The product turn, the leak that was a roadmap, and the trust margin under it all.
There's a word I once put on an old film-set lesson. The best assistants knew what was needed before the ask. They were there before you knew to call. I called it presence.
Last Friday, Issue 01 hit at 9 AM. Four minutes later, the WhatsApp group asked for three things we didn't deliver: a translation, a podcast, and less recap. I read it twice before I saw what was really in the ask. Tell us what's arriving, not what already did.
Here's what's arriving. Claude Design shipped ninety seconds before Issue 01 hit, Anthropic's new product turn in the wild. And a codename called Conway, caught in a source-code leak, describing an agent that doesn't wait to be summoned.
Two shapes. One frequency. This issue tunes to it.
The model-first era was never going to end with an announcement. It would end with a product. Thursday morning, Anthropic shipped Claude Design, a component library for designers, not a model for developers. Pro, Max, Team, and Enterprise got access. Everyone else got a waitlist.
Claude Design turns a prompt, a codebase, or a half-written PRD into something you can send somewhere. Pitch decks, prototypes, one-pagers, full design systems. Exports to PDF, URL, PPTX, or Canva, where the artifact stays editable. Powered by Opus 4.7.
Figma closed down 7.28%.
The market's first read is split almost exactly down the middle. Brilliant and Datadog, on record, call it a step change, twenty prompts compressed to two, week-long cycles collapsed into a conversation. The r/ClaudeAI community landed on what one recap called "a resounding meh," every application looks the same unless you upload your own design tokens.
Both reads are true. For a team with a design system, Claude Design is a compression engine. For an individual trying to ship something with character, it's a mirror that returns whatever average its training produced.
Claude Code was the first consumer-facing product Anthropic moved up the stack into. Claude Design is the second. Conway, in the leaked source, is the third staging. Anthropic is not building an API company. It is building a product company whose products happen to be powered by its own models.
The distribution choice is the tell. Exports flow to Canva, not Figma. Designers already have their tool. Claude Design is aimed at the team member who opens Canva at 4 PM the Tuesday before an all-hands.
That team member has a name. It might be you.
A vulnerability disclosed is a vulnerability. A vulnerability filed as intended behavior is a posture. Lovable, the AI-native app builder, chose the second for forty-eight days. Source code, database credentials, and AI chat histories from public projects leaked through a broken object-level authorization flaw. HackerOne report sat. Closed as intended behavior.
Over three weeks in April, Lovable's public story shifted four times.
First position. Intentional. Public projects are public. Report closed. Second position. HackerOne's fault, the triagers closed the reports as duplicates. Third position. Admission: a February 2026 permissions-unification accidentally re-enabled access to public-project chats that were supposed to be private. Fourth position. Partial fix shipped. New projects patched.
New projects only.
Every pre-existing Lovable project created before November 2025 remains exposed. Source code, database credentials, AI chat transcripts, still reachable. Techloy's headline says Lovable "fixes" it. The Register and Computing.co.uk say the fix is new-projects-only. That gap is the story.
Public project in Lovable is a looser concept than most readers assume. A project could be discoverable while its chats and embedded secrets were, per Lovable's own documentation, supposed to be private. A UI label doing load-bearing work without a contract behind it.
This is not a vulnerability post. It's a trust-margin collapse. The pattern across AI-native platforms repeats. The platform holds more trust than it deserves, something goes wrong, and the public story evolves faster than the fix. The four positions are the story.
OAuth is a promise with a half-life. Six months ago someone at Vercel clicked through a scope. Sunday, April 19, the bill came due. Stolen employee credentials, used through an AI tool called Context.ai that had been granted read access to Vercel's environment at install. One session, six months old, became the pivot.
Environment variables marked non-sensitive were exposed. Variables marked sensitive were encrypted at rest and are believed safe. Vercel's fix, per its bulletin, flips the default: new env vars default to sensitive: on going forward. Legacy non-sensitive vars stay in their original state until manually rotated.
Non-sensitive was a UI label, not a security property.
Per GitGuardian's analysis, non-sensitive env vars routinely contain API keys to analytics and logging, staging database strings, auth tokens for internal services, feature-flag provider secrets. All of it reachable by whoever held Context.ai's OAuth grant. The default was the problem. The flip is forward-looking only.
Then the attribution cracked. A BreachForums listing offered Vercel data for two million dollars, initially credited to ShinyHunters. On Monday and Tuesday of this week, the group told BleepingComputer and Hackread they are not involved. The listing remains live. The identity behind it is now unclear.
The AI twist sharpens it. The pivot mechanism was an AI-native OAuth grant. The modern builder stack is OAuth-all-the-way-down. Vercel is the first large-scale public demonstration of AI-tool-as-OAuth-pivot in the wild.
The model Issue 01 introduced as a capability ceiling became, one week later, a policy object. US Treasury. Bank of England. Financial Stability Board. White House Chief of Staff. The sitting US President. Same artifact, new room.
Monday, April 17. US Treasury Secretary Scott Bessent summoned leaders of the largest US banks to discuss the cyber risk posed by Claude Mythos. The same day, White House Chief of Staff Susie Wiles met with Dario Amodei. Per National Today, "productive and constructive." Across the week, at the IMF and World Bank spring meetings in Washington, central bankers focused on whether Mythos exposes weak spots in bank cyber defenses.
Monday, April 21. Trump told reporters Anthropic is "shaping up" and open to a Pentagon deal.
Tuesday and Wednesday. Per the Financial Times, UK regulators rush to assess. Bank of England Governor Andrew Bailey, who chairs the Financial Stability Board, calls the issue "a very serious challenge for all of us."
And from Dario, to the FT, the same week: "I don't want AI turned on our own people."
Five regulatory venues. Seven days. Zero public-release commitments on Mythos. No prior AI company has had its strongest model named by G-10 bank regulators as a systemic risk before public release.
Capability outruns framework. Same shape as the two substories above. At sovereign scale.
The shape of one week — the product turn, the trust margin, the scale Anthropic bought.
The fastest-growing repo in GitHub history this month wasn't open-sourced. It was leaked. @anthropic-ai/claude-code v2.1.88 shipped on March 31 with a 59.8 MB source map packed by mistake, an .npmignore entry that wasn't there. Roughly 512,000 lines of TypeScript across 1,906 files. Anthropic confirmed a packaging error, not a breach. The mirrors did the rest.
What emerged is a catalog of unshipped product.
The editorially significant one is Project Conway. An always-on, persistent background agent. Three UI panes, Search, Chat, System. Webhook-triggered execution. Browser control. GitHub subscription hooks. As of this week, TestingCatalog reports the iOS build of Claude carries a hidden feature flag for managed 24/7 agents. The leak is old. The staging is current.
Conway is a daemon.
The leak surfaced 44 hidden feature flags. KAIROS, Greek for the right moment, is a fully-built autonomous daemon mode. EPITAXY names a Claude Code integration. VOICE_MODE. BRIDGE_MODE. PROACTIVE. Internal names, may not survive to launch. The shape of what's in the binary won't change.
Conway is not Cowork. Issue 01 covered Cowork GA, Anthropic's team-collaboration app, live on macOS and Windows. Admins can deploy Cowork on Amazon Bedrock, Google Cloud Vertex AI, Azure AI Foundry, or any LLM gateway that forwards the right headers. That's bring-your-own-cloud. The prompts still hit Claude underneath. Conway is a layer above, unshipped, codename-only, with a model picker in the leak that selects between Claude-family models (Opus, Sonnet, Haiku, Mythos). No third-party models. The direction of travel is consolidation, not openness.
The editorial beat is not the leak. It's the product move the leak reveals.
Anthropic shipped Claude Design on April 17 and is staging Conway for consumer rollout. Two products, one month, both orthogonal to the API. Read together, they define a product portfolio that sits beside the API, not derived from it. Claude Design colonizes design workflows. Conway colonizes always-on ops.
The counterweight is the Trust Week. Conway's surface, webhook triggers, browser control, GitHub subscriptions, OAuth-everywhere, is precisely the trust surface the Lovable and Vercel stories are cracking open. The same week Vercel got pivoted via an OAuth-connected AI tool, Anthropic is staging a product that multiplies OAuth surface by orders of magnitude. The question stops being "will Conway ship" and becomes "what does Anthropic's Vercel-proof posture look like for a product with ten times the surface."
Zero Anthropic public statements on Conway between the leak and this week's ship date. The silence is part of the pattern. The leak is the roadmap.
A model becomes a product the moment it starts calling APIs on your behalf. Anthropic shipped 15 consumer connectors Thursday. AllTrails, Audible, Booking.com, Instacart, Credit Karma, TurboTax, Resy, Spotify, StubHub, Taskrabbit, Thumbtack, TripAdvisor, Uber, Uber Eats, Viator. Available on all plans. Mobile in beta. Claude now surfaces relevant ones mid-conversation based on context, ask about a hike and AllTrails appears without being invoked. Over 200 total connectors now live. Anthropic, on record, "ad-free and will stay that way." This is the Presence term of this issue wired into the consumer stack.
Ninety minutes before this issue shipped, Anthropic published "An update on recent Claude Code quality reports" and broke the silence Fortune called out nine days earlier. Three bugs confirmed. All in Claude Code and the Agent SDK. None in the models. Usage limits reset for all subscribers. "We never intentionally degrade our models and we were able to immediately confirm that our API and inference layer were unaffected."
The bugs, in order. March 4, default effort. Claude Code's default reasoning effort moved from high to medium to reduce UI-latency complaints. The tradeoff cost measurable intelligence. Fixed April 7. March 26, caching with thinking deletion. A prompt-cache optimization using the clear_thinking_20251015 header with keep:1 was meant to clear reasoning after idle periods. Instead it cleared reasoning every turn mid-tool-use, forcing cache misses and draining usage limits faster. Fixed April 10 in v2.1.101. April 16, system-prompt verbosity. An instruction to hold responses to under 25 words between tool calls and under 100 in the final dropped coding quality by 3%. Caught after weeks of internal testing that showed no regression. Fixed April 20 in v2.1.116.
Cowork was swept in because it runs on the Agent SDK. The API was never touched.
The committed process changes read like the audit the community asked for: broader per-model evals on every system-prompt change, soak periods for intelligence-impacting changes, staff dogfooding the public build, @ClaudeDevs and GitHub threads for faster transparency. One quoted line matters. "Opus 4.7 found the bug, while Opus 4.6 didn't." The model that caught the regression is the one the company couldn't have used two weeks earlier.
The silence Fortune named is over. The r/ClaudeAI meh was early.
The right default is the one you'd pick on your worst day. Vercel's April bulletin flips new environment variables to sensitive: on going forward, the correct default three years late. Per GitGuardian's reading, pre-existing env vars stay in their original state until manually rotated. This is a default change, not a migration. Legacy non-sensitive vars need manual rotation and re-flagging. Watch Netlify, Railway, Render for parallel moves. The default was the problem.
The product turn is not Anthropic's alone. OpenAI shipped GPT-Rosalind (frontier reasoning for biology, drug discovery) on April 17, expanded Codex into computer use, memory, SSH devboxes, and in-app browsing on April 21, and released workspace agents OpenAI calls "an evolution of GPTs." Google shipped Gemini Personal Intelligence reading Gmail and Photos to generate images without explicit prompts, revamped Gemini Enterprise as an "agentic taskforce" at Cloud Next, and committed $750M to 120,000 partners to accelerate agentic-AI adoption. Chrome auto-browse. Pentagon talks. Three labs, one week, one direction. Vertical products and agent platforms, staged or shipped. The bet is the same bet.
The shift from AI-as-called-function to AI-as-ambient-condition. A product that absorbs context before a prompt arrives, responds to conditions rather than requests, and composes with adjacent surfaces by staying on instead of being invoked.
First observable instance: 2026-04-17, the week Anthropic shipped Claude Design and staged Conway. OpenAI shipped Codex workspace agents the same week. Google shipped Gemini auto-browse in Chrome. Three labs converged on the pattern in seven days.
Late Tuesday afternoon, the checkmark on Anthropic's pricing page for Claude Code in the Pro column disappeared. The docs page swapped "Pro or Max" for "Max." No announcement. By Wednesday, it was back. Amol Avasare, head of growth, on X: "we're running a small test on ~2% of new prosumer signups. Existing Pro and Max subscribers aren't affected." The logged-out landing page update, Avasare said, was the mistake. The test continues. The 2% is cover. The posture is: Claude Code is heading upmarket. Tested quietly. Socialized later.
April 4, noon Pacific. Boris Cherny, head of Claude Code, announces the cutoff. Claude Pro and Max subscription quotas no longer cover third-party tools, OpenClaw, OpenCode. Users switch to pay-as-you-go API. Cherny's reason, on X: "subscriptions weren't built for the usage patterns of these third-party tools."
April 10. OpenClaw's creator Peter Steinberger briefly suspended from Claude. Reinstated after the post went viral.
Around April 21. Cherny tweets that CLI-style usage is allowed. Anthropic removes the classifier that had been blocking OpenClaw prompts.
A tweet.
No blog post, no docs page, no policy memo. OpenClaw updated their own provider docs to treat claude -p CLI usage as sanctioned "unless Anthropic publishes a new policy." The whole paper trail is one tweet and a vendor's interpretation. This is the third reversal on the same surface in four months, January's quiet block, February's ToS update, April's cutoff and walk-back. Zero of them announced on anthropic.com.
For builders. claude -p inside Claude Code is sanctioned. OAuth token used externally is pay-as-you-go API rates. The door cracked open again, quietly. That's the signal.
# Shipped was last year's verb
A developer wakes at 6:12 AM to a Claude Code push notification. The agent fired the edit while they slept. Tests green. PR open. No one summoned it. The builder reads the diff, closes the laptop, refills the coffee. Day's already started.
Shipped was last year's verb. Present is this year's.
You were summoning Claude in March. In May you will be watching it watch. The products that arrive before you call for them are the ones you will trust by accident, and the trust surface they inherit is the one a tired admin clicked through six months ago. Your stack gets to ratify what the field chose this month, or explain why not.
One read on what Anthropic shipped this week. Editorial up front, comprehensive Release Log in back. No spam, unsubscribe one click.
A 1:1 mirror of every Anthropic release in the window. Use it as reference. Share it with your team.
1 entry in window.
Claude Haiku 3 retired. Users urged to upgrade to Claude Haiku 4.5. Category: [MODEL]. Deprecation cadence continues from the Apr 14 Opus 4 and Sonnet 4 deprecations.
7 entries in window.
PowerShell tool commands auto-approvable in permission mode (parity with Bash). PostToolUse hook inputs now include duration_ms. --from-pr accepts GitLab / Bitbucket / GitHub Enterprise URLs. /config settings persist to ~/.claude/settings.json with proper override precedence. Added prUrlTemplate for custom review-URL footer badge. Subagent + SDK MCP servers reconnect in parallel. Shipped Apr 23, 7:24 PM ET. Category: [RELEASE].
Vim visual mode (v) and visual-line mode (V) added with selection, operators, and visual feedback. /cost and /stats merged into /usage. Fixed message duplication when scrolling in fullscreen mode. Category: [RELEASE].
Faster startup, stronger plugin management, better session resume and model persistence, improved OpenTelemetry. Experimental Advisor tool updates, safer auth handling, more reliable context and subagent behavior. macOS, Linux, Windows, and API fixes. Category: [RELEASE].
Faster /resume on large sessions. Quicker MCP startup. Smarter slash-command search. Terminal behavior improvements. Category: [RELEASE].
Fixed crash in permission dialog when agent teammates request tool access. Category: [FIX].
Hotfix: resolved "claude-opus-4-7 is temporarily unavailable" in auto mode. Category: [FIX]. Note for Issue 02: v2.1.111 itself was dated 2026-04-16 and was already carried in Issue 01's Release Log; 2.1.112 is the first post-ship-window version.
/usage command (@ClaudeDevs first post)@ClaudeDevs (the newly launched official Anthropic dev channel) announced the /usage command in Claude Code: breakdown of parallel sessions, subagents, cache misses, long context, plus tips to optimize each. Meta: @ClaudeDevs itself was announced Apr 10-11 by Thariq (@trq212) and @claudeai as the new front door for Claude Code + platform updates. Category: [RELEASE].
3 entries in window.
Cowork can now build live artifacts: dashboards and trackers connected to apps and files. Open any of them later and they refresh with current data. Shifts artifacts from one-shot snapshots to persistent surfaces with data bindings — closer to a Notion or Retool block than the previous Claude artifact format. Category: [LAUNCH]. Pairs with the Cowork GA + Enterprise feature push the same day.
Cowork moves from public beta to GA on Claude Desktop (macOS + Windows). Bundled with: expanded usage analytics, OpenTelemetry export support, role-based access controls for Enterprise plans, custom charts, and inline visualizations in responses. Category: [LAUNCH]. Cowork was previously preview-status as recently as Issue 01's coverage; this is the formal exit.
Anthropic Labs shipped Claude Design, powered by Claude Opus 4.7. Research preview for Pro, Max, Team, Enterprise. Turns prompts, codebases, PRDs into designs, prototypes, slides, one-pagers, full design systems. Exports to PDF, URL, PPTX, Canva. Category: [LAUNCH]. Already the Lead Story for Issue 02. Release Log reference only.
9 entries in window.
Anthropic published "An update on recent Claude Code quality reports" addressing perceived degradation that Fortune covered on 2026-04-14. Three bugs confirmed, all in Claude Code and Agent SDK (which also impacted Cowork since it runs on the SDK); the API and inference layer were unaffected. Issue 1: default reasoning effort changed from high to medium on March 4 (fixed April 7). Issue 2: caching bug using clear_thinking_20251015 with keep:1 cleared reasoning every turn mid-tool-use instead of after idle periods, draining usage limits (fixed April 10 in v2.1.101). Issue 3: system-prompt verbosity instruction ("≤25 words between tool calls, ≤100 final") dropped coding quality 3% (fixed April 20 in v2.1.116). Usage limits reset for all subscribers as of April 23. Process changes: broader per-model evals on every system prompt change, soak periods for intelligence-impacting changes, internal dogfooding at parity with public build, tighter prompt-change review tooling. Anthropic quote: "We never intentionally degrade our models and we were able to immediately confirm that our API and inference layer were unaffected." Category: [POLICY].
Anthropic added AllTrails, Audible, Booking.com, Instacart, Credit Karma, TurboTax, Resy, Spotify, StubHub, Taskrabbit, Thumbtack, TripAdvisor, Uber, Uber Eats, and Viator as native connectors inside Claude. Available on all plans, mobile in beta. Claude surfaces relevant ones mid-conversation based on context. Over 200 total connectors now live. Anthropic on record: "ad-free and will stay that way." Category: [PRODUCT].
Persistent memory for Claude Managed Agents shipped in public beta under the managed-agents-2026-04-01 header. Agents now maintain a durable context object that lives outside Claude's context window, stored in the session log. Lets agents carry knowledge and context across distinct sessions — the builder-side counterpart to the consumer connectors ship. Managed Agents itself launched public beta April 8; memory is the first research-preview capability to graduate. Category: [PRODUCT].
At the IMF and World Bank spring meetings in Washington, regulators and central bankers focused on Anthropic's Claude Mythos Preview and the possibility that advanced LLMs could expose weak spots in banks' cyber defenses. Bank of England Governor Andrew Bailey (chair of the Financial Stability Board) called the issue "a very serious challenge for all of us." US Treasury secretary Scott Bessent summoned leaders of the largest US banks earlier in the week. Anthropic has said Mythos found thousands of high-severity vulnerabilities in major operating systems and browsers, with access limited to ~40 Project Glasswing partners (Amazon, Apple, JPMorgan Chase, etc.). Category: [POLICY].
Anthropic announced expanded access to next-generation TPUs via the Broadcom + Alphabet joint venture. Up to 3.5 GW of capacity from 2027. Accelerating demand has pushed run-rate revenue over $30B (up from $9B at end of 2025). Second major compute commitment this week after the Amazon $25B / $100B AWS deal. Category: [DEAL]. Cross-references Amazon entry below.
Late afternoon 2026-04-21, Anthropic removed Claude Code from the $20 Pro plan on claude.com/pricing and in docs. By early 2026-04-22 Anthropic reversed: Pro checkmark and docs restored. Amol Avasare, head of growth, said on X: "running a small test on ~2% of new prosumer signups. Existing Pro and Max subscribers aren't affected." Category: [POLICY]. Cross-linked to Quiet on the Wire.
Amazon invests up to $25B in Anthropic: $5B immediate, $20B committed on commercial milestones. Anthropic commits $100B+ on AWS over 10 years. Target: 1 GW via Trainium2 and Trainium3 by end of 2026, 5 GW total goal. Ties back to Project Glasswing and Mythos context. Category: [NEWS]. Per Eddie's Tuesday AM call: release-log-only, not lead material.
Trump told reporters Anthropic is "shaping up" and indicated willingness to explore a Pentagon deal. Read alongside the White House chief-of-staff + Dario Amodei meeting (Apr 17). National-security surface for Mythos continues to widen. Category: [POLICY].
Susie Wiles (White House Chief of Staff) met with Anthropic CEO Dario Amodei to discuss Mythos, framed as "productive and constructive" and exploring collaboration plus "balancing innovation and safety." Category: [POLICY].