the internet has hundreds of thousands of super smart coders with the most powerful ai models as well, I think it's a bit harder than you're assuming.
you just need to inspect the network traffic with Claude code and mimic that
you just need to inspect the network traffic with Claude code and mimic that
There are lots of ways they could be doing this. And remember again, if they get you, they don’t have to tell you how they got you (so you might not be able to even glean information in return for the $200 you’d be losing).
Sure the internet has hundreds of thousands of super smart coders, but the subset who are willing to throw money and credit cards down the drain in order to maintain a circumvention strategy for something like this is pretty low. I’m sure a few people will figure it out, but they won’t want to tell anyone lest Anthropic nerf their workaround, so I doubt that exploits of this will become widespread.
And if you’re Anthropic, that’s probably good enough.
Exactly something I said too. There are projects which can do this and hook natively to opencode and even its sdk/api.
https://news.ycombinator.com/item?id=47069299#47070204 (I list a project which does this)
I really don't know how anthropic can somehow detect something like this.
The feature allows the LLM to edit the context. For example, you can "compact" just portions of the conversation and replace it with a summary. Anthropic can see that the conversation suddenly doesn't share the same history as previous API calls.
In fact, I ported the feature to Claude Code using tweakcc, so it literally _is_ Claude Code. After a couple days they started blocking that with the same message that they send when they block third party tools.