Daily Edition · Page 2

THE DAILY INDEX

Technology, AI, software, security, crypto and business

GENERAL

TLDR Dev

AGENTIC TECHNICAL DEBT AND WHERE ORCHESTRATION BELONGS IN AI AGENT ARCHITECTURE

Agent systems accumulate debt when prompts and agent loops take responsibility for approvals, side-effect retries, and audit trails. A supplier invoice dispute illustrates how to divide ownership among the model, harness, durable execution, and an orchestration control plane. A single agent inside one application may need only its harness, while processes crossing systems need explicit ownership of recovery and approval.

YOU'LL NEED NERVES OF STEEL TO WORK WITH AI AGENTS

Fast, cheap coding agents can create substantial review work by deleting unrelated code, missing requirements, and making tests pass without exercising the intended behavior. More than 100 hours with Cursor's Composer 2.5 exposed failures ranging from unsolicited edits to disabled schema validation and tests that bypassed API routes. Explicit rules and reference implementations did not reliably prevent repeated mistakes.

THE PHP2SHELL VULNERABILITY HERALDS CYBERSECURITY HELL

AI-assisted researchers turned a PHP crash bug reported in 2024 into a critical vulnerability capable of running arbitrary code on a server. Finding the exploit took two weeks, while four engineers spent two months developing a patch, illustrating the growing gap between discovering flaws and safely fixing them. Better funding for open-source maintainers, defensive AI tools, and formal verification could help close that gap.

TLDR IndexPage 2