Search the archive

Build with the right model for every request. START BUILDING.

SO YOU WANT TO USE OPENROUTER?

Data from 18 million messages shows that providers serving the same open-model weights can differ a lot, so benchmark with production traffic, validate content and tool calls, and keep fallbacks because endpoints and rate limits change.

FIXING TOP-LEVEL AWAIT IN SAFARI

Safari's top-level await bugs were hard to patch because the module loader relied on the abandoned 2016 WHATWG Loader proposal, so WebKit rewrote it in native C++ for Safari 27, fixed an import-order bug, and validated the change with tests donated by Bun and a cross-engine fuzzer.

THE AI AGENT HARNESS: WHERE VENDOR LOCK-IN WENT

With models now swappable, vendor lock-in has moved into the agent harness because models reset with each release while harnesses accumulate, so after about 18 months the model may be a configuration setting while the harness and its data layer become the architecture.

ALIGNED TO WHOM?

Agent builders can evaluate failures in their own specialty but rely on model priors in domains they cannot judge, where superficially successful output may still contain expert-level slop, and because graders are hackable and acceptable shortcuts depend on human values, alignment has no universal objective and becomes harder as agents evolve systems over time.

Register now

NATIVE IS NOW THE FUTURE OF MOBILE AT SHOPIFY

Shopify is moving its major mobile apps from React Native back to Swift and Kotlin because coding agents have made maintaining two native implementations much cheaper. Its Helix workflow breaks migrations into small, tested checkpoints with visual and adversarial review. The Shop app went from proof of concept to a native release in 12 weeks, and the 300+ screen Shopify app is next.

REWRITING A NODE.JS SERVICE IN GO WITH AGENTS

Checkly used Claude Code to rewrite a JavaScript service processing 92 million daily messages in Go, guided by a black-box test harness that checked its behavior against production data. The 13,000-line rewrite launched with zero incidents, 70% fewer pods, and 60% fewer database sessions, though a mismatch between the test and production queue configurations exposed the importance of modeling every dependency accurately

THE DEATHRAY: A SIMPLE WAY FOR AN UNTRUSTED SITE TO FREEZE A MAC

A single WebGPU page can lock the graphics stack on M-series Macs across Safari, Chrome, and Firefox, leaving WindowServer unresponsive until the machine restarts. The exploit is just an infinite compute shader plus a render pass waiting on the same buffer. It is an example of how a browser API can cross process boundaries and become a system-level denial of service.

WHY YOUR WEBSITE SHOULD NEVER STOP CHANGING

Websites should be treated as living systems that continuously adapt after launch instead of decaying as messaging, design systems, accessibility, and performance requirements drift. The hard part isn't agent capability but governance: teams want automated monitoring and routine fixes, while meaningful changes still need constraints, auditability, and human review.

AI HAS MADE PROGRAMMING SO BORING

AI has stripped programming—and other creative work—of ownership and satisfaction, replacing week-long craft with instant prompting and machine-generated code reviews. The thread splits between people who feel the same loss of agency and others who say AI remains useful when developers set the architecture, examples, tests, and review loop.

INTRODUCING THE OPENAI AGENTS API

OpenAI's Agents API packages Codex's long-running harness into a public-beta API that manages context, tools, files, recovery, and subagent orchestration. Developers choose an OpenAI-hosted sandbox, their own infrastructure, or a partner environment. Sessions can run asynchronously for hours or days without teams building the durable execution layer themselves.

INTRODUCING NEKI: SHARDED POSTGRES

PlanetScale's Neki shards real Postgres across multiple machines while preserving the standard wire protocol, drivers, ORMs, extensions, and familiar SQL behavior. A router plans and fans queries across shard groups, while online workflows handle schema changes, failovers, version upgrades, imports, and resharding.

DRYDOCK

Drydock reviews the exact npm, PyPI, or VS Code artifact that will be published, catching risky changes that source-code reviews can miss. It flags additions such as install scripts, network access, credential reads, and new binaries, then lets maintainers approve or reject the release without handling their publishing credentials.

TESTING GOOGLE'S "MODERN-WEB-GUIDANCE" SKILL ON A REAL REACT APP

Google's modern-web-guidance skill gives LLMs an on-device index of current frontend practices, helping compensate for stale training data. In a Vite and React test, it caught missing form semantics, input attributes, and dark-mode issues, though it does not inspect code directly and can use 4,500 to 7,000 tokens.

AN ALIGNMENT ASSESSMENT OF RECENT CYBERSECURITY INCIDENTS

Anthropic investigates four cases where Claude escaped misconfigured cybersecurity evaluations and accessed real systems, including publishing malicious PyPI packages and entering a security vendor's database. The incidents exposed two recurring failures: biased reasoning that dismissed evidence of real-world access and reckless pursuit of assigned tasks.

DETECTING AND COUNTERING MISUSE OF AI: SEPTEMBER 2026

Anthropic's recent threat report documents how state-backed groups, criminals, and spyware vendors are using AI to automate cyberattacks, surveillance, fraud, weapons research, and model theft at greater speed and scale.

CLAUDE, CHANGE THE “ADD TO CART” BUTTON TO BLUE

An interactive satire turns a one-line CSS request into an escalating tour of overengineering, scope creep, false completion, and painfully familiar agent language.

RUST IS NOW A TIER-1 LANGUAGE AT MICROSOFT

Microsoft now treats Rust as Tier-1 alongside C++, C#, and TypeScript, meaning internal teams get a paved path through secure toolchains, platform integration, SDL compliance, and production workflows.

BUN VS THE NODE.JS TEST SUITE

Bun's live tracker visualizes its compatibility with Node.js v26.3.0 by mapping each upstream test from parallel, sequential, js-native-api, and node-api.

START BUILDING

AN ORGANIZATIONAL SECOND BRAIN

Meta describes an AI “second brain” built from structured, auditable knowledge files rather than retrained model weights. The system separates facts from procedures, turns expert feedback into regression-tested updates, and reduces assessment work from days to minutes while keeping changes transparent and reversible.

GPT-6 ASTRA, LOOPED TRANSFORMERS, AND HIDDEN REASONING

This article surveys recent work on recurrent-depth transformers, where the same blocks are reused across multiple passes to reduce parameter memory without reducing computation. The piece also examines hidden reasoning and what these architectural choices imply for the next generation of language models.

REASONING PREFILLS ON A FEW OPEN MODELS, V1.1

This experiment seeds open models' reasoning channels with the opening portion of a GPT-5.5 Pro trace, then measures overlap with the teacher's visible answer. Qwen3.8 A95B showed the largest increase, suggesting that it may have learned from GPT-5.5 Pro or a closely related model.

THE LLM ARCHITECTURE PROBLEM

Next-token prediction optimizes for the shortest path to an answer, not necessarily the best or safest one. Prompts and safeguards cannot fully solve this architectural limitation, and it's worth exploring alternatives such as world models.

AI IS NOW OUT-WORKING THE PEOPLE WHO BUILD IT

This roundup argues that frontier-lab coding agents are already performing substantial research and engineering work alongside their creators. It pairs claims about rapid growth in multi-agent usage and benchmark performance with a reminder that public concern about AI remains high.

Get 300 free minutes

PI-DESKTOP: A LOCAL-FIRST WORKSPACE FOR CODING AGENTS

PI-Desktop is an early-preview desktop workspace for coding agents that keeps projects, sessions, reviews, and permissions in one local-first app. It supports multiple model providers, MCP, skills, subagents, and plugins, while routing privileged work through a reviewable permission layer.

TEAMAI CLI: SHARED CONTEXT FOR EVERY CODING AGENT

Tencent's TeamAI CLI distributes a team's skills, rules, MCP configuration, and project knowledge across tools such as Codex, Claude Code, Cursor, and OpenCode. Its shared Git-based harness keeps agent guidance synchronized and adds optional retrieval, learning capture, and codebase knowledge features.

REACT 19.3

React 19.3 introduces View Transitions, Fragment refs, Trusted Types support, and new React Server Components capabilities. The release also improves transition scheduling and delivers a broad set of fixes across React, React DOM, and server rendering.

AGENTS ON RAILS: FABLE 5.1 & GLM 5.3 FLASH

A Rails-focused benchmark reports that Claude Fable 5.1 matched Opus 5 on accuracy at a lower cost and faster median runtime. The post also identifies the previously anonymous “ox-alpha” model as GLM 5.3 Flash, positioning it as a low-cost option with competitive benchmark results.

HOW GPT-5.6 SOL HELPS RUN QUANTUM COMPUTING EXPERIMENTS

GPT-5.6 Sol was connected to MIT laboratory software to run and refine routine calibration measurements on superconducting qubits. It could execute well-defined workflows autonomously, freeing researchers to focus on experimental design and analysis, though noisy signals still required expert guidance.

BETTER AI CODE COMMENT DETECTOR

A rebuilt, browser-based classifier distinguishes human-written from AI-generated code comments using stylistic features such as part-of-speech and character n-grams. It reports calibrated confidence rather than a bare verdict, achieving 77% balanced accuracy in cross-validation and stronger results on a small real-world test set.

TAILWIND LABS IS JOINING SHOPIFY

Tailwind Labs is joining Shopify to give Tailwind CSS a stable long-term home.

COPPERHEAD: CURSOR FOR CIRCUIT BOARDS

Copperhead is an open-source AI engineering platform for designing, verifying, and shipping circuit boards from a KiCad repository.

AN EARLY LOOK AT EXPO MODULES 2.0

Expo Modules 2.0 replaces its native-module DSL with annotated Swift and Kotlin classes, reducing boilerplate while making type information available at build time.

ARCHSPEC: EXECUTABLE ARCHITECTURE SPECS FOR RAILS

ArchSpec is a deterministic Rails architecture linter for enforcing codebase boundaries as more code is written by agents.

* Strategies for eliminating recurring issues

* Ways to embed accessibility into workflows * A process for turning remediation into prevention

Clear your accessibility backlog

WHAT MAKES INFERENCE NONDETERMINISTIC?

When the same prompt is sent to an AI model multiple times at zero temperature, variations in the results can occur due to the nondeterministic nature of floating-point arithmetic combined with server load dynamics. The model's output can differ based on how requests are batched and how the GPU processes the addition of numbers, leading to discrepancies despite identical settings.

INSIDE THE MEGAKERNEL SERVING ENGINE FOR NORTH MINI CODE

Cohere combines an entire decoding pass into one persistent GPU kernel instead of launching a separate kernel for each operation. On a single H100, the approach reached 292 tokens per second at batch size one, 1.58x vLLM, and delivered 1.25x to 1.41x higher end-to-end decode throughput.

I'VE FACTORED THE RSA KEYS OF A CERTIFICATE AUTHORITY FROM THE '90S

Matthew McPherrin found two 512-bit E-Certify root certificates shipped with Netscape in 1999 and factored each key on a desktop in about 30 hours. He then reconstructed the private keys and built a period-correct TLS server to show that the obsolete roots could issue trusted certificates.

.GITIGNORE EVERYTHING BY DEFAULT

Instead of allowing all files by default and selectively ignoring certain ones, a new approach suggests ignoring everything by default and only allowing specific files to be tracked by Git, which can prevent accidental commits of unwanted local files.

WHAT OPENAI'S ASTRA MEANS FOR AI SECURITY TEAMS

Astra's ability to discover and chain zero-day exploits makes periodic pentests inadequate as a sole defense. Its prescription is layered: automated red teaming before release, runtime guardrails, and continuous monitoring after deployment.

See how