Headroom Daily: Token Counts You Can Finally Trust

Merged fixes correct Headroom's Claude token and savings accounting to match provider billing, alongside a SOC 2 CodeQL cleanup. Agent reliability papercuts around retrieval, routing, and compaction were also fixed.

Duration: PT2M19S

Episode overview

This episode is a short developer briefing from Headroom Daily.

It explains recent repository work in plain language.

  • Show: Headroom Daily
  • Published: 2026-10-09T22:00:32Z
  • Audio duration: PT2M19S

Transcript excerpt

This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.

Good morning, it's Friday, October 9th, 2026.

The lead today is trust in your numbers. Three linked fixes change how Headroom counts input and savings so they finally reconcile with the provider console.

First, billed input. Pull request 4052 found every streamed Claude turn was reporting Headroom's own tokenizer estimate, not Anthropic's billed count. Since Claude Code always streams, that was effectively all Claude Code traffic, undercounting by 37 percent in live testing. The proxy now records the provider's…

Second, a security push for SOC 2. Pull request 4045 resolves 23 real CodeQL alerts: error replies no longer echo internal exception text, benchmark logs redact model arguments, workflows are read-only, and Windows installer scripts avoid shell reinterpretation. Companion pull request 4047 fixes a test that printed…

Third, agent reliability. Pull request 4034 fixes parallel calls where the internal retrieve tool plus client tools were handed back together and the client could never resolve them. Mixed turns are now served internally and the model decides again. Pull request 4059 routes unauthenticated hello probes to Anthropic…

What's next: watch open proposals to bound the…

Nearby episodes from Headroom Daily

  1. Silent Failures Get Loud
  2. Research Accuracy Push and Proxy Reliability
  3. The Great Cleanup and Silent Failure Fix
  4. Making Savings Numbers Trustworthy
  5. Proxy Cost Fixes, Security Hardening, and Hang Prevention
  6. Compression Gets Guardrails, Proxy Stops Futile Retries
  7. Proxy Lockdown and Honest Savings
  8. Proxy Trust Fixes and New CLI integrations