No. 004 No major launch

REA 6.4 brings reverse engineering to coding agents; Copilot for JetBrains gets admin controls

Window · 2026.10.10 06:44 – 10.12 06:44 KST

Here's today's news. There were no major launches this time, so we picked practical updates developers can try today. It was a weekend, and none of OpenAI, Google or Anthropic shipped a new model or product inside the 48-hour window.

Microsoft-Decision-1 (Oct 9, US time) and Codex's Dots and Composer predictions (Oct 9) got plenty of attention, but both turned out to land just before the window, so they're left out of this issue. You'll find them in the research log.

Google AI Edge Foresight, an offline Mac meeting-notes app released Oct 8, belonged in our Oct 9 issue. It slipped through, so we've added it here as a late catch.

At a glance

Today's items

01 morluto (open source) Open sourceAgentsDev tools

REA 6.4: a reverse-engineering MCP for coding agents adds Android and JEB support

Concept illustration (generated)

What is it?

REA is an MIT-licensed tool that plugs into coding agents such as Claude Code, Codex, Cursor and Gemini CLI as an MCP server (the standard way agents call external tools). Once connected, agents can analyze native binaries, Electron apps, .NET assemblies and websites without source code. A single command, npx rea-agents setup, registers it with your agent, and it drives existing disassemblers (tools that turn machine code into readable code) like Hopper, Ghidra or IDA. Version 6.4 adds Android device inspection and APK extraction over ADB, JEB decompiler integration, and summary views for very large analyses.

Why does it matter?

It widens what you can hand to an agent: security reviews, making sense of legacy binaries, or digging into undocumented internal tools. Every conclusion comes with its evidence and limits, so results are easier to check. Because it's built to inspect other people's apps, check license terms and local law on reverse engineering before you point it at anything.

Maturity

GAIt's a stable release, but the project allows breaking changes in every minor version, and output formats already changed in 6.2 and 6.3. Pin a version and read the migration guide before upgrading. The star surge shows it's trending. It says nothing about quality.

How to track it

  • Breaking changes in the next version: watch the GitHub morluto/rea repo (Watch → Releases) and read the release notes and migration guide before upgrading.
  • Real-world reviews, not stars: look for write-ups from security folks or GeekNews readers who have used it on actual analyses.
  • Stability of the Android and JEB integrations: follow how ADB and JEB bug reports are handled in the repo's Issues tab.

Copilot for JetBrains: admin-set default models, one-click fixes from diagnostics, and an off switch for MCP autostart

Concept illustration (generated)

What is it?

This is an update to the GitHub Copilot plugin for JetBrains IDEs. Enterprise admins can now use managed settings to pick the default agent model for new conversations. A Fix action in the diagnostics menu opens inline chat and repairs the issue in agent mode. A new setting stops Copilot and Claude MCP servers from starting automatically, and there are smaller touches too, like copying and editing your own chat messages.

Why does it matter?

Teams that want to keep cost and quality consistent need control over the default model, and JetBrains users now have that lever too. Turning off MCP autostart makes it easier to keep unreviewed tools from spinning up on their own. Support for JetBrains IDE 2025.1 has ended, so check which IDE versions your org runs.

Maturity

GAIt looks like a routine plugin release, but the changelog gives neither a GA/preview label nor a plugin version number. Managed default models only apply where enterprise managed settings are in place.

How to track it

  • GA or preview status and the plugin version: check the Copilot for JetBrains posts on the GitHub Changelog and the JetBrains Marketplace plugin page.
  • Docs for managed default models: enterprise admins should watch for updates to the Copilot admin settings guide in GitHub Docs.
  • Changes to IDE support: watch the GitHub Changelog for the next end-of-support notice.

[Late catch] Google AI Edge Foresight: an offline meeting-notes app that runs on your Mac

Concept illustration (generated)

What is it?

A Mac meeting-notes app from Google's AI Edge team. It transcribes mic and system audio on the device (speech-to-text) and uses the transcript to turn your rough shorthand into proper notes. Point it at PDFs, Google Docs or Office files and it builds a local knowledge base. When questions come up mid-meeting, it shows answers with citations. Retrieval runs on EmbeddingGemma 2 (a 740M-parameter embedding model that puts text, images, video and audio in one vector space), and chat runs on Gemma 4.

Why does it matter?

It's Google's reference build for bundling on-device speech-to-text with RAG (pulling your own documents into answers) in one app. That matters for teams whose security rules rule out cloud note-takers. Its offline, local-first design sets it apart from cloud services like Granola. If you're building on-device voice or search features, it's a useful benchmark for what the Gemma family can do.

Maturity

PreviewIt reads as an experimental Google app, so we've marked it preview. The official page doesn't list supported languages, the Gemma 4 model size or minimum specs, and the claim that everything runs on-device is the vendor'sVendor claim. It only runs on Apple Silicon Macs.

How to track it

  • Missing details: check the official product page for supported languages, the Gemma 4 model size and minimum specs.
  • A wider release or other platforms: follow the Google AI Edge team member on X and the official page.
  • Testing the on-device claim: look for coverage such as TechCrunch's, or user reports that inspect the app's network traffic.

Bottom line

Adopt now:Security and QA teams: pin a version of REA and try it on one in-house binary first, after a quick legal check.
Watch:Watch whether decision-only models like Microsoft-Decision-1 actually cut routing costs in agent pipelines.

Research log

Sources checked (✓ checked / – nothing relevant / ✕ could not access)
  • ✓Claude platform release notes — Nothing new after Oct 9
  • ✓Anthropic news — Latest post Oct 8 (usage policy update); nothing in the window
  • ✓GitHub anthropics/claude-code releases — Latest v2.1.296 (Oct 9, covered last issue)
  • ✓OpenAI API changelog — Latest Oct 8 Ultrafast (covered previously)
  • ✓OpenAI developer community '28 days' thread — Day 5 Dots and Composer predictions posted Oct 9 19:46 UTC, outside the window; Day 6 (Oct 10) was only a usage reset
  • ✓developers.openai.com/blog — Latest posts are from September
  • ✓GitHub releases: openai/codex, github/copilot-cli, google-gemini/gemini-cli — Only alpha, prerelease or nightly builds in the window
  • ✓Gemini API changelog — Latest Oct 8 (deprecations); nothing in the window
  • ✓commandline.microsoft.com — Microsoft-Decision-1 (posted Oct 9) confirmed; coverage appeared by 15:21 CT Oct 9, before the window opened (21:44 UTC), so excluded
  • ✓GitHub Changelog — Oct 10 Copilot for JetBrains selected
  • ✓GitHub Trending (daily) — morluto/rea at 25,585 stars today; 6.4.0 release (Oct 11) selected
  • ✓Hugging Face blog and model lists — llama.cpp decision-models post is from Oct 2; Qwen-Image-2.1-Turbo at Oct 9 04:50 UTC, outside the window
  • ✓GeekNews — REA (14 points) confirmed; Vercel eve dates to June, excluded
  • ✓aiweekly.co (secondary) — Report on Anthropic cutting internal agent evals off the live internet (TechCrunch, Oct 9) is policy news and outside the window
  • ✓AI Times (Korea) — No new model or tool stories found in the window
  • ✕openai.com/news, x.ai/news — Blocked (403)
  • ✕blog.google, deepmind.google, ai.meta.com, mistral.ai, AWS and NVIDIA blogs — Could not read dates (likely client-rendered); checked via WebSearch instead
  • –Apple ML Research, TechCrunch, artificialanalysis.ai — Not checked directly this run
  • ✓developers.google.com/edge/foresight — Late catch from a reader tip; page body sits in an iframe, read via the frame URL. Missed in the Oct 9 issue

Generated: