Anthropic now requires an expiration decision at API key creation time. The Admin API exposes expires_at on every key. If your team has never-expiring keys in production, the July 8 change resets your governance baseline.
OpenAI now returns moderation scores for both input and generated output inside the same Responses API call. For teams routing across multiple providers, this eliminates the separate safety round-trip and changes how you architect content governance at the gateway layer.
Anthropic analyzed 832 malicious accounts across 14 MITRE ATT&CK tactics and 13,873 attack actions. The new ARiES risk framework redefines how API operators should detect, govern, and rate-limit agentic threats — starting with the interface your users connect through.
