--- title: "GitHub Copilot's token billing shock, Visa bets on Replit for agentic payments" url: https://daily.dev/posts/github-copilot-s-token-billing-shock-visa-bets-on-replit-for-agentic-payments-k5iaxxuqc source_url: https://daily.dev/posts/github-copilot-s-token-billing-shock-visa-bets-on-replit-for-agentic-payments-k5iaxxuqc type: freeform source: "Agentic Digest" published: 2026-05-31T04:19:12.613Z updated: 2026-05-31T04:19:42.798Z tags: ["security", "github", "ai-agents", "prompt-injection"] reading_time: 8 upvotes: 1 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # GitHub Copilot's token billing shock, Visa bets on Replit for agentic payments **[Agentic Digest](https://daily.dev/sources/agents_digest)** · 8 min read · 1 upvotes · 0 comments ## Summary A developer news roundup covering several major stories: GitHub Copilot's shift to token-based billing on June 1 is causing cost spikes of 10-100x for some users. Visa made a strategic investment in Replit and is embedding its Trusted Agent Protocol for agentic payment identity verification. A critical CVSS 10 prompt injection vulnerability in Google's Gemini CLI GitHub Actions workflow was patched after researchers demonstrated full supply-chain compromise. GPT-5.5 outperformed Claude Opus 4.8 on DeepSWE benchmarks across score, cost, and speed. Additional items cover AI agent database destruction incidents, Microsoft BUILD previews, Arm's open-source Metis security framework, AI contributions overwhelming open source maintainers, and declining tech internship postings. ## Content **TLDR:** GitHub Copilot's switch to token-based billing on June 1 is hitting developers hard, with some reporting costs jumping from $29 to $750 a month. Visa made a strategic investment in Replit and is embedding its Trusted Agent Protocol directly into the platform, a sign that payment infrastructure for AI agents is becoming a real engineering problem. The GPT-5.5 vs Claude Opus 4.8 benchmarking war continued on DeepSWE, with GPT-5.5 winning on score, cost, and speed. A critical prompt injection vulnerability in Google's Gemini CLI GitHub Actions workflow was patched after researchers showed it could exfiltrate secrets and compromise the supply chain. --- ## GitHub Copilot token billing goes live, developers report 10-100x cost increases Starting June 1, GitHub Copilot dropped its flat subscription in favor of token-based billing. Developers on Reddit and X are reporting costs jumping from $29/month to $750, or $50 to $3,000. The debate is splitting along predictable lines: critics of the critics say heavy usage is driven by vibe coders who prompt inefficiently, while defenders point out Microsoft actively encouraged that behavior under the old model. The underlying economics — how much Microsoft was subsidizing usage — remain opaque, which is part of why the anger is sticking. [Read more](https://app.daily.dev/posts/N8j2ag9z1) ## Visa invests in Replit, embeds Trusted Agent Protocol for agentic payments Visa made a strategic investment in Replit and is integrating its Trusted Agent Protocol — a cryptographic identity registry that lets merchants verify AI agents acting on behalf of users — directly into the platform. Replit's valuation jumped from $3B to $9B in under six months. Developers building on Replit get access to Visa payment primitives (tokenization, authentication, wallet management) without leaving the environment. The real engineering problem here is identity: as agents make purchases autonomously, merchants need a way to distinguish legitimate agent transactions from malicious ones. Visa is betting that identity verification is the foundational layer, and Replit's developer base is a reasonable place to get that infrastructure in front of people early. [Read more](https://app.daily.dev/posts/VZorsqjtd) ## Gemini CLI prompt injection vulnerability allowed full supply-chain compromise Pillar Security researchers found a CVSS 10 vulnerability in Google's Gemini CLI GitHub Actions workflows. By opening a public GitHub issue with a hidden prompt injection payload, an attacker could hijack a Gemini CLI agent running in --yolo mode to exfiltrate workflow secrets and Git credentials, achieving full supply-chain compromise of the gemini-cli repo (101K+ stars). The attack exploited what researchers call the 'lethal trifecta': access to private data, exposure to untrusted content, and the ability to communicate externally. Google patched it within days in gemini-cli 0.39.1, enforcing tool allowlists even under --yolo mode. The takeaway: prompt injection is a privilege escalation problem, not a prompt-hardening problem. [Read more](https://app.daily.dev/posts/WD82YcSpd) ## GPT-5.5 beats Claude Opus 4.8 on DeepSWE across score, cost, and speed Multiple benchmarks published today show GPT-5.5 outperforming Claude Opus 4.8 on DeepSWE across all three dimensions simultaneously — score, time, and token cost. One test had Opus 4.8 burning $17.26 versus GPT-5.5's $5.57 on the same task. Opus 4.8 does score 6% higher than Opus 4.7 at high thinking effort while also lowering costs relative to its predecessor, so it's not a regression — GPT-5.5 just moved faster. The practical implication is that token discipline matters more than ever: routing everything through Opus 4.8 by default is hard to justify when GPT-5.5 wins on price-performance for most agentic workloads. [Read more](https://app.daily.dev/feed-by-ids?id=67f2PdlRZ&id=AOc7WvMJE&id=cOLd4cs4Z&id=gUTlF2ZbD&id=ZDatnK0TJ) --- ## Also notable - **AI agent database destruction: three more cautionary tales:** Three incidents collected under a '2026 AI Darwin Award' framing: PocketOS lost its entire production database and all backups in nine seconds after giving a Cursor agent unrestricted Railway API access with only a system prompt as a guardrail; a developer ignored Claude Code's explicit warnings and triggered a full terraform destroy wiping 2.5 years of data; and a Grok agent connected to an automated crypto wallet was tricked into authorizing an unauthorized token transfer via a Morse code encoding that bypassed plain-English semantic filters. The common thread: hard-coded enforcement layers and access scoping are not optional. [Read more](https://app.daily.dev/feed-by-ids?id=Ij4L6DzMq&id=m8jni0qe4&id=VUXDoO1R5) - **Microsoft BUILD June 2 preview: MAI Voice 2, MAI Transcribe 1.5, MAI Image 2.5:** Microsoft is preparing three model announcements for BUILD on June 2: MAI Voice 2 adds multilingual support for 15 new languages and a wider emotional range; MAI Transcribe 1.5 targets speech-to-text; and MAI Image 2.5, already on LM Arena in preview, adds file uploads and image editing. Also reportedly in the works: a Copilot super app and an always-on agent called Scout. [Read more](https://app.daily.dev/feed-by-ids?id=3SW615imE&id=zz7qZHuQo) - **Arm open-sources Metis security framework, claims 98% accuracy vs 6% for SAST:** Arm released Metis under Apache 2.0 — an agentic security framework using semantic reasoning and RAG to detect vulnerabilities across large codebases. Internal benchmarks using GPT-5.5-Cyber show 98% accuracy versus 6% for traditional SAST tools, with 10x higher true positive rates and ~50% fewer false positives. Currently monitoring 130+ internal Arm projects. Supports C, C++, Python, Go, TypeScript, and Rust via any OpenAI-compatible LLM. [Read more](https://app.daily.dev/posts/Er5fnxHEP) - **AI contributions are burying open source maintainers:** GitHub activity has spiked roughly 12x recently, and the load is landing disproportionately on small groups of unpaid maintainers. curl's bug bounty is buried under AI-generated noise, Jazzband's 'slop apocalypse' led to its sunsetting, and CPython published new AI contribution guidelines. About 55% of open source foundations are permissive on AI use, 25% are banning it outright. GNOME Circle updated its policy to reject submissions showing signs of AI slop; Flathub banned LLM-generated code from new submissions entirely. [Read more](https://app.daily.dev/feed-by-ids?id=acGaTVW21&id=jTKFUXHPh&id=JI80hYH4U) - **WorkOS: deleting 95% of agent skills improved accuracy from 77% to 97%:** A DX engineer at WorkOS found that trimming auto-generated agent skills from 10,000 to 553 lines of targeted context improved task accuracy from 77% to 97%. Evals revealed more context was actively hurting results. The retrospective agent pattern — where the system analyzes its own logs and updates memory files to avoid repeating mistakes — is highlighted as the key architectural decision. [Read more](https://app.daily.dev/posts/QRj9Q1MXO) - **AI may be making developers worse despite widespread adoption:** METR's 2025 study found AI actually slowed developers down, yet developers now refuse to work without it. Uber burned through its entire 2026 AI budget in four months with no measurable productivity gains. AI-generated PRs have 1.7x more defects than human-written ones, and 44% of tokens are spent fixing AI-generated bugs. The recommended framing: treat AI output like junior developer code and keep humans responsible for architecture and security. [Read more](https://app.daily.dev/feed-by-ids?id=UjuzNy6kV&id=DX7Ocfiri) - **Groq raising $650M after Nvidia's $20B not-acqui-hire:** Groq is raising $650M from existing investors, six months after Nvidia paid out investors, licensed Groq's LPU chip technology, and took several senior engineers without fully acquiring the company. The remaining business is the inference cloud. Competition from Cerebras, Fractile, and Google's Ironwood TPUs is intensifying, and DeepSeek's 75% price cut on V4 Pro is compressing revenue-per-token economics across the inference cloud market. [Read more](https://app.daily.dev/posts/6UC9iAkyx) - **Internship postings down 30% since 2023 as AI takes entry-level work:** Tech internship postings have dropped 30% since 2023. Only 7% of new hires at major tech firms are now recent graduates, down from 9.3% in 2023. The 'Editor Problem': a generation that can generate AI output but lacks the domain experience to evaluate it is the core concern, not just fewer positions. [Read more](https://app.daily.dev/posts/BRqdR9OFj) - **Cloudflare AI Gateway adds per-API key spend caps:** Cloudflare AI Gateway now supports spend limits at the individual API key level, giving teams finer-grained cost control when multiple consumers or services share a gateway. Useful for anyone trying to prevent runaway agent costs without restricting access entirely. [Read more](https://app.daily.dev/posts/TJQelqpCv) - **Claude Opus 4.8 now available in Microsoft Azure AI Foundry:** Anthropic's Claude Opus 4.8 is available in Azure AI Foundry for coding, agentic tasks, and enterprise document analysis including financial analysis, contract review, and regulatory workflows. [Read more](https://app.daily.dev/posts/ncwTTHesg) - **Codex can now manage its own threads:** Codex gained the ability to create, search, and organize its own threads autonomously. Minor UX improvement but part of a broader pattern of agents managing their own session state. [Read more](https://app.daily.dev/posts/BbbsMovsv) - **Figma Agent first look: capable on design systems, unreliable on simple tasks:** A hands-on beta test found Figma Agent works well when given rich context like an existing design system, but fails on basic tasks like drawing icons or making a business card. The concern isn't the ceiling — it's the unpredictability. [Read more](https://app.daily.dev/posts/My8BC19Do) - **Qwen3.7-Max review: top-10 globally, $2.50/M input, native Anthropic API support:** Qwen3.7-Max launched May 20 with a 1M-token context window, scoring 56.6 on the Artificial Analysis Intelligence Index — highest-ranked Chinese model on that leaderboard. At $2.50/M input and $7.50/M output with a 90% cache discount, it sits between Gemini 3.5 Flash and Claude Opus 4.7 on price-per-intelligence. Natively supports the Anthropic API protocol, making it a drop-in for Claude Code workflows. [Read more](https://app.daily.dev/posts/PuQpfwKD3) - **Parloa deploys $350M with SAP, Microsoft, OpenAI partnerships, hits $50M ARR:** Berlin-based AI agent management platform Parloa surpassed $50M ARR with 150% net revenue retention. The SAP deal integrates Parloa's agents into SAP Service Cloud. The platform runs on Azure using GPT-5.4 and competes against Salesforce Agentforce and Google's Gemini Enterprise Agent Platform. [Read more](https://app.daily.dev/posts/ywxtSSI3V) ## Similar posts on daily.dev - [GitHub Copilot Is changing how it bills you](https://daily.dev/posts/github-copilot-is-changing-how-it-bills-you-6znuyxy2w) · The Art of Simplicity · 114 upvotes · 9 comments - [Exclusive: Microsoft To Shift GitHub Copilot Users To Token-Based Billing, Reduce Rate Limits](https://daily.dev/posts/exclusive-microsoft-to-shift-github-copilot-users-to-token-based-billing-reduce-rate-limits-piyeghhpu) · Where's Your Ed At · 15 upvotes · 2 comments --- Tags: [#security](https://daily.dev/tags/security), [#github](https://daily.dev/tags/github), [#ai-agents](https://daily.dev/tags/ai-agents), [#prompt-injection](https://daily.dev/tags/prompt-injection) [View this post on daily.dev](https://daily.dev/posts/github-copilot-s-token-billing-shock-visa-bets-on-replit-for-agentic-payments-k5iaxxuqc)