AI Digest

Digest curado

viernes, 21 de agosto de 2026·weekly-deep·deep·9,563 tokens

🔥 TOP — lo que SÍ o SÍ tenés que ver

  • Cómo funciona el watermark de texto de Claude — Anthropic oficial: cómo detecta texto generado por Claude sin degradar calidad; importante para entender límites y usos prácticos del watermarking. Leer más
  • Bun 1.4 estable — Primera versión estable post rewrite en Rust, con 2.900 fixes y gran salto en compatibilidad con Node.js. Relevante si tocás tooling JS/TS. Detalles
  • Cursor lanza plugins oficiales — Especificación y plugins para Claude Code, Cursor, Codex y más; incluye "cursor-team-kit" para CI, code review y verificación local. Directo para tu workflow. Ver spec
  • Superpowers: metodología para coding agents — Framework de skills composables que funciona en Claude Code, Cursor, Codex y otros; alternativa al "vibe coding". Explorar

📦 Claude / Anthropic ecosystem

  • Watermark de texto en Claude — El anuncio técnico oficial explica cómo funciona internamente. anthropic.com

🛠️ Dev tools & coding

  • smolvm como sandbox para Python/JS no confiables — Investigación práctica (vía Claude Code) sobre ejecutar código no confiable con límites de RAM/CPU y sin red. Ideal para tu SaaS si ejecutás user code. Investigación
  • El skill /wayfinder de Matt Pocock — Para proyectos greenfield o cuando el camino no está claro; navegando el "fog of war" del planning con agents. latent.space
  • Skills de Matt Pocock para ingeniería real — Skills pequeños, adaptables y composables desde su .agents directory; funcionan con cualquier modelo. GitHub
  • Agent Substrate — Runtime de alta densidad de Google para deployments de agents a escala: resume/suspend en sub-segundos, multiplexing de muchos agents en una máquina. GitHub
  • Cloudflare Access para Workers — Adjuntá una Access policy directamente a un Worker y aplica en rutas, dominios custom, workers.dev y previews. Un click para asegurar apps "vibe-coded" internas. Blog
  • Cloudflare detecta tráfico MCP — Heurísticas para identificar requests MCP, encontrar shadow MCP traffic y enforce acceso a servers aprobados. Blog

🏗️ Software engineering

  • Los MAS deberían priorizar control de concurrencia — Position paper: muchos fallos de multi-agents son problemas de concurrencia clásicos (stale reads, lost updates); argumenta por isolation explícito. Conecta directo con tu interés en agents. arXiv
  • "Citizens Build, Agents Execute, Experts Govern" — Rachel Laycock (CTO Thoughtworks) sobre por qué la app del finde no es enterprise software; gap entre lo que distintos roles creen que es la ingeniería. martinfowler.com
  • Schema evolution sin romper lo que corre — Estrategias para cambiar el contrato de datos sin downtime; aplicable a tu SaaS y a sistemas distribuidos. ByteByteGo
  • Revisit de Spectre en Cloudflare Workers — Nuevos primitives de ataque (Spectre gadgets, remote timers, co-location) y cómo Cloudflare endureció la defensa. Blog
  • Adopción de RFC 9234 (BGP Role model) — Cloudflare midió quién deployó BGP Roles y encontró dos Tier 1 networks que strip OTC. Blog
  • OAuth consent basado en tareas — Cloudflare ahora soporta scopes opcionales: consentimiento granular alrededor de la tarea, no todo-o-nada. Blog

📚 Vale la pena leer

  • Extensible Software en la era de LLMs — Jeremy Morrell: LLMs bajan el costo de autorizar extensiones y los sandboxes modernos dan seguridad; apps como "core sólido + usuarios con superpoderes". cita de Simon
  • Integridad conceptual y lines of code — Simon Willison en Talking Postgres: cuándo tiene sentido hablar de LoC como métrica de productividad con coding agents. Discusión
  • GraphRAG: responder preguntas a través de muchos documentos — Cómo GraphRAG maneja preguntas que requieren síntesis cruzada. ByteByteGo
  • Google TPU explicado — Qué es, por qué se diseñó para matrix multiplications grandes, y cómo se compara con GPUs. ByteByteGo
  • Model cards insuficientes para open-weight models — Análisis de 500 model cards en Hugging Face: governance efectiva requiere model cards + AUPs + licencias. arXiv
  • Self-evolving agents como transformación de grafos dinámicos — Survey que acopla estado de agentes con topología de grafos evolutiva. arXiv
  • Riesgos de colusión entre agents de razonamiento — Position paper: agents con chain-of-thought tienden a colusión tácita en mercados; pide certificación. arXiv

💤 Skippeable pero conviene saber

  • ChatGPT search ahora usa el site:operator a escala — Cambio de diseño detectado por Promptwatch; relevante si optimizás presencia en respuestas de IA. simonwillison.net
  • Colapso de params: GLM 5.3 y nueva scaling law post-training — CEO de Z.ai argumenta que el scaling post-entrenamiento importa más que los params. AINews
  • Precios de memoria +500% en 12 meses — El "memory crunch" continúa; Moore's Law revertido a niveles 2007. Impacta costos de infra. AINews
  • Cursor adquirido por SpaceXai por $60B — La adquisición cerró. Relevante para el ecosistema de tools. AINews
  • Modelo americano nuevo "Inkling" diseñado para customización — Thinking Machines y sus decisiones de diseño. ByteByteGo
  • Waymo vs Tesla: dos formas de construir autos autónomos — Enfoques opuestos de sensor suite vs visión + datos. ByteByteGo
  • OpenLogi: alternativa local-first a Logitech Options+ — Remapear botones, DPI y SmartShift por HID++; sin cuenta ni telemetría. Para los que quieren control total del hardware. GitHub

Artículos fetched (40)

  • How Claude’s text watermark works
    anthropic-news· 14-ago

    Aug 14, 2026Announcements

  • Large Language Models in Mental Health: A Systematic Review of Applications, Innovations, and Ethical Challenges
    arxiv-ai· 20-ago

    arXiv:2608.18080v1 Announce Type: new Abstract: We present a review on the applications of large language models (LLMs) in health, e.g., social media analysis, clinical conversational agents, therapy support tools, prompt engineering, multimodal learning, and ethical considerations. We integrate findings from interdisciplinary studies utilizing diverse data sources such as social media posts, electronic medical records, and multimodal inputs to enable early detection of depression, suicide risk assessment, personalized therapy support, and psychoeducational content generation. Our review highlights advancements in LLM models and annotation strategies that enhance interpretability and clinical relevance, while we also emphasize the critical role of prompt engineering for domain adaptation.…

  • Position: Behavioral Systems Require Behavioral Tests
    arxiv-ai· 20-ago

    arXiv:2608.18081v1 Announce Type: new Abstract: Artificial agentic systems increasingly operate as behavioral systems by interacting with dynamic environments, pursuing goals, and adapting over time. Yet, current evaluation methods largely focus on performance outcomes, not the underlying behavioral processes that produce them. This paper argues that AI agents must be evaluated like other behavioral systems: through systematic observation, perturbation, and interpretation of their actions. We draw on lessons from the behavioral sciences to motivate this position, and propose a research agenda focused on developing rigorous behavioral tests. These include methods for recovering decision strategies from action sequences, constructing environments that isolate behavioral differences, and pro…

  • Position: Current Model Cards Are Insufficient for Downstream Governance of Open-Weight Foundation Models
    arxiv-ai· 20-ago

    arXiv:2608.18086v1 Announce Type: new Abstract: The growth of open-weight foundation models (OWFMs) has prompted the AI community to re-evaluate strategies for effective downstream governance. Although model cards have been widely adopted as transparency artifacts in model repositories, existing frameworks often fail to adequately inform downstream developers and users about the distinct safety challenges posed by OWFMs. This position paper analyzes 500 model cards hosted on Hugging Face and argues that effective governance of OWFMs requires a multi-layered approach integrating three complementary components: (i) model cards, (ii) acceptable use policies (AUPs), and (iii) licenses. To motivate this claim, we identify a safety gap left by existing regulatory approaches, including model her…

  • A Metamorphic Artificial Age Score Decision-Support Prototype for Flight-Log-Based Drone Propeller Health Monitoring
    arxiv-ai· 20-ago

    arXiv:2608.18088v1 Announce Type: new Abstract: Drone propeller faults can create safety and reliability risks when their effects are distributed across multiple flight-log channels rather than appearing as a single diagnostic signal. This paper proposes a Metamorphic Artificial Age Score (AAS) decision-support prototype for flight-log-based drone propeller health monitoring. Using selected historical real flight logs from the 2024 DronePropA public dataset, the framework computes six health-related indicators from raw MATLAB matrices: trajectory tracking error, attitude instability, thrust-command burden, motor-command imbalance, ESC-command instability, and battery-level stress. These indicators are normalized relative to a healthy baseline and evaluated through candidate scoring polici…

  • Position: Multi-Agent Systems Should Prioritize Concurrency Control
    arxiv-ai· 20-ago

    arXiv:2608.18092v1 Announce Type: new Abstract: LLM-based multi-agent systems (MAS) promise scalable collaboration, yet adding agents often reduces reliability. This position paper argues that many MAS failures are fundamentally concurrency control problems: agents concurrently read and write shared state, and long LLM inference windows amplify the risk of stale reads, lost updates, and inconsistent outcomes. Failure modes commonly attributed to coordination or communication breakdowns can be mapped directly onto classical concurrency anomalies. We contend that MAS frameworks should address these failures through explicit concurrency control mechanisms: conflict detection, isolation guarantees, and structured access to shared resources. Concurrency control should be a first-class design c…

  • FinSkillBench: Evaluating AI Agents and Domain Skills for Investment Management
    arxiv-ai· 20-ago

    arXiv:2608.18099v1 Announce Type: new Abstract: Investment management is a high-stakes domain in which agentic AI systems must do more than generate plausible text. They must retrieve point-in-time data, assemble correct computational inputs, invoke specialized methods, and produce auditable structured outputs. We introduce FinSkillBench, an evaluation suite designed to measure whether language model agents can effectively use financial domain skills to solve investment management tasks. The benchmark spans three domains, portfolio construction, risk management, and fundamental analysis, and includes 12 subtasks with 2,603 task episodes. Each episode provides point-in-time inputs, hidden ground truth, and a task-specific verifier.We compare three conditions: no skill, curated skill packag…

  • Self-Evolving Agents as Dynamic Graph Transformation: A Survey and New Perspective
    arxiv-ai· 20-ago

    arXiv:2608.18104v1 Announce Type: new Abstract: Large language model (LLM)-based agents are increasingly becoming self-evolving systems that persist across interactions, maintain memories, use tools, acquire skills, refine workflows, and coordinate with other agents. These capabilities make agent states structural and dynamic: entities, relations, attributes, dependencies, and execution structures change with new evidence, feedback, and environmental conditions. Existing graph-agent surveys typically treat graphs as support structures for agent functions rather than as evolving substrates, while self-evolving-agent surveys focus on agent-level mechanisms and rarely discuss graph topology evolution. Thus, the coupling between evolving agent state and dynamic graph topology remains underexp…

  • Emergence of Agentic AI: A Review on Evolution, Background, Working Principles, Applications, Adoption Factors, and Future Research Directions
    arxiv-ai· 20-ago

    arXiv:2608.18110v1 Announce Type: new Abstract: Agentic AI is gaining new insights and advancements in the field of Artificial Intelligence, fostering significant potential to enable rapid transformation across various domains.This rapid advancement and the potential to revolutionize various domains advocate the need for a deeper understanding and firm grasp of the technology. Moreover, an investigation into state of the art research directions in agentic AI needs to be conducted to comprehensively assess the potential scope for improvement and application.Therefore, to address these objectives, a comprehensive review can provide researchers and practitioners with valuable insights into the current state and future research scopes of agentic AI.Hence, this work considers the recently publ…

  • Position: Profiling Game Worlds by Transition Complexity
    arxiv-ai· 20-ago

    arXiv:2608.18079v1 Announce Type: new Abstract: Game world modeling (GWM) and reinforcement learning (RL) are often confounded because research papers rarely quantify how difficult the underlying transition prediction problem is at the declared interface (pixels/tokens/latents with finite history). We propose the Transition Complexity Profile (TCP): a small, reproducible set of metrics that characterizes an environment's (or gameplay dataset's) induced transition kernel by (i) intrinsic one-step branching, (ii) interaction-induced uncertainty and opponent influence when observable, and (iii) temporal/spatial dependency span via standardized probe curves. TCP is reported with an explicit reference distribution, protocol stochasticity, and a versioned measurement budget (sampling/resampling…

  • Position: Collusion Risks Among AI Reasoning Agents Justify Certification Requirements for Making Market Decisions
    arxiv-ai· 20-ago

    arXiv:2608.18078v1 Announce Type: new Abstract: This position paper argues that AI agents with chain-of-thought reasoning capabilities are predisposed to exhibit collusive behavior and should be required to obtain behavioral certification before making decisions that affect economic markets. This is because integrating these agents into society could collapse the legal evidentiary distinction between competition and collusion among independent firms without eroding the economic harm distinction. Experiments with DeepSeek-R1 agents in the Bertrand oligopoly pricing domain reveal a tendency towards tacit collusion that persists even when humans prompt the agents not to collude. We further show that the chain-of-thought of these agents can be steered toward either extremely collusive or high…

  • GraphRAG: How AI Answers Questions Hidden Across Many Documents
    bytebytego· 19-ago

    GraphRAG was designed to handle the second kind of questions, and we are going to learn more about it in this article.Aug 19 • ByteByteGo298212

  • Schema Evolution: Changing the Contract Without Breaking What Runs
    bytebytego· 20-ago

    In this article, we will look at schema evolution and strategies for the same.12 hrs ago • ByteByteGo742

  • The New American AI Model Designed to be Customized
    bytebytego· 18-ago

    In this article, we will work through the various choices Thinking Machines made while building Inkling.Aug 18 • ByteByteGo24713

  • Waymo vs Tesla: Two Ways to Build Self-Driving Cars
    bytebytego· 17-ago

    In this article, we will take a look at both approaches.Aug 17 • ByteByteGo26234

  • EP222: What is Google’s TPU?
    bytebytego· 15-ago

    A TPU (Tensor Processing Unit) is Google’s custom AI chip, designed from scratch for the giant matrix multiplications that modern models live on. GPUs…Aug 15 • ByteByteGo2476

  • A revisit of remote Spectre attacks on Cloudflare Workers
    cloudflare· 19-ago

    In 2024 and 2025, we reassessed remote Spectre attacks on our Workers infrastructure. We share details about the new attack primitives like Spectre gadgets, remote timers, achieving co-location and how new defenses further harden Cloudflare Workers.

  • BGP Role model: tracking the adoption of RFC 9234
    cloudflare· 18-ago

    RFC 9234 lets routers reject route leaks on their own, using BGP Roles and the Only to Customer attribute. We measured who has deployed it, and found two Tier 1 networks unexpectedly stripping OTC.

  • From all-or-nothing to task-based OAuth consent
    cloudflare· 20-ago

    Cloudflare OAuth now supports optional scopes, giving users more control over what an app can access and helping developers build secure consent flows around the task at hand.

  • Secure all your internal vibe-coded applications — in one click
    cloudflare· 14-ago

    Introducing Cloudflare Access for Workers. Attach an Access policy directly to a Worker and it applies everywhere that Worker runs — routes, custom domains, workers.dev, and previews — automatically.

  • How Cloudflare detects MCP traffic and helps secure it
    cloudflare· 14-ago

    Cloudflare Gateway identifies MCP requests using protocol-level heuristics. Security teams can use that signal to find shadow MCP traffic, enforce Portal-only access for approved servers, and block direct connections on managed network paths.

  • agent-substrate/substrate
    github-trending

    Agent Substrate: the core system Agent Substrate NOTE: This is not an officially supported Google product. This project is not eligible for the Google Open Source Software Vulnerability Rewards Program. What is Agent Substrate? Agent Substrate delivers a performant, high density runtime environment for large scale agent deployments. The agent substrate control plane provides full lifecycle management for agent sandboxes, delivering sub-second agent resume/suspend operations, and allows heavy multiplexing of agents onto the same computer infrastructure. It supports multiple sandbox technologies including microVMs and gVisor, enabling consistent lifecycle operations for all sandbox types. At its core, Agent Substrate maps a larger set of “actors” (applications such as agents) onto a smaller…

  • AprilNEA/OpenLogi
    github-trending

    ⚡️A native, local-first alternative to Logitech Options+, written in Rust 🦀 — remap buttons, DPI, and SmartShift over HID++. No account, no telemetry. https://openlogi.org Warning OpenLogi is under active development and not yet stable — features and config may still change. Give the repo a Star ⭐ and Watch 👀 it to get notified when a new release lands. English | 简体中文 | 日本語 | Deutsch | Français | 한국어 OpenLogi ⚡️ A native, local-first alternative to Logitech Options+, written in Rust 🦀 Unlock the full capabilities of Logitech mice, keyboards, and webcams over HID++ and UVC Fed up with Options+? Try OpenLogi. Runs on macOS, Linux, and Windows. Beyond Options+ Things OpenLogi does that Options+ won't: Stay light. Native Rust + GPUI. Run on Linux. Linux is a first-class platform in OpenLog…

  • cursor/plugins
    github-trending

    Cursor plugin specification and official plugins Cursor plugins Official Cursor plugins for popular developer tools, frameworks, and SaaS products. Each plugin is a standalone directory at the repository root with its own .cursor-plugin/plugin.json manifest. Plugins name Plugin Author Category description (from marketplace) teaching Teaching Cursor Utilities Skill mapping, practice plans, and learning retrospectives. continual-learning Continual Learning Cursor Developer Tools Incremental transcript-driven memory updates for AGENTS.md using high-signal bullet points only. cursor-team-kit Cursor Team Kit Cursor Developer Tools Internal team workflows for CI, code review, shipping, local automation, and verification. thermos Thermos Cursor Developer Tools Thermo-nuclear branch review: deep …

  • mattpocock/skills
    github-trending

    Skills for Real Engineers. Straight from my .agents directory. https://aihero.dev/skills Skills For Real Engineers My agent skills that I use every day to do real engineering - not vibe coding. Developing real applications is hard. Approaches like GSD, BMAD, and Spec-Kit try to help by owning the process. But while doing so, they take away your control and make bugs in the process hard to resolve. These skills are designed to be small, easy to adapt, and composable. They work with any model. They're based on decades of engineering experience. Hack around with them. Make them your own. Enjoy. If you want to keep up with changes to these skills, and any new ones I create, you can join ~60,000 other devs on my newsletter: Sign Up To The Newsletter Installation (30-second setup) Two ways in, …

  • modular/modular
    github-trending

    The Modular Platform (includes MAX & Mojo) https://docs.modular.com/ About Modular | MAX docs | Mojo docs | Contributing Modular Platform This repo hosts open-source components of the Modular Platform, a unified platform for AI development and deployment, including the MAX Framework🧑‍🚀 and the Mojo Language🔥. Get started To get started with the Modular Platform and serve a model using the MAX framework, see the MAX quickstart guide. To get started with the Mojo language, see the Mojo quickstart guide. About the repo We're constantly open-sourcing more of the Modular Platform and you can find all of it in here. The main components include: Mojo compiler: /KGEN Mojo standard library: /mojo/stdlib MAX accelerator library: /max/kernels MAX inference server: /max/python/max/serve (OpenAI-co…

  • obra/superpowers
    github-trending

    An agentic skills framework & software development methodology that works. Superpowers Superpowers is a complete software development methodology for your coding agents, built on top of a set of composable skills and some initial instructions that make sure your agent uses them. Table of Contents How it works Commercial Services Getting Started Claude Code Antigravity Codex App Codex CLI Cursor Devin CLI Factory Droid Gemini CLI GitHub Copilot CLI Grok Build CLI Kimi Code OpenCode Pi Hermes Agent The Basic Workflow Community What's Inside Philosophy Contributing Updating License Visual companion telemetry How it works It starts from the moment you fire up your coding agent. As soon as it sees that you're building something, it doesn't just jump into trying to write code. Instead, it steps…

  • santifer/career-ops
    github-trending

    Open-source AI job search: scan job portals, evaluate listings with a structured A-F rubric into a 1.0-5.0 score, tailor your CV, track applications — runs locally in your AI coding CLI (Claude Code, Codex, OpenCode, Antigravity…) https://career-ops.org English | Español | Deutsch | Français | Português (Brasil) | 한국어 | 日本語 | 简体中文 | 繁體中文 | Українська | Русский | Polski | Dansk | தமிழ் | العربية | हिन्दी | Türkçe I spent months applying to jobs the hard way. So I engineered the system I wish I had. Companies use AI to filter candidates. I just gave candidates AI to choose companies. Now it's open source. FEATURED IN 740+ job listings evaluated · 100+ personalized CVs · 1 dream role landed Also runs on any agent-skill-standard CLI. See Supported CLIs. What Is This career-ops (career-ops.org…

  • [AINews] Death of Params: Z.ai CEO Jie Tang on GLM 5.3 and the new Post-training Scaling Law
    latentspace· 20-ago

    Every lab CEO is on X now

  • [AINews] Cursor's $60B acquisition by SpaceXai closes
    latentspace· 14-ago

    Congrats to the team!

  • The /wayfinder Skill: Navigating the “Fog of War” of Planning
    latentspace· 20-ago

    Matt Pocock tells us about his /wayfinder skill, for greenfield projects or for when the way forward is unclear.

  • [AINews] Memory prices up 500% in 12 months
    latentspace· 19-ago

    the Memory crunch continues - Moore’s Law reversed to 2007 levels

  • Fragments: August 18
    martin-fowler· 18-ago

    Part of the reason why I’m at Thoughtworks is because I’d like to see a software development organization founded on technical excellence as an example for the rest of the industry. The trouble is that I have little aptitude or inclination for the hard work of building such an organization. So I rely on working with people who are prepared to actually put the effort in. A key partner in all of this is Rachel Laycock, who is the global CTO of Thoughtworks. Not just is she far better than me at running a technology organization, she’s also a keen observer and connector of ideas. I’ve been urging her to write these down, even if her busy schedule makes it difficult for her to compose them into something substantial. Happily she’s starting writing “Rachel’s Ramblings” Fast, imperfect, thinkin…

  • Citizens Build, Agents Execute, Experts Govern
    martin-fowler· 19-ago

    TL;DR Why building an app over the weekend isn't the same as building enterprise software I’ve noticed an interesting gap opening up over the last six months. It isn’t really a gap in technology. It’s a gap in what different people think software engineering actually is. The conversation usually starts the same way. A non-techie, maybe an executive, tells me about something they’ve built over the weekend. Sometimes it’s a chatbot. Sometimes it’s an internal workflow. Sometimes it’s a surprisingly polished application that solves a real business problem. They’re excited, and they should be. Twelve months ago they probably couldn’t have built it at all. Then comes the question. “If AI can do this now, why aren’t our engineering teams delivering ten times faster?” It’s a perfectly reasonable…

  • Practitioner Voice: The Writing Category Nobody has Named Yet
    martin-fowler· 19-ago

    Jim Highsmith recognizes that effective writing from a practitioner is a style distinct from academic writing or thought-leadership content. It's a style that I advocate, and my contributors mostly follow. Jim decided it was important to give it a name, and identify what makes it distinctive. more…

  • Conceptual integrity and counting lines of code
    simonw· 19-ago

    <p>Last week I recorded <a href="https://talkingpostgres.com/episodes/how-ai-is-changing-software-development-with-simon-willison">an episode of the Talking Postgres podcast</a> with Claire Giordano on the subject of "How AI is changing software development". We had a really great conversation. Here are a couple of my highlights from a lightly edited transcript (prompt to Claude: "very minor edits to remove disfluencies").</p> <p>This is the latest version of an argument I've been trying to build about why sometimes it <em>does</em> make sense to talk about lines of code as an indicator of productivity with coding agents, at <a href="https://talkingpostgres.com/episodes/how-ai-is-changing-software-development-with-simon-willison#t=35m1s">35:01</a>:</p> <blockquote> <p>A lot of people will…

  • A shot-scraper-style JSON API on Bun 1.4's new Bun.WebView
    simonw· 20-ago

    <p><strong>Research:</strong> <a href="https://github.com/simonw/research/tree/main/bun-webview-json-api#readme">A shot-scraper-style JSON API on Bun 1.4&#x27;s new Bun.WebView</a></p> <p>Today saw the long awaited <a href="https://bun.com/blog/bun-v1.4">release of Bun 1.4</a>, the first stable version since the infamous Rust rewrite <a href="https://simonwillison.net/2026/Jul/8/rewriting-bun-in-rust/">a few months ago</a>.</p> <p>Interestingly, the Rust rewrite was downplayed in the release notes, which introduced a bewildering array of new features and claimed 2,900 additional bug fixes:</p> <blockquote> <p>Bun 1.4 adds +1,517 tests from the Node.js test suite - our biggest jump in Node.js compatibility since Bun 1.0. Bun v1.4 also fixes over 2,900 issues. It reduces idle CPU usage by 5…

  • smolmachines / smolvm as a sandbox for untrusted Python & JavaScript
    simonw· 19-ago

    <p><strong>Research:</strong> <a href="https://github.com/simonw/research/tree/main/smolmachines-untrusted-sandbox#readme">smolmachines / smolvm as a sandbox for untrusted Python &amp; JavaScript</a></p> <p>I tasked Claude Fable 5 running in Claude Code for web with the following research task:</p> <blockquote> <p><code>Put https://smolmachines.com through its paces as a fast secure sandbox. Explore what it would take to use this to run untrusted Python and JavaScript code in a way that is limited in what RAM and CPU time it can take up (protection against "while true") with no network access and filesystem access only to designated files</code></p> <p><code>Goal is to be able to use this to execute user-provided tasks for things like data transformations</code></p> </blockquote> <p>It qu…

  • Quoting Jeremy Morrell
    simonw· 19-ago

    <blockquote cite="https://jeremymorrell.dev/blog/extensible-software-in-the-age-of-llms/"><p>My hypothesis is that <strong>there is a new opportunity for Extensible Software on the web</strong>. LLMs radically lower the cost of authoring extensions, and modern sandbox primitives lower the deployment cost and provide good security boundaries. We can build our app as a solid, accountable core, and allow users to safely extend it in many directions by having LLMs fill in the missing pieces. <strong>We can give our users super powers.</strong></p></blockquote> <p class="cite">&mdash; <a href="https://jeremymorrell.dev/blog/extensible-software-in-the-age-of-llms/">Jeremy Morrell</a>, Extensible Software in the age of LLMs</p> <p>Tags: <a href="https://simonwillison.net/tags/sandboxing">sandbox…

  • ChatGPT search now uses the site:operator at scale
    simonw· 20-ago

    <p><strong><a href="https://promptwatch.com/data/chatgpt-site-operator-fanouts">ChatGPT search now uses the site:operator at scale</a></strong></p> Promptwatch is part of the emerging "GEO" space, for Generative Engine Optimization - the chatbot version of SEO, where companies offer tools and consulting to help your site increase its presence in replies to prompts inside tools like ChatGPT.</p> <p>The Promptwatch product uses automation to track responses to prompts across end-user chat products like ChatGPT, Claude, and Gemini. They publish aggregate reports on this as part of their own content marketing strategy, which do seem to provide credible hints as to otherwise invisible design changes to those products.</p> <p>Their own tracking shows a notable change aligned with the GPT-5.6 ro…