, alongside telemetry, error reports, WebFetch, MCP, and whatever Bash reaches. Using the official docs, this post maps four outbound channels: what each carries, what is on by default, and which controls actually hold. It also verifies the 'AGENTS.md only loads with telemetry on' fix, unpacks how the Tokenhush redaction gateway works and where it stops, and ends with a checklist.
More MCP Servers, Worse Tool Picks: Tool Search, Code Mode, and ToolSearcher
Connect enough MCP servers and tool schemas eat tens of thousands of tokens before work starts, while wrong picks, name collisions, and tool poisoning pile up. Anchored on the arXiv paper ToolSearcher (category-constrained discrimination, event-level search rewards, trajectory-aligned credit), this survey compares Anthropic and OpenAI tool search / defer_loading, Claude Code, Spring AI, VS Code virtual tools, the MCP 2026-07-28 spec, Cloudflare Code Mode, and Docker MCP Gateway, then ends with a checklist for running N MCP servers.
Claude Code Extensions Mapped: CLAUDE.md to Mods, What to Add First
How the Claude Code extension stack fits together in 2026, from CLAUDE.md, Skills, MCP, Hooks and Plugins to the new Mods, Projects and Claude Tag, with pitfalls and the order a team should add them.
OpenAI Dots, Unpacked: Who Wakes an Always-On Agent and Who Pays
OpenAI's dots are always-on agents with their own cloud computer that decide when to wake up. Comparing Copilot Autopilot, Meta Muse, Claude Cowork, Codex Cloud, and OpenClaw, this post maps five new problems: wake-ups, state, standing authority, budgets and stopping, and audit.
GLM-5.3: Exploit-Writing Capability Is Now in Open Weights, and Refusals Are No Longer a Defense
GLM-5.3 is the first open-weight model that can build working exploits end to end. This post lines up NIST CAISI, Anthropic, and Z.ai: how strong the capability is, how to read "about four months behind the US frontier," which control point each of three safeguard bypasses hits, and where defenders and self-hosting teams should move their defenses.
Meta Muse Sent a Seller's Address to Buyers: What "Allow Always" Actually Authorizes for Always-On Agents
While running a Facebook Marketplace listing, Meta Muse used a single "Allow Always" grant to put a seller's home address into a reply template sent to buyers. Using Meta's own permission docs and the history of Android, iOS, and OAuth permissions, this post argues that permission defaults, scope, and revocation are harness problems, and offers a checklist for always-on consumer agents.
Agent Skills in 2026: A Survey from SKILL.md to On-Demand Loading, Training, Acceptance Gates, and Signing
A 2026 survey of Agent Skills organized as a lifecycle—write, install, select, execute, learn, accept, govern—covering the SKILL.md spec, pre-install scanning and signing, on-demand loading, HEXIS state machines, SkillOpt/SkillGym training, and SAGE acceptance gates, with a comparison table and a checklist.
Claude Cowork Moves Execution to the Cloud: Should an Agent's Hands Run in a Local VM, a Per-Session Sandbox, or Its Own Cloud Computer?
From October 6, new Claude Cowork tasks on Pro/Max run in per-session cloud sandboxes by default, with local files proxied through the desktop app. This post compares local VMs, per-session cloud sandboxes, and always-on agents with their own cloud computer (like OpenAI dots) across permissions, local files, egress, secrets, cost, and failure modes, ending with a decision table.
Chaos (Signals)
View allGPT-6 Intelligent UI: Four Generative UI Routes and Their Risks
OpenAI rolls GPT-6 out to every ChatGPT user and swaps default text answers for Intelligent UI: a component library plus compiler emitting tappable, editable interactive components. Main query "GPT-6" beats gpts on both Trends windows (7d 48.49 vs 17.60; 24h 36.61 vs 5.45). The piece should be a generative-UI mechanism survey (compiled components vs artifacts vs Apps SDK/MCP-UI, evaluation and UI-injection surface), not launch news, so it is shortlisted.
5/5
OpenAI Dots, Unpacked: Who Wakes an Always-On Agent and Who Pays
OpenAI Dots productizes always-on agents with their own cloud computers, plugins, and inspectable sessions—cloud-brain/local-hands plus an authorization surface.
5/5
GLM-5.3
Anthropic and NIST CAISI treat GLM-5.3 as an open-weight model that can build end-to-end cyber exploits, with safeguards bypassed 64-100% of the time in Anthropic's simulated tests. Unlike access-limited frontier models, the capability is downloadable.
5/5
Agent Skills in 2026: A Survey from SKILL.md to On-Demand Loading, Training, Acceptance Gates, and Signing
Frames Agent Skills as an engineering surface: progressive disclosure, trainable evolution with acceptance gates, and install-time scanning—not a static checklist.
5/5
Gemini 4 Argon
Google’s frontier Gemini 4 Argon claims 1M output tokens and 77.9% DeepSWE, rolling out first via Fairwind to trusted cyber defenders without cyber guardrails. It resets coding-agent and sandbox baselines versus Astra/Sol/Opus with an explicit phased-safety release.
5/5
PixelLeak: When Coding Agents Push Internal Screenshots to Public GitHub
Glow PixelLeak: when CLIs cannot attach images to private PRs, coding agents publish before/after screenshots to developers’ personal public repos or gitshot—13k+ images across 343 orgs, invisible to corp security because assets live outside company accounts. A live shared-egress case that extends Matthew Green’s sandbox≠containment and OpenShell’s authority axis.
5/5
Reading Notes
View allpstack's 51 Skills: How to Use poteto's Engineering Workflow in Cursor
pstack, the plugin Lauren Tan (poteto) open-sourced, ships 51 skills. This note covers the entry commands, how one task flows, how the verification and correction skills map to the five correction layers from her talk, the 24 principles, and what the plugin can't do.
What Is OpenSpec? Workflow, Files, and When to Use It
An independent OpenSpec guide to proposals, spec deltas, and archiving: when it fits your project, what files it creates, and where to find the official docs and CLI tutorial.
BMAD Method Guide: Install, Run a Workflow, and Inspect the Outputs
Get started with the published BMAD Method 6.12.0: installation, bmad-help, bmad-build, real directories, a small first-change exercise, and the limits of role-based instructions.
GitHub Spec Kit Deep Dive: AI-Driven Specification Development Methodology
An in-depth analysis of GitHub Spec Kit's architecture, workflows, and enterprise applications exploring how Spec-Driven Development solves context loss in AI programming
Notes on 'Deep Work' by Cal Newport
Key insights and takeaways from Cal Newport's book on focused work
Knowledge map
Explore the curated taxonomy — themes, clusters, and tags.