TLDR DEV 2026-10-23

BUILDING AGENTS: WHEN TO FOLD SUBAGENTS INTO YOUR MAIN AGENT LOOP

Folding routers, planners, and domain specialists into a single agent loop can reduce lossy handoffs, cost, and latency when skills and tool search load context on demand. Anthropic describes migration patterns and evaluations for deciding which boundaries to remove. Separate agents still help with independent parallel work, verification, permission boundaries, and measurable context overload.

ANTHROPIC BUILDS ITS OWN SOURCE CONTROL SYSTEM

Anthropic replaced Git in its monorepo with Scion as daily merges grew from about 2,500 to more than 30,000 and CI reached 25 million checkouts a day. Its Rust client and server store changesets in Spanner and blobs in Google Cloud Storage, with a separate review system replacing GitHub's workflow.

WE BUILT AN AI AGENT TO INVESTIGATE PRODUCTION ISSUES

Stream's incident agent gathers logs, metrics, database results, and code references, then has a fresh session challenge its conclusions before posting findings. Read-only tools, isolated credentials, restricted networking, and output filters enforce its limits outside the prompt. Engineers approve every fix, while 22 evaluation cases test real incidents and past mistakes.

IS YOUR ORGANIZATION MESSING UP AI ADOPTION?

AI adoption needs changes to incentives, working practices, and support alongside software licenses. Staff need role-specific training, time to experiment, and a reason to share in productivity gains without fearing punishment for mistakes. Shadow AI can reveal gaps in official tools that blanket restrictions only push out of sight.

DOCKER IS WEIRD

Building a container runtime exposes Docker as a collection of Linux mechanisms, including namespaces, cgroups, and filesystem isolation around ordinary processes. This walkthrough explains why Go's multithreaded runtime complicates container setup and why rootless networking often requires extra work in userspace.

SPEEDING UP CODE REVIEW WITH SMALL-CHANGE

Imprint is testing a faster review path for narrowly scoped changes as rising PR volume pushes median review time from 33 to 77 minutes. Eligibility depends on a CI-controlled check covering change size, service experience, scope, and automated review findings, with shared libraries and sensitive paths excluded. Errors are treated as failures to improve in the verification system.

→ Explore the APIs

→ See domain pricing

TANSTACK AI 1.0: STILL YOUR AI, STILL YOUR WAY

TanStack AI brings 76 packages to stable APIs for chat, tools, media, MCP, persistence, and sandboxes while preserving provider and framework choice. Upgrade all client and server packages together and replace APIs deprecated in 0.x. The newly introduced agent harness remains experimental.

JAILBREAKING THE SWITCH 2

ns2jb is a software-only, tethered jailbreak demonstrated on Switch 2 firmware 23.0.1. It enables native code execution for homebrew and game modifications.

NVIDIA OPENSHELL

OpenShell runs agents in policy-controlled sandboxes with kernel-enforced file and network limits, credential injection, and formal checks on proposed access changes.

LLMS ARE MAKING FORMAL SOFTWARE VERIFICATION FEASIBLE AT A MUCH LARGER SCALE

Claude produced machine-checked proofs for 239 fuzz-test entry points across 123 open-source libraries, turning existing tests into specifications over compiled RISC-V code. The guarantees cover inputs below 64 MB under a single-threaded Linux model with fixed memory limits, so they establish specific security properties rather than complete program correctness.

HOW WE CUT GITLAB DUO CODE REVIEW'S COST BY 98%

AI21 combined a switch to DeepSeek V4 Flash with context compaction to cut GitLab Duo Code Review's estimated token cost from $0.589 to $0.0135 per pull request on a public benchmark, with F1 rising from 46.4% to 47.2%. Compaction made oversized reviews fit the deployment's context window, removing expensive fallbacks to Sonnet.

WHAT THE HECK IS THE PUBLIC SUFFIX LIST?

The Public Suffix List records the boundaries browsers and password managers need to distinguish independently controlled sites on shared domains. Its rules prevent cookies and saved credentials from crossing tenant boundaries, but growing demand leaves volunteers reviewing increasingly complex submissions. The article explains why DNS has not replaced the list and why using it for unrelated controls can create problems.

to production in a new survey. READ THE REPORT

STATE OF HTML 2026

The State of HTML survey tracks awareness and use of native browser features.

PURE UI IN THE AGENTIC ERA

Making a screen's relevant state explicit lets people and agents inspect combinations of roles, plans, billing states, and feature flags before merging a change.

INTRODUCING 1PASSWORD FOR AGENTS

1Password lets users approve sign-ins for supported agents and fills credentials into destination sites without exposing passwords to the model.

TYPEUI MICRO INTERACTIONS

TypeUI offers 113 interactive examples for buttons, forms, modals, navigation, and other UI patterns.