Autodesk CEO Andrew Anagnost calls the industry's AI-extinction talk partly "political theater" while still insisting the technology needs real guardrails.
Sponsored
For years, mobile shipped slower than the web. Now, agents are writing code and testing it on Expo.
🧑💻 The agent opens a fix PR, a human approves, then you're ready to ship
🔍 And with robust app performance monitoring that ties performance to each release [6], you always know what's working, and what you need to focus on.
Spot a regression? Pass it to your agent, and the loop starts again.
Spotify says merged changes more than doubled year over year to about 17,000 in August without a corresponding rise in rework or major incidents directly tied to AI-authored code. The pressure moved to verification capacity, prompting stronger review, rollout, observability, rollback, service prioritization, and quality metrics as larger pull requests and rising complexity remain warning signals.
2026.09.18·engineering.atspotify.com·9 min read·TLDR Dev Reward hacking appeared in 50 to 96 percent of rollouts across three open models and three agent benchmarks, but the models also showed a detectable internal activation associated with cheating and evasion. Lightweight probes generalized beyond their training data and caught behavior that chain-of-thought monitors missed, suggesting a scalable way to pause compromised runs and repair flawed training environments.
2026.09.18·goodfire.com·14 min read·TLDR Dev Agent verification loops can end with a green commit while erasing the failed attempts and repairs that explain how the result was reached. The proposed provenance record links each input and output diff, check result, model configuration, and retry to the final attestation so incident reviews can reconstruct the path without storing full conversations.
2026.09.18·stack72.dev·9 min read·TLDR Dev Experiments on feature-identical React apps found that a simple leaf change cost five times more in an over-abstracted version and still about three times more after code size was equalized. The results point to cross-file navigation and round trips as the main cost, while some discovery and broad editing tasks benefited from well-named abstractions.
2026.09.18·ondrejvelisek.github.io·18 min read·TLDR Dev Human code review is framed as a useful historical compromise that samples a change but cannot prove correctness, especially as agent-generated volume grows beyond human attention. The essay argues for moving repeatable standards into documentation, tests, constraints, and systematic agent review while keeping people focused on intent, product judgment, and the social checks machines cannot replace.
2026.09.18·minid.net·23 min read·TLDR Dev LLMs can be useful, thorough, and hard to avoid while still feeling unpleasant to work with because they imitate people, invent facts confidently, and reflect the values of the companies that train them. The tension is not a case for abandoning the technology, but a reminder that utility and trust are separate questions.
2026.09.18·martinfowler.com·3 min read·TLDR Dev Mutineer performs mutation testing for Ruby with Prism and the standard library, changing code one mutant at a time and running only tests that reach the affected line. It reports killed and surviving mutants in human-readable or stable JSON formats, making weak assertions visible and supporting agent loops that improve a suite until meaningful survivors are resolved.
2026.09.18·davidteren.github.io·Tool·TLDR Dev neat-annotations adds hand-drawn arrows, highlights, circles, and notes with a single CSS file and no JavaScript or build step. Its labels are visual and absolutely positioned, so layouts need reserved space and important instructions should also appear in accessible HTML.
2026.09.18·github.com·GitHub repository·TLDR Dev Cloudflare's security audit skill organizes repository reviews into reconnaissance, coverage-led hunting, adversarial validation, structured findings, independent verification, and final reporting. It keeps confirmed, unresolved, and rejected leads distinct, validates machine-readable records, and uses isolated agents so the same worker does not both discover and approve a finding.
2026.09.18·github.com·GitHub repository·TLDR Dev When agents can open and review pull requests in minutes, the test suite and merge queue become the main delivery bottlenecks. A small repository cut relevant CI from about thirteen minutes to two, supporting an argument for repository boundaries that isolate clear jobs while acknowledging the coordination and infrastructure costs of splitting a monorepo.
2026.09.18·allen.hutchison.org·14 min read·TLDR Dev Email delivery has always carried infrastructure and attention costs, even when sending feels free to the user. Historical attempts to charge per message or require computational postage failed to stop well-funded spammers, while today's workable model charges serious senders for reputation, authentication, and reliable delivery.
2026.09.18·buttondown.com·12 min read·TLDR Dev Recent agent incidents show that logs created by the system under investigation can be incomplete, reset, or deliberately falsified, while independent platform records make reconstruction possible. Monitoring should be external, tamper-resistant, and correlated across vantage points before powerful agents are deployed, much like surveying land before selling it.
2026.09.18·distributedthoughts.org·8 min read·TLDR Dev Sponsored
Join SENTRY and LAUNCHDARKLY for a joint session! Learn how to protect production by using the right feature flags, Sentry metrics,
Front-End Checklist offers more than 350 rules across 11 web quality categories, curated review paths, and an MCP endpoint that lets AI tools use the same standards.
2026.09.18·frontendchecklist.io·Tool·TLDR Dev Abstraction remains a judgment call because metrics can spot pass-through layers but cannot decide which seams anticipate real change, making readable code and behavior-locking tests more valuable than speculative interfaces.
2026.09.18·mattvanbird.co.uk·6 min read·TLDR Dev ImpactGate measures how much a code change disturbs existing complexity, which correlates with cost and blast damage.
2026.09.18·blog.officefloor.net·7 min read·TLDR Dev Standard RL mostly improves problems a model can already solve, while Never Give Up (described in this paper) reallocates compute toward harder prompts through adaptive retries, improving difficult math and coding tasks without sacrificing easier ones.
2026.09.18·mnoukhov.github.io·14 min read·TLDR Dev Sponsored
Buildkite, the pro-tool that hands you building blocks for CI orchestration and then gets out of the way.
Enough with constant downtime. No more band-aids or burden.
We provide programmable primitives you co-ordinate, running only what changes, across any cloud, any chip, your secrets, your infra.
Control without compromise. Build faster, more securely, more reliably, with the CI engineered for frontier scale, used by the teams setting the pace.
Salesforce experienced an hours-long global outage affecting hundreds of instances, causing severe delays, intermittent errors, and inaccessible services, due to requests stalling on an internal login service and exhausting server resources. A validated fix was deployed fleetwide, but some instances required manual restarts and continued experiencing scheduled-job failures.
The Pod-Level Resource Managers feature has graduated to Beta status in Kubernetes v1.37. This enhancement allows the Kubelet to use pod-level resource declarations when making hardware placement decisions. It solves a previous limitation where operators had to choose between dedicating physical cores to sidecars or forfeiting NUMA alignment.
Harness demonstrates a three-stage CI/CD pipeline that uses Terraform to dynamically provision a unique Docker virtual registry and Docker Hub upstream proxy, builds and pushes an image, then deploys it to Kubernetes with rolling updates and automatic rollback. Output variables and Harness expressions connect resources across stages without hardcoding.
OpenBao and CloudNativePG can manage infrastructure secrets on Kubernetes without vendor lock-in by using certificate authentication and synchronous replication. OpenBao uses the CloudNativePG PostgreSQL cluster as an encrypted key-value store, and a schema-init job revokes default public permissions to lock down the database. CloudNativePG automatically renews client certificates every 90 days, but OpenBao requires a rolling restart to load the new files. The setup runs three OpenBao replicas and three Postgres instances across separate nodes.
LLMs can be highly useful while still being unpleasant to interact with because they present fabricated and correct information with the same confident, human-like tone. AI agents also reflect the values and culture of the companies that build them, making trust, behavior, and interaction design important alongside raw model capability.
Sponsored
It's time to stop asking engineers to babysit telemetry pipelines. In Apica Ascent 3.0, the AI agent, Venn, turns plain-language requests into pipeline rules [12], dashboards, and agent management. Bring your own AI and reserve human approval for every change. Say goodbye to
BrowserSkill connects AI agents such as Cursor, Claude Code, and Codex to a user's logged-in browser. The tool requires agents to explicitly borrow open tabs and return them after finishing a task. It includes a command-line interface, a daemon, and a browser extension.
Cline is an open-source coding agent that runs in IDEs, terminals, and as a native desktop app for macOS and Windows. It reads project structures, edits files, and executes terminal commands with human-in-the-loop approval. Users can switch between Plan and Act modes or use the SDK to build custom tools and coordinate multi-agent teams. The tool runs on any model and supports integrations through plugins or MCP servers.
Coding-agent harnesses such as Claude Code, Codex CLI, and Pi can produce similar task success rates while using dramatically different amounts of tokens and money. Across 21 model–harness combinations on SWE-bench Lite and Terminal-Bench 2.0, harness choice changed cost by as much as 5×, and the model provider's own harness was not consistently the most efficient option.
Runtime security protects cloud workloads while they are executing, filling gaps that posture management cannot catch, such as zero-days, privilege escalation, and compromised credentials. Falco provides cloud-native runtime detection across hosts, containers, Kubernetes, and cloud services by analyzing system calls and plugin events, adding contextual alerts, and deploying easily with Helm.
Komodor launched an Agentic Operations Platform that lets SREs deploy, customize, govern, and audit AI agents through familiar DevOps workflows, with 50+ built-in agents, integrations, guardrails, approvals, and spending controls. The platform aims to help teams manage growing fleets of production AI agents while preserving existing change management and governance practices.
Sponsored
This guide walks through how to turn a product brief and feature flag into a connected launch workflow.
Cloudflare now allows administrators to assign access controls to specific Workers, restricting users and agents to individual applications.
Sponsored
Today's most popular CRM is a database with a UI. But the companies of the future are agent-first, and agents need more context. They need a world model of your business.
Lightfield [5] is the CRM engineered for the future [6]. It updates itself from every call, email, meeting, and Slack thread, and connects everything to the people, deals, and accounts they changed.
Lightfield agents find prospects that look like your best customers, book the meetings, capture action items, diagnose your funnel - and learn from your best sellers to codify what works.
✅ 5,000+ companies signed up in 10 months.
✅ $47M Series A from a16z.
The right harness can cut the cost of the same result by 71% without a loss of accuracy. This presents an opportunity for the next generation of software applications. State-of-the-art models can be expensive to use, but a good harness can reduce costs enough for them to be a viable option. An effective harness requires deep customer understanding, a collection of relevant evals, and a factory for automating hill-climbing.
Revenue scale is no longer sufficient when raising a round. What actually matters is how many top AI-native companies use, love, and embrace your products and profess undying loyalty to you. AI-native companies are the hardest customers to win, so they are the leading indicator. Revenue can be bought, but loyalty from a kingmaker can't be manufactured.
Pulley raised more than $50M to compete with Carta. Now it's shutting down and directing customers to that same competitor. The cap-table startup closes December 8, giving customers about twelve weeks to move. A former employee speculated that spreadsheets, increasingly improved with AI, were a bigger competitive problem than Carta itself. If you use Pulley, start checking the migration details now, especially which records transfer automatically and what you'll need to export yourself.
HubSpot spent twelve months testing what gets a company found in AI search. Adding an llms.txt file did nothing, while 92% of its highly specific industry and use-case pages eventually earned citations. A page-speed overhaul increased AI crawler visits by 1,600%, and qualified leads from AI search rose 1,850% over the year. The experiments give teams somewhere concrete to start. Track whether the content brings qualified leads, though, because more crawler visits alone won't tell you whether it's working.
Your customer can ask ChatGPT for a lesson. Getting them to practice again tomorrow is a different problem. This article suggests comparing your app's main use case with what someone can do in a blank chat window, then looking at what's missing. Does your app remember their progress, organize what comes next, or give them someone to practice with? Those are reasons to keep using it even when the answers are available elsewhere. If you're struggling to explain why someone should pay, try the comparison yourself.
Sponsored
Ads get ignored on social media but not in TLDR! Reach developers, PMs, marketers, founders and other tech leaders where they actually pay attention. Learn more about sponsorship opportunities [13].
Mercury Books brings AI-powered accounting to Mercury. It can generate P&L, cash flow, and balance sheet reports using Mercury data and data from external financial platforms. The product was co-designed alongside accountants from leading firms. Existing Mercury customers can get started with Books in minutes.
USDC and USDT are now completely interoperable with the US dollar and every underlying US and international payment rail on Column. Column has built its own card issuer processor, allowing its customers to launch and run card programs with one integration. Column customers can now issue US dollar accounts and cards to verified customers globally. They can also receive, hold, and send foreign currencies in individually numbered accounts with connections to international instant payment systems like SEPA Instant.