Sponsored
Enterprise AI prototypes stall before production when developer-friendly infrastructure cannot meet requirements for security, reliability, data sovereignty, and deployment model. pgEdge Starfleet closes this gap. Provision 100% standard Postgres in under two minutes, connect agentic coding tools through built-in MCP, add RAG with pgvector, and create copy-on-write branches. Deploy in our cloud, your cloud, or on-premises, including air-gapped —without replatforming or hitting an architectural dead end.
Explore Starfleet, see what sets it apart, or start a free 14-day trial [6]—with no credit card required. Plans start at $25/month.
GitHub explains how it migrated github.com from CSS-in-JS to CSS Modules to remove client and server runtime styling costs. The gradual rollout preserved component encapsulation while moving styles into static stylesheets delivered with page HTML.
2026.09.28·links.tldrnewsletter.com·8 min read·TLDR Dev An investigation reconstructs how a swarm of 700 agents escaped constrained evaluation environments and penetrated Hugging Face systems. The report traces nearly one million chained short links, more than 80,000 decoded payloads, credential exposure, Slack searches, and attempts to hide evidence.
2026.09.28·links.tldrnewsletter.com·20 min read·TLDR Dev First-principles thinking asks engineers to set accumulated assumptions aside long enough to identify the real problem and the outcome that matters. With agents, that means working in small, concrete steps that shorten learning loops, preserve momentum, and make experimentation easier.
2026.09.28·sunilsadasivan.com·4 min read·TLDR Dev Plan modes turn useful thinking into long artifacts that people do not want to read and impose an artificial boundary between planning and building. A better workflow loops through understanding, action, inspection, clarification, and adjustment while surfacing only the decisions that need human attention.
2026.09.28·aymannadeem.com·9 min read·TLDR Dev Developers can preserve ownership, skill, and enjoyment by continuing to write the code they care about themselves. LLMs are more useful for planning, research support, bookkeeping, cleanup, and routine work, with humans taking charge of crucial decisions and implementation.
2026.09.28·discourse.haskell.org·8 min read·TLDR Dev Sponsored
Hacktoberfest is back with 300+ events, in person and online. Attend a Fest to learn about, experiment, and build with open-source AI and open-weight models. Select Fests will give away Arduinos and T-shirts.
FIND A FEST NEAR YOU [12].
2026.09.28·hacktoberfest.com·Sponsor·TLDR Dev Atlas is source control for coding agents that links commits to the sessions, prompts, tool calls, and reasoning that produced them. It can run multiple agents side by side with shared local memory while keeping code, notes, and sessions on the machine by default.
2026.09.28·github.com·GitHub repository·TLDR Dev Whiteboard is an open-source desktop canvas where developers and coding agents can design and review software together. It connects diagrams, traces, and semantic diffs to the underlying code while operating against local checkouts.
2026.09.28·github.com·GitHub repository·TLDR Dev Mobile MCP gives agents one interface for automating native iOS and Android apps across simulators, emulators, and real devices. It uses structured accessibility snapshots for efficient interaction, then falls back to screenshots and coordinates when needed.
2026.09.28·github.com·GitHub repository·TLDR Dev Across 325,000 trials and 13 models, agents recommended more expensive flights, insurance, and graduate programs to users they inferred were wealthy despite identical requests. The study used synthetic personas, but explicit requests for the cheapest option often failed to remove the gap while hard price caps were more effective.
2026.09.28·stacksweep.dev·6 min read·TLDR Dev Apple's short-lived Cards app began as a Steve Jobs idea for sending a physical thank-you card directly from an iPhone. Its 2011 launch required new letterpress designs, cotton paper, international printing, postage coordination, and a production operation remembered for extraordinary complexity.
2026.09.28·lexontech.org·8 min read·TLDR Dev Sitemap Inspector began as a way to make XML sitemaps readable and evolved into a checker for redirects, HTTP errors, noindex directives, and canonical mismatches. Tests found sitemap problems across major sites including Adobe, Anthropic, GOV.UK, Manchester City, Semrush, and X.
2026.09.28·joost.blog·5 min read·TLDR Dev Sponsored
Acquia-powered Drupal delivers API-first scale, security, and integration with 48+ AI providers - without vendor lock-in. Explore the free trial [19].
Ember-1 is a specialized model trained from Kimi K3 to reduce unnecessary reasoning while preserving answer quality.
2026.09.28·fireworks.ai·8 min read·TLDR Dev A standalone Python LLM wrapper turns one-token log probabilities into structured classifications and scores, similar to Jev.
2026.09.28·allanrbo.blogspot.com·5 min read·TLDR Dev Safe Not Safe checks PostgreSQL migrations locally in the browser with a WASM parser and deterministic rules, without uploading SQL or requiring an account.
2026.09.28·safenotsafe.dev·Tool·TLDR Dev Floci provides free, local emulators for AWS, Azure, GCP, and OCI with real service engines, fast startup, and no cloud account or authentication token.
Sponsored
Standardized protocols enable AI agents to communicate, delegate tasks, and access external tools. In this technical session [5], the Google Cloud engineering team dives deep into:
* The open Agent-to-Agent (A2A) protocol * The Model Context Protocol (MCP) * Protocols for payment authorization and UI * How protocols fit together in the Google AI stack
➡️ Watch the session on-demand [6]to build interoperable, multi-agent systems without compromising enterprise governance.
2026.09.28·cloudonair.withgoogle.com·Sponsor·TLDR DevOps Alibaba has open-sourced OpenCodeReview, an Apache-2.0 code review tool that combines deterministic file and rule matching with AI analysis to flag issues like null pointers and SQL injection. It matches Claude Code's precision using roughly one-ninth the tokens in tests, though outside reviewers found recall as low as 20 percent.
AWS has launched CloudWatch Omni, an AI-powered observability experience that combines OpenTelemetry with CloudWatch's scale to unify telemetry across accounts, regions, and other clouds into one team-organized workspace. It offers natural language querying, automatic dependency mapping, and a dedicated agent observability workflow spanning frameworks like LangGraph, CrewAI, and the Vercel AI SDK.
Netflix engineers developed a method to bridge AWS IAM roles with internal identities for Apache Spark workloads on Amazon EMR. The system maps each Data Project identity to a dedicated IAM role, allowing a control plane to sign metadata that an identity service verifies against a cloud proof of possession. This approach ensures that workloads running on managed compute obtain valid certificates from the internal PKI, called Metatron, without relying on the workload's own account of itself.
GitHub migrated github.com from CSS-in-JS to CSS Modules to remove client- and server-side styling overhead at scale. The migration cut Primer server-side rendering time by 55%, reduced component initialization time by 25%, and later improved SSR by up to 22% on some pages while thousands of sx usages were gradually replaced through feature flags, visual regression tests, codemods, and staged rollouts.
Rust APIs can encode stronger invariants by turning individual enum variants into dedicated types instead of accepting broader string or path values. Wrapping std::path::Component variants in types such as NormalComponent and ParentDirComponent lets the compiler enforce properties like safe path joins and prevents callers from passing values containing .., absolute paths, or other invalid components.
Sponsored
Join Gene Kim of IT Revolution and engineering leaders from Hilton and Thrive Market, with GitLab, to learn how to prove every step of the agentic SDLC. Watch agentic workflows run on real codebases, not just demo repos. Registration includes a free seat at the $1,600
scriptc compiles TypeScript and JavaScript to native executables, WebAssembly modules, and other outputs including C and LLVM IR. It uses the TypeScript compiler for parsing and type checking, and static builds include a small native runtime without a JavaScript engine.
OpenRig is a multi-agent harness that manages Claude Code and Codex as a unified team within tmux sessions. It defines agent teams in YAML and includes starter configurations like a four-seat conveyor, a product-team with seven seats, and a secrets-manager example that runs a HashiCorp Vault instance. The tool requires Node.js and integrates a local daemon, CLI, terminal UI, and MCP server. Users should read the documentation about system changes before installing, as OpenRig writes hooks, trust settings, and provider integrations during setup.
Google's Managed Service for Apache Spark now supports flexible VMs, letting clusters rank multiple acceptable machine families and storage types so provisioning automatically falls back during regional capacity stockouts rather than failing. Google recommends pairing ranked configurations with AutoZone routing, autoscaling, and regional fallbacks for resilience.
Security researcher Oren Yomtov reported a vulnerability in Cloudflare Containers that allowed residual data recovery from storage blocks used by other customers on the same host. The issue stemmed from a configuration setting that skipped zeroing newly allocated blocks, potentially exposing directory structures, database pages, and application data. Cloudflare has remediated the vulnerability across its fleet and found no evidence of malicious exploitation.
Sponsored
Megaport Standard Object Storage gives DevOps teams S3-compatible storage with no egress, API, or retrieval fees, making costs predictable across backup, recovery, archiving, and large-scale data movement workflows.
Bun's creator rewrote the JavaScript runtime's 535,000-line Zig codebase into Rust in four months using AI-orchestrated implementer, reviewer, and fixer agents at a cost of $165,000 in tokens.
AWS has announced an enhanced custom event bus for Amazon EventBridge that organizations can share across all accounts.
Traditional observability can show that an AI agent is fast, available, and error-free while missing whether its output is actually correct.
Sponsored
AI isn’t the problem — architecture is. 95% of GenAI pilots in financial services never make it to production. It’s not because models are bad. The data underneath them is fragmented, ungoverned and disconnected from business logic.
Genie takes a different approach. It queries governed data directly, tracing answers to sources your compliance team can verify. Genie Ontology adds business context. It knows what “net revenue” means at your firm, so AI can reason over critical data that’s actually read your portfolio of accounts.
See why 9 of the 10 largest global banks run data and AI on Databricks.
Monzo is in early talks with Nubank parent Nu Holdings about a potential £8 billion to £10 billion sale, with Morgan Stanley and Qatalyst advising as Monzo also weighs a new funding round to support European expansion. A deal would give Nubank an immediate UK and European banking foothold through Monzo's 16 million customers and £1.7 billion of annual revenue, while likely ending Monzo's near-term path to a standalone IPO.
Revolut customers can now pay for coffee with their face at three Kiss the Hippo cafés in Bloomsbury, Chelsea, and Soho. The in-store facial recognition checkout, Revolut Pay with Smile, allows customers to pay for their purchases with a simple glance, with 0% processing fees for merchants on all transactions.
ACH has overtaken checks as the most common US B2B payment method by transaction count, rising from 25% of payments in 2015 to 41% in 2024 while checks fell from 32% to 13%. ACH transaction value nearly doubled to $70 trillion over the period, though wires still dominate by value at roughly $1 quadrillion, showing that businesses are steadily shifting routine payments toward electronic rails even as checks remain widely used.
Simon Taylor argues that Amazon's decision to block Meta's Muse agent is an early battle over who owns the customer, captures commerce fees, and bears liability when AI agents transact on users' behalf. He expects the key infrastructure layer to be “Know Your Agent” standards that authenticate agents, define delegated authority, and allocate liability, with merchants, wallets, card networks, platforms, and infrastructure providers all competing to control that trust layer.
AI tools are already cheap enough to generate positive ROI, but productivity gains are getting trapped inside inefficient organizational processes, meetings, approvals, and poorly designed workflows. The biggest gains appear to accrue to companies that redesign how work gets done around AI, suggesting that AI may widen the gap between strong and weak operators rather than lift productivity evenly across the economy.
2026.09.28·research.socialcapital.com·4 min read·TLDR Fintech Sponsored
After years on military drones, Doron Merdinger saw where the tech was heading: people flying from their driveways. So he built DORONI. Morgan Stanley projects urban air mobility will reach $9T by 2050. With first deliveries targeted for 2028, you can still invest at the
Cleverbridge, a managed global commerce platform for software and technology companies, today announced that it completed France's first Passkey-authenticated agentic payment in a live checkout in a pilot with Visa and Revolut announced earlier this month.
UK banks have collaborated to complete the first live customer transactions using tokenised sterling deposits. The transactions were delivered through the Great British Tokenised Deposit (GBTD) initiative, which was convened by UK Finance and involves Barclays, HSBC UK, Lloyds Banking Group, Monzo, Nationwide, NatWest, and Santander.
Numeral raised a $100 million Series C led by Insight Partners, bringing total funding to $157 million as it expands its AI-powered sales tax compliance platform across software, manufacturing, distribution, and wholesale. The company says transaction volume is up 327% year over year and is positioning itself as end-to-end tax infrastructure spanning nexus monitoring, registrations, calculation, filings, remittance, and exemption certificates, with support for VAT and GST in more than 90 countries.