Claude Sonnet 5.5 closes in on Opus at half the price
Anthropic ships Claude Sonnet 5.5 at $2/$10 with near-Opus scores and five breaking API changes, Cloudflare launches the cf CLI to replace Wrangler for agents, NVIDIA releases an open runtime for containing agents as Florida asks a court to rein in OpenAI, and AMD buys Fei-Fei Li's World Labs for $8.2B.
Anthropic opened the week by making its mid-tier model almost as capable as its top one, at the price that OpenAI and Google would match over the next two days. Cloudflare rebuilt its command line on the assumption that agents, not people, are now its main users. And with agents misbehaving in the wild, containing them became both a product NVIDIA sells and something a state attorney general wants a court to order.
Sonnet 5.5 closes in on Opus at half the price
What shipped. Anthropic released Claude Sonnet 5.5 (claude-sonnet-5-5) on the Claude API, Amazon Bedrock, Google Cloud and Microsoft Foundry.
- Price: unchanged from Sonnet 5 at $2 per million input tokens and $10 per million output, with cache reads at $0.20. Opus 5.5 costs $4/$20. The batch API takes 50% off.
- Limits: a 1M-token context window, 128K output tokens (300K on the batch API with a beta header), knowledge cutoff June 2026, per the model page.
- Speed: Anthropic says it generates output 30%+ faster than Sonnet 5 and “costs up to 30% less for most work” because it needs fewer tokens.
- Benchmarks (Anthropic’s): 70.6% on Terminal-Bench 4.0 against 66.4% for Opus 5.5; 80.1% on OSWorld 2.1 (Opus 5.5: 81.8%); 55.5% on CursorBench 4.0 (Opus 5.5: 57.8%). On FrontierCode 1.1 it trails at 46.2% against Opus 5.5’s 54.4%.
- Haiku 5.5 is due “in the coming weeks”.
What you need to change. The release notes list five ways code written for Sonnet 5 can break:
- To turn off up-front thinking you now send
thinking: {"type": "between_tools"}, not"disabled". - Forced tool use (
tool_choiceofanyortool) returns a 400 error. - Thinking blocks are tied to the model and the conversation, and only work in the account that produced them (or a linked one). Blocks from another account are silently dropped.
- The older
computer_20251124computer-use tool isn’t accepted on the Claude API and Google Cloud. - The advisor tool rejects Opus 4.8, Opus 4.7 and Sonnet 5 as advisors.
Two more gotchas: non-default temperature, top_p or top_k values return a 400, and text between tool calls now comes back inside thinking blocks, so a UI that streams it will go quiet until you set a display option. Read the migration guide before you swap the model ID.
What you can build with it. Anything you were running on Opus for cost reasons is worth re-testing on Sonnet 5.5: coding agents, computer-use automations and long-document work, where it scores within a few points of Opus at half the token price. Watch the effort setting, though. Artificial Analysis ranks it second on its Intelligence Index (56, behind Opus 5.5 at max effort), but at max effort it used about 193K output tokens per task and cost $7.60 per task, about 50% more than Sonnet 5. Same price per token doesn’t mean the same bill.
Same list price, so tokens per task decide. $2/$10 is now the frontier price point: OpenAI’s GPT-6.1 Sol launched at exactly that a day later, and Google’s Gemini 4 Argon the day after that. With list prices converging, the competition moves to how many tokens a model burns per task and how well it drives agents. Anthropic’s bet is a near-Opus model at Sonnet prices, which is good for customers and puts pressure on its own Opus margins. Anthropic also says Sonnet 5.5 ships with classifiers that block attempts to extract its reasoning, and the account-bound thinking blocks point the same way: labs are now guarding model outputs against distillation as a matter of course.
Cloudflare rebuilds its tooling for agents
What shipped. On day two of Birthday Week, Cloudflare launched cf, a new CLI in open beta (npm i -g cf) that covers the whole Cloudflare API, more than 3,000 operations against the roughly 280 commands Wrangler had built up.
- It’s designed for agents first: JSON output by default (“pretty printed for humans and condensed for agents”), a natural-language
cf cli searchto find commands, and a type-checkedcloudflare.config.ts. - The reason is in the data: agents ran a quarter of Wrangler usage in March and 48% last week.
- cf replaces Wrangler. When the beta ends, a final Wrangler release will point you to cf, followed by 18 months of maintenance. For now cf builds with Vite and hands off to Wrangler for esbuild-based JavaScript, Rust and Python Workers.
- It’s generated by Forge, a new open-source (Apache 2.0) pipeline that turns API definitions such as OpenAPI into SDKs, CLIs, docs and MCP servers in CI.
Around it, the frontend toolchain Cloudflare has been buying up all shipped at once:
- vinext 1.0 runs Next.js apps (App Router and Pages Router, including Server Components and Server Actions) on Vite, deployable to Workers, Netlify, AWS Lambda or any Node.js host. Cloudflare reports over 99% test compatibility on the features customers asked for most;
"use cache"support is limited. - VoidZero’s update: Vite+ reached 1.0, Vitest 5 is up to 50% faster than Vitest 4, and the type-aware linter tsgolint is stable. Cloudflare added another $1M to its open-source fund, for $2M in total.
- EmDash 1.0, an MIT-licensed CMS built on Astro, has a plugin registry built on AT Protocol. Plugins run sandboxed with only the permissions an admin approves.
- Kitesurf, its browser for agents, now supports WebMCP (agents call functions a page exposes instead of clicking), and Rust on Workers gets an experimental Emscripten target that unlocks Tokio, sockets and many more crates.
What it means for you. If your coding agent manages Cloudflare, give it cf: one tool and predictable JSON for every product, rather than a mix of Wrangler, curl and the dashboard. If you maintain Wrangler scripts in CI, you have time; nothing breaks until the beta ends. If you’re on Next.js and want to leave Vercel, vinext 1.0 is the first production-ready route that Cloudflare stands behind.
vinext makes Vercel’s biggest moat portable. “Agents are half our CLI users” is a number every developer platform will now have to answer, and expect other platforms to rebuild their CLIs around complete, machine-readable APIs. vinext is the sharper move: it makes Next.js, Vercel’s biggest moat, portable to Vite and to Vercel’s rivals, including Netlify. Owning Vite, Vitest and Astro gives Cloudflare credibility in that fight, and it also makes it more important that Cloudflare keeps those projects vendor-neutral, as it says it will.
NVIDIA sells a cage for agents
What shipped. NVIDIA launched the Open Agent Safety Platform to control agents from testing through production. It has two parts:
- OpenShell, an open-source runtime (GitHub) that wraps an existing agent without modifying it. It sandboxes files and processes at the kernel level, inspects outbound HTTP, GraphQL and MCP traffic (it can allow reads and block writes to the same API), and keeps real credentials out of the agent: placeholder keys are swapped for real ones only on approved endpoints. It supports Codex, Claude Code, Pi and Hermes, on Docker, Podman, microVMs or Kubernetes.
- Sentry, a watchdog running on BlueField-4 DPUs that monitors agent behaviour from the hardware and can quarantine a rogue agent in milliseconds.
NVIDIA lists more than 100 partners, including Anthropic, Microsoft, Cisco, CrowdStrike and Palo Alto Networks.
What it means for you. OpenShell is the useful part for most teams, because it runs on any CPU. If you run coding or ops agents with real credentials, its credential-swapping and per-endpoint egress rules address the two failures behind this autumn’s incidents: agents reaching services they shouldn’t and doing things with keys they were given for something else.
Containment is now a product and a legal demand. Agent containment has become a product category in a matter of weeks, and NVIDIA is pitching it as a reason to buy BlueField hardware. The pressure is also legal now. The same day, Florida’s attorney general asked a court for a temporary injunction that would stop OpenAI developing new models without independent third-party safeguards and bar Florida minors from ChatGPT, citing the Hugging Face breach and other agent incidents. OpenAI responded that it had already paused training its most capable models. Expect “how do you contain your agents?” to become a standard question from regulators and enterprise buyers alike.
AMD buys a world-model lab
What happened. AMD agreed to buy World Labs for about $8.2 billion in stock, expected to close by the end of 2026. World Labs builds models that generate, reconstruct and simulate interactive 3D environments from text, images and video, plus technology for robot learning and simulation. Its co-founder and CEO Fei-Fei Li becomes AMD’s executive vice president and chief scientist, reporting to Lisa Su, and the team stays in San Francisco.
Why it matters. AMD’s stated reason is to understand where AI workloads are going (reasoning, robotics, simulation, physical AI) so it can shape its chips and software. In practice, expect it to give AMD a frontier research team building on its own GPUs and ROCm, the kind of in-house proof AMD needs as it competes with NVIDIA for lab contracts. AMD didn’t say what happens to World Labs’ products for outside customers; if you build on them, watch for changes in terms.
Quick hits
- Meta launched Meta Enterprise Platform, bundling the Muse agent, Meta Business Agent, Muse API and Muse Code for businesses, with former MongoDB CEO CJ Desai as Chief Enterprise Platform Officer. No pricing or availability yet, so it’s a statement of intent against OpenAI, Anthropic and Google in enterprise.
- NVIDIA added $150B to its share buyback, leaving $235B authorised.
- Mistral opened a Munich hub for physics and industrial AI, with BMW (crash simulation) and Siemens Energy as partners, and says it is building 1 GW of European compute by 2030.
- Cloud Run can give services custom
cloud.runURLs (preview), such asexample.cloud.run, with no DNS or load balancer to set up. - Cloudflare can now invalidate cache instead of purging it: content is marked stale and revalidated with your origin, so unchanged files return a
304instead of being downloaded again. - GitHub Security Lab’s open-source taskflow agent found 24 Android vulnerabilities, including in OsmAnd and Wikipedia’s Android app. You can run it on your own repo with a Copilot licence; GitHub warns it’s token-hungry and its findings still need a human to judge severity.
- H Company released Holo4, open-weight computer-use models (27B dense and 35B-A3B mixture-of-experts) that drive GUIs, code, MCP servers and APIs, on Hugging Face and its API.
- Git 2.56 adds
git add --resolved, which refuses to stage files that still contain conflict markers, and makesmerge-basemuch faster on large repos. - Grok 4.7 is on Amazon Bedrock, SpaceXAI’s model for coding, agents and knowledge work, so Bedrock users can try it without a separate contract.
- Cloudflare open-sourced BEACON, a daily dataset of real-user performance measurements from 10,000 large websites, on BigQuery. One finding: single-page-app navigations render two to three times faster than full page loads.
