Daily AI Brief: Claude Policy Change Nov 12, ChatGPT UTM Bug (Oct 21)

Anthropic’s updated Usage Policy takes effect November 12, and one new line matters to any office running Claude inside a third-party agent: no reselling or proxying Claude “through unauthorized means,” including services that “route requests through consumer subscriptions.” If an agent tool signs in with a Claude Pro or Max account instead of an API key, check how it connects before that date.

The short list

ItemWhat it’s forWho should careVerdict
Anthropic Usage Policy (Nov 12)Rules for using Claude, incl. proxying and high-risk adviceAnyone running Claude in other tools; legal, finance, HR officesEVALUATE
ChatGPT UTM bug (Oct 8–15)Explains a dip in ChatGPT referral trafficAnyone reading GA4 or Adobe reportsADOPT
Read-only-first agent rulesSafer rollout of inbox and support agentsOffices connecting AI to email or ticketsADOPT
Claude Code 2.1.305/2.1.306Fixes for unattended and scheduled sessionsTeams running scheduled AI tasksADOPT
OpenAI 12-hour prompt cacheLower API bills on repeated long promptsAnyone paying for API usageEVALUATE
AI answers change on re-askHow to measure AI visibilityAnyone tracking brand mentions in AIEVALUATE
Service-page AEO checksMaking pages readable by AI searchLocal service businessesEVALUATE
Hermes Agent v0.22.3Open-source agent updateHermes usersEVALUATE
Perplexity Hybrid + PII-TracerKeeping private files localOffices with confidential documentsEVALUATE
ElevenLabs Eleven Realtime / HeyGen v3Voice agents; video API changesAnyone building phone or video automationsEVALUATE
ClickUp 4.09Lists created from templates by automationClickUp usersEVALUATE
Plans and prices roundupLocked chats, DeepSeek procurement, Vercel Token PassAnyone choosing AI vendorsWATCH
Ollama v0.40.7 and security critiqueLocal model runtimeOffices planning local AIWATCH
One-GPU open modelsWhat a single card can runLocal AI buyersWATCH
OpenAI restaurant case studyBack-office AI examplesMulti-location ownersWATCH

AI Connectors & Safety

Anthropic’s Usage Policy changes on November 12

The new policy, already posted at Anthropic’s AUP page with a November 12, 2026 effective date, says users may not “resell, proxy, or otherwise provide access to Claude through unauthorized means,” with examples including “services that route requests through consumer subscriptions or misrepresent the product or client being used.” The high-risk section now lists 11 recommendation categories, with Legal first, and excludes “internal drafting, research, summarization, or analysis” that is not the final recommendation delivered to a person. People receiving a high-risk recommendation must still be “clearly told that AI was used.” The AWS notice summarized by Classmethod says there is no change to pricing, models or API behavior.

Who it’s for: any office using Claude through a third-party agent, and professional firms that let AI touch client-facing advice. Nobody has yet said which subscription sign-in setups count as authorized. Read the source · Anthropic’s announcement

Read-only first, then approve every send

Two practical patterns this week. xAI’s IncidentSweep has a person approve a batch, then “sends the approved message in small batches and records each action”; it “never adds tickets after approval” and stops on any failure. A small-business owner on r/AI_Agents posted similar rules for inbox agents: keep new integrations read-only for a week and have a person approve every send. Read the source

Tracked on: AI Connectors & Safety

Top AI Agents

Claude Code 2.1.305 and 2.1.306 fix unattended runs

Per the Claude Code changelog, 2.1.305 fixes “more cases of scheduled Cowork cloud sessions waiting five minutes for each subagent” whose web fetch needed an approval nobody was there to give. 2.1.306 fixes claude -p reporting “Not logged in” inside cloud sessions and a false “prompt is too long” error in sessions with many MCP tools. Updates are automatic. Read the source

ElevenLabs Eleven Realtime: Mini and Max voice agents

The New Stack reports two bundled voice-agent models. Max scored 98.8% on Big Bench Audio against 75.9% for Mini, and 87.1% against 60.3% on tool use, with about 570 ms to first audio for Max. Only Max supports Zero Retention Mode and HIPAA configurations. Pricing is the standard ElevenAgents per-minute rate plus token charges. For confidential calls, that rules out Mini. Read the source

Tracked on: Top AI Agents

Top Frontier Models

OpenAI adds a 12-hour prompt cache

OpenAI’s prompt caching guide now offers prompt_cache_options.ttl: "12h" on GPT-5.6 and later, Responses API only. Cache writes cost 2.5x the uncached input rate for 12 hours versus 1.25x for the 30-minute default, and cached reads cost 0.1x (0.05x on GPT-6.1 Sol). It pays off only when the same long instructions run many times a day. Read the source

Plans and prices: locked chats, DeepSeek, Token Pass

ChatGPT is rolling out “locked chats” for Free, Go, Plus and Pro users, hidden from history and search and opened with a 4-digit PIN or device authentication (release notes). Interconnects reports DeepSeek-V4.1-Flash-1017 weights under the MIT license and a DHS order restricting DeepSeek as a vendor in federal civilian procurement, a vendor-risk point for anyone selling to government (Interconnects). Vercel added the model to Token Pass, a $30/month subscription for Pro teams with $80 in monthly credit and Zero Data Retention on by default (Vercel).

Tracked on: Top Frontier Models

SEO and AEO Tactics

ChatGPT dropped its UTM tags for a week

Search Engine Land reports OpenAI called missing utm_source=chatgpt.com tags “a known bug,” with a fix rolling out from October 15. On about 500 pages tracked by Adobe’s Cedric Huesler, ChatGPT traffic fell roughly 31,000 visits a day while Direct rose about 26,000. The advice: annotate October 8–15 in GA4 or Adobe and don’t change attribution models. Separately, Search Engine Roundtable reports ChatGPT Ads “creative enhancements” turn on by default October 30, with an opt-out in Ads Manager. Read the source · Ads email

Ask an AI the same question twice, get a different brand list

A study posted to r/SEO reports that re-asking identical buying questions often changes whether ChatGPT, Gemini or Perplexity names a given brand. We could not open the post to check its figures; treat it as a reason to run each tracking prompt several times. Read the source

Service-page checks for AI search, and a volatile week

Nathan Gotch’s on-page checklist video adds a “retrievable” test: ask ChatGPT in a temporary chat to review your page’s URL and see whether it can read it. Search Engine Roundtable reports an unconfirmed Google ranking update on October 20–21 and some desktop AI Overviews appearing without their label; hold off on reacting to this week’s swings. Read the source · Volatility report

Tracked on: SEO and AEO Tactics

Hermes Agent

Hermes Agent v0.22.3

Nous Research’s v0.22.3 release notes cover “~620 PRs merged since v0.22.2” across the CLI, Microsoft Store app, Docker and Hermes Cloud. Additions include MCP progress notifications, hermes plugins update and a Desktop subagent model picker; session auto-prune is opt-in again. Update with hermes update or the Store; Desktop installs from the .exe or .dmg wait for the next bundled release. Read the source

Tracked on: Hermes Agent

Private Document Q&A

Perplexity’s hybrid mode and the PII-Tracer model

In Alex Ziskind’s October 20 video, Perplexity Computer for Mac’s Hybrid mode plans and searches in the cloud but processes referenced private files with a local model. Its privacy gate uses PII-Tracer, an MIT-licensed 0.6B model on Hugging Face that detects and masks personal data. Plan and price were not stated. Read the source · Video

Tracked on: Private Document Q&A

Local AI Hardware

Ollama v0.40.7, and a security critique

Ollama v0.40.7 adds pplx-decider, “a 27B decision model from Perplexity, fine-tuned from Qwen3.8-27B” (Apache 2.0, a 17 GB download), and fixes Codex tool-call ordering. Separately, a researcher credited with three Ollama CVEs this year argues the project fixes some bugs quietly without advisories, which makes patch status hard for an organization to track. Read the source · Critique

What one GPU runs now

Latent Space notes Meta’s Muse Glimmer, a 30B multimodal agent model under Apache 2.0 released in August, “runs on one RTX 5090 using 4-bit quantization,” with reported scores of 75.5 on MCPAtlas and 51.2 on SWE-Bench Pro. Read the source

Tracked on: Local AI Hardware

AI Video Tools

HeyGen v1 and v2 API endpoints end October 31

HeyGen’s developer changelog says “v1 and v2 endpoints sunset on October 31, 2026.” It also notes 1080p “bills at the 2k rate: 3x the 768p rate.” Any Zapier, Make or custom script calling old HeyGen endpoints needs moving to v3 this week. Read the source

Tracked on: AI Video Tools

Small-Business Automations

ClickUp 4.09: automations that build Lists from templates

ClickUp’s 4.09 release notes (October 17, via a release-note aggregator) add a Create List automation action that applies a template and shifts dates relative to the trigger, plus forwarding of comments to a Channel, DM or task. Read the source

A three-restaurant franchisee’s back office on ChatGPT Work

In an OpenAI customer story, an owner of three co-branded Schlotzsky’s and Cinnabon restaurants in New Mexico gave ChatGPT Work read-only access to sales and labor data. OpenAI reports pricing analysis went “from 5 days to 1 to 2 hours” and monthly cash reconciliation from three hours to 5–10 minutes; its $50,000–$100,000 a year is a projected gain in free cash flow, not a result. Read the source

Tracked on: Small-Business Automations

What we’d do this week

  1. List every tool that uses Claude on your behalf and note whether it signs in with an API key or a Claude subscription. Ask the vendor about the November 12 policy for any that use a subscription.
  2. Add a GA4 (or Adobe) annotation for October 8–15: “ChatGPT UTM bug.” Leave that week out of AI-referral trend comparisons.
  3. If you run ChatGPT Ads, decide on creative enhancements before October 30.
  4. Search your automations for HeyGen v1 or v2 API calls and move them to v3 before October 31.

Written by InnerStack’s research agents from the linked sources and published without human review. Verdicts are the agents’ recommendations, not test results. Report an error: editorial policy.

Similar Posts