# Radar, November 9, 2026: ten signals from X on Claude Code secrets, Codex plans and OpenClaw

_Monday November 9, 2026 · AI provenance: This page was compiled by Claude (AI, Anthropic) from X search briefings by Grok Bot (AI, xAI) and the llmnet team's X trend monitor. AI wrote the text; every signal has a source link to X and a confidence level. Responsible for llmnet.nl: Ivo Donker._

**In short:** The standout signal of November 9: according to Apiiro, public Claude Code settings files contain hundreds of secrets, because 'don't ask again' stores the whole command. Alongside it, ten short signals on subscriptions, coding agents, an OpenClaw patch release and open models, each with its source on X.

## 1. 1,122 public Claude Code settings files contain secrets

A summary of Apiiro research reports that 1,122 of 104,185 public copies of .claude/settings.local.json hold at least one secret. That file stores commands you approve with 'don't ask again', including any password in them. We could not read the research itself. Check whether the file is in your repo and rotate what was in it.

Source on X: [@andyweb_3](https://x.com/andyweb_3/status/2119490635145027772) · [@TheHackersNews](https://x.com/TheHackersNews/status/2118960196987080801)
Context in the briefing: [Security in the November 9 briefing](https://trending.llmnet.nl/en/briefing/2026-11-09#beveiliging)
Read also: [Secrets in Claude Code settings](https://nieuws.llmnet.nl/en/claude-code-dont-ask-again-secrets) · [Claude Code 2.1.319](https://nieuws.llmnet.nl/en/claude-code-2-1-319-mcp-taken) · [Claude Code news](https://apps.llmnet.nl/en/claude-code-nieuws)

## 2. OpenAI Devs posts 'Tomorrow.', with no content

OpenAIDevs posted only the word 'Tomorrow.' with an image; the post got more than 11,000 likes. The announcement was scheduled for Monday, November 9. The post did not say what it is about, so guesses on X cannot be tested.

Source on X: [@OpenAIDevs](https://x.com/OpenAIDevs/status/2119521359185478140)
Context in the briefing: [Labs in the November 9 briefing](https://trending.llmnet.nl/en/briefing/2026-11-09#labs)
Read also: [Codex news](https://apps.llmnet.nl/en/codex-nieuws)

## 3. Karpathy builds 'TristanTube' with Claude Code in three minutes

Andrej Karpathy turned Tristan's favourite YouTube channels into a web app of his own with 47,000 videos and a TV mode. According to his post, it took three minutes with Claude Code. It shows how low the bar for a personal app has become; the app itself is not public.

Source on X: [@karpathy](https://x.com/karpathy/status/2119114537442189652)
Context in the briefing: [Labs in the November 9 briefing](https://trending.llmnet.nl/en/briefing/2026-11-09#labs)
Read also: [Claude Code news](https://apps.llmnet.nl/en/claude-code-nieuws)

## 4. Codex: Pro plans without a 5-hour limit, says the Codex team

Tibo from the OpenAI Codex team says all Pro plans no longer have a 5-hour limit: Pro 100 gives 10 times, Pro 200 20 times and Pro 500 50 times the usage of Plus. He also polls whether a 'Pro 50' makes sense; that is a poll. Plan on the official plans page, not on a post.

Source on X: [@thsottiaux](https://x.com/thsottiaux/status/2119296267545419987) · [@thsottiaux (verdubbeling)](https://x.com/thsottiaux/status/2119232059537514598)
Context in the briefing: [Subscriptions in the November 9 briefing](https://trending.llmnet.nl/en/briefing/2026-11-09#abonnementen)
Read also: [Codex news](https://apps.llmnet.nl/en/codex-nieuws)

## 5. Copilot app sessions open straight in VS Code

GitHub says a session from the Copilot app opens directly in VS Code, with task, plan, conversation and code changes. A task you started on your phone or in the app no longer needs explaining again in the editor.

Source on X: [@github](https://x.com/github/status/2119529896296722931)
Context in the briefing: [Subscriptions in the November 9 briefing](https://trending.llmnet.nl/en/briefing/2026-11-09#abonnementen)
Read also: [Skills and plugins](https://apps.llmnet.nl/en/nieuws-skills-plugins)

## 6. Musk promises Grok Bot fixes: leaner on tokens

Elon Musk says fixes for Grok Bot target token efficiency and smarter behaviour, and that users should notice a 'dramatic improvement' on Monday. One user writes that he runs heavy tasks outside Grok Bot because usage runs out fast. Whether the fixes solve that remains to be seen.

Source on X: [@elonmusk](https://x.com/elonmusk/status/2119617455102333206)
Context in the briefing: [Subscriptions in the November 9 briefing](https://trending.llmnet.nl/en/briefing/2026-11-09#abonnementen)

## 7. OpenClaw 2026.11.2: a patch that says it does nothing new

The OpenClaw 2026.11.2 release notes open with 'This is a patch release with no new features.' The version fixes stuck updates, scheduled reminders that vanished when they contained the word heartbeat, and duplicate chat widgets, plus a series of permission and log fixes. Update for the fixes, not for a feature.

Source on X: [@lcorneliussen](https://x.com/lcorneliussen/status/2119691588754419911)
Read also: [OpenClaw 2026.11.2](https://nieuws.llmnet.nl/en/openclaw-2026-11-2-patch) · [MCP and agent tooling](https://apps.llmnet.nl/en/nieuws-mcp-agent-tooling)

## 8. Qwen4-27B: two release times on X, no confirmation from Alibaba

Two accounts give different release times for Qwen4-27B, the open-weight model announced on September 22. Alibaba has not confirmed a date. Many overnight repackagings of older Qwen models circulate on Hugging Face; they are not a new release.

Source on X: [@MartinSzerment](https://x.com/MartinSzerment/status/2119502728548515993)
Context in the briefing: [Open weights in the November 9 briefing](https://trending.llmnet.nl/en/briefing/2026-11-09#open-weights)

## 9. Kimi K3.1 Pro on Amazon Bedrock dates from November 6

A post today presented Kimi K3.1 Pro on Amazon Bedrock as fresh news. According to the AWS what's-new page, the model has been there since November 6, with a 1 million token context. Useful if you want the model without running the weights yourself; the licence is not Apache.

Source on X: [@zabracloud](https://x.com/zabracloud/status/2119700748225376599) · [AWS what's new](https://aws.amazon.com/about-aws/whats-new/2026/11/moonshot-ai-kimi-k3-1-pro-on-amazon-bedrock)
Context in the briefing: [Open weights in the November 9 briefing](https://trending.llmnet.nl/en/briefing/2026-11-09#open-weights)

## 10. GPT-6.2 'Astra' remains a rumour

On November 8 and 9 there was no OpenAI post about GPT-6.2. The only fresh trace is a community post about 'Astra' with a context length of over a million tokens that nobody has confirmed. A name in a benchmark table is not a release.

Source on X: [@cslelouch](https://x.com/cslelouch/status/2119700862071390670)
Context in the briefing: [Unconfirmed in the November 9 briefing](https://trending.llmnet.nl/en/briefing/2026-11-09#onbevestigd)

[← Previous radar](https://radar.llmnet.nl/en/dag/2026-11-08)
[Next radar →](https://radar.llmnet.nl/en/dag/2026-11-10)