AI Digest

Digest curado

viernes, 23 de octubre de 2026·weekly-deep·deep·10,423 tokens

🔥 TOP — lo que SÍ o SÍ tenés que ver

  • Anthropic dona Agent Skills a la Agentic AI Foundation (Linux Foundation) — Mismo movimento que hicieron con MCP: el estándar queda vendor-neutral. Si estás construyendo agentes o skills reutilizables, esto define el terreno a futuro y vale la pena entender el formato ya. link
  • Claude Models on Google Cloud (Anthropic managed) + Fast mode para Opus 5.5 — Nueva vía de acceso al API operada por Anthropic a través de tu proyecto GCP, con IAM de Google controlando acceso y billing por Marketplace. Relevante si tu SaaS o tus agentes corren en GCP y querés evitar otro contrato/proveedor. link
  • Cloudflare recorta 68% su factura de inferencia con prompt caching + model routing — Case study aplicadísimo: el costo por run del code reviewer se duplicó, investigaron token usage y lo bajaron con caching y ruteo inteligente. Justo lo que te sirve para pensar economía de inferencia en el side project. link
  • tsrs: port de TypeScript a Rust, hasta 8x más rápido y 70% menos memoria — Cloudflare colaborando en un port real de TypeScript a Rust. Si te importa tooling y performance en el día a día con TS/Node, esto es concreto y accionable a mediano plazo. link

📦 Claude / Anthropic ecosystem

  • Claude Mods: Flipping the Harness Inside Out — Buen concepto de Latent Space: pasar el harness de "facing the machine" a "facing the human", una suerte de Attention Interface temprana. Lectura obligada para quien diseña UX de agentes. link
  • claude-howto: guía visual y example-driven de Claude Code — De "typing claude" a orquestar agents, hooks, skills y MCP servers con templates copy-paste. Buen recurso de referencia para profundizar más allá de los docs oficiales. link
  • MCP vs CLI para agentes: análisis comparativo en 14 dimensiones — Paper que concluye que CLI gana en eficiencia para workflows locales mono-usuario, pero MCP cubre control de acceso fino y aislamiento de credenciales que CLI no puede. Marco útil para elegir integración en tus agentes. link
  • El costo del handshake en protocolos de comunicación entre agentes (MCP, A2A, ACP) — Primer benchmark empírico desglosado por fase del handshake, midiendo round trips, latencia y costo en tokens. Dato duro para decisiones de arquitectura multi-agente. link
  • RoleFlow: colaboración multi-rol auto-evolutiva con adaptación estructural — Sistema que refina estructuras de colaboración vía ediciones atómicas guiadas por feedback y síntesis de roles on-demand, con SECPO para hacerlo aprendible. Interesante si estás diseñando topologías de agentes dinámicas. link

🛠️ Dev tools & coding

  • Full transaction detection en Cloudflare WAF — El WAF ahora correlaciona request con response, detectando exploits exitosos y data exposure que la inspección request-only no ve. Cambio de modelo mental útil para pensar seguridad de APIs. link
  • Cloudflare despliega protecciones WAF contra php2shell antes del disclosure público — Reglas que usan señales de request y response para frenar exploits. Combinado con el item de PHP de abajo, es un caso concreto de respuesta defensiva coordinada. link
  • WebMCP en comercio: ~100.000 dominios de Commerce.com exponen shopping tools a agentes — Implementación real de WebMCP a escala con control por merchant. Señal fuerte de hacia dónde va el UX pragmático de AI en e-commerce, análogo a tu SaaS. link
  • Release de seguridad de PHP 8.x: dos RCE con exploits circulando — Si tenés algo en PHP, esto es urgente; además el post explica qué salió mal en el proceso de disclosure coordinado (CVEs filtrados con score incorrecto). Lectura sobre el lado humano de la seguridad. link

🏗️ Software engineering

  • Single-tenant Titus: aislamiento a nivel VM sobre una plataforma de containers multi-tenant — Cómo Netflix da aislamiento fuerte a tenants sobre la misma infra de containers. Pieza sólida de arquitectura de plataforma a gran escala. link
  • Ontology-Driven Observability: knowledge graph end-to-end a escala Netflix — Cómo estructuran observabilidad con un grafo de conocimiento. Conceptual y aplicado a la vez; muy alineado con tu interés en tracing y métricas. link
  • Por qué los sistemas distribuidos prefieren independencia antes que coordinación — Artículo de ByteByteGo sobre los costos de coordinar. Buena base conceptual para razonar sobre consistencia y desacople. link
  • LLM prompt caching vs semantic caching — Desglose de cómo funciona el caching en LLMs y en qué se diferencian ambos enfoques. Complementa perfecto el case study de Cloudflare del TOP. link
  • Cómo Uber construyó "Genie" para responder preguntas correctamente — Cómo prepara conocimiento, recupera y genera respuestas. Diseño de sistema interno de Big Tech con retrieval. link
  • Por qué Shopify migró fuera de React Native — Decisión de arquitectura real y el proceso de migración a native. Útil para pensar trade-offs de plataforma en tu SaaS. link

📚 Vale la pena leer

  • "AI Compute Comes in Rectangles" — Erik Bernhardsson (Modal) — Sobre GPUs elásticas, crecimiento de sandboxes y economía del "agent cloud". Muy pertinente para entender inferencia a menor escala y el costo real de correr agentes. link
  • "You are the Team" — Anekha Sokhal (Moshi) — Cómo Moshi convierte market data en insights accionables, y por qué las herramientas de AI tienen que adaptarse al workflow del usuario. Excelente referencia para UX pragmático en tu producto. link
  • Martin Fowler — Fragments: October 21 — Reflexión sobre el "LLM Voice" y el costo de que otros tengan que adivinar cuánto de un texto es AI. Voz de autoridad sobre un tema que te va a tocar escribir igual. link
  • Feedback que backfirea: ¿los agentes repiten el movimiento fallido? — Hallazgo contraintuitivo: escribir el fallo en el transcript hace que modelos chicos repitan la acción, por la forma superficial del movimiento. Implicancia directa en diseño de loops de tool calling. link
  • Cómo construir un Genie que responde bien (y 8 estrategias de chunking) — Si vas a hacer RAG en serio, el episodio sobre chunking es un checklist práctico de decisiones de producción. link

💤 Skippeable pero conviene saber

  • 8 certificados eMudhra comprometidos por claves débiles — Cloudflare despliega mitigaciones y explica impacto/acción para developers. Vale revisar si confiás en esa CA. link
  • Programa "Patch the Planet" de OpenAI descubrió PHP2Shell en core PHP (afecta 70% de la web) — Detrás de escena del hallazgo coordinado en 2 meses. Contexto del vuln de PHP, no acción directa tuya si no corrés PHP. link
  • Cloudflare obtiene certificación ISMS de Corea del Sur — Cómo localizaron flujos de consentimiento y sign-up en el edge. Relevante solo si apuntás a mercado coreano con tu SaaS. link
  • Accountability continua para Verified bots — Sistema que evalúa si los bots respetan robots.txt y HTTP 429 a lo largo del tiempo. Curioso para quien dependa de crawling. link
  • Clairic: nueva clase "System One" de modelos de extracción — Modelo de Cloudflare para extraer, computar, estimar y pronosticar desde input no estructurado. Señal de modelos chicos y especializados — alineado con tu interés en inferencia de menor escala. link
  • Proteger NetScaler Gateway más allá del patch (CVE-2026-88771) — Pre-auth RCE; el argumento es mover la decisión de sign-in delante del código vulnerable. Solo si tocás ese stack. link
  • supabase / fastapi / php-src en trending — Frameworks y plataformas que probablemente ya conocés; nada nuevo acá. link
  • Paper sobre Lehmer's problem con loop humano-AI — Ejemplo lindo de descubrimiento matemático asistido por AI, pero off-topic para tu foco. link

Artículos fetched (43)

  • MCP vs CLI for AI Agents: A Comparative Analysis of Tool Integration Strategies for Autonomous Systems
    arxiv-ai· 23-oct

    arXiv:2610.30157v1 Announce Type: new Abstract: AI agents require interfaces to interact with external systems such as files, APIs, databases, and cloud services. Two competing paradigms have emerged: CLI (Command Line Interface), where agents execute shell commands directly, and MCP (Model Context Protocol), a structured JSON-RPC protocol providing governed, typed tool access. This paper presents a comparative analysis across 14 evaluation dimensions, supported by worked examples, security assessment against established compliance frameworks, and economic modeling. Our analysis indicates that CLI provides superior efficiency for single-user, local-only workflows, while MCP addresses requirements that CLI fundamentally cannot satisfy, including fine-grained access control, credential isol…

  • Accelerating Wildfire Hazard Mapping Across Canada with an AI Surrogate Modelling Framework
    arxiv-ai· 23-oct

    arXiv:2610.30170v1 Announce Type: new Abstract: Canada's increasing wildfire activity requires frequent national hazard mapping to guide proactive mitigation, including fuel management, land-use planning, infrastructure protection, and evacuation routing. However, process-based wildfire simulation frameworks (e.g., BurnP3 and BurnP3+) rely on computationally intensive Monte Carlo simulations to model burn probability, fire intensity, and rate of spread. These workflows can take days to weeks to process a single regional modelling unit. To overcome these computational bottlenecks, we present three contributions developed through collaboration between AI researchers and wildfire modelling experts: (a) a standardized framework for training, fine-tuning, and evaluating AI surrogate models aga…

  • Neural Networks with Differentiable Belief-Function Layers
    arxiv-ai· 23-oct

    arXiv:2610.30173v1 Announce Type: new Abstract: Yager's 1987 rule of combination $\boxplus$ was proposed on epistemic grounds: under high conflict, mass should be redistributed to ignorance rather than renormalised onto the class simplex. We observe that backpropagation needs the same rule: Dempster's normaliser $(1{-}\kappa)^{-1}$, where $\kappa$ is the conflict mass, puts a $(1{-}\kappa)^{-2}$ term in the gradient that diverges exactly when evidence sources disagree, while Yager's $\boxplus$ is bilinear and has no such term. Building on this, we construct a deep evidential pipeline in which every mass in the chain from heads to output is a valid Dempster--Shafer mass function, combined by Yager's rule. The output mass on the ignorance set, $m(\Theta)$, serves as the network's ``I do not…

  • When Stable and Preferred Semantics Agree: A Path-Based Approach
    arxiv-ai· 23-oct

    arXiv:2610.30176v1 Announce Type: new Abstract: We investigate structural conditions under which preferred and stable semantics agree in abstract argumentation frameworks. Our approach is based on suitably chosen sets of paths in the attack graph and binary relations induced by them. We establish a general path-based criterion for semantic agreement and instantiate it with several classes of paths, obtaining sufficient conditions expressed in terms of well-foundedness of the corresponding relations. The resulting conditions strictly generalize two principal structural criteria for preferred and stable agreement in the literature: Dung's limited controversiality condition and the SCC-symmetry condition. In particular, Dung's result is recovered as a special case by taking the relevant path…

  • Feedback That Backfires in Games: Do LLM Players Repeat the Move They Just Watched Fail?
    arxiv-ai· 23-oct

    arXiv:2610.30205v1 Announce Type: new Abstract: When an LLM agent's move fails, the harness writes the move and the failure message into the transcript and asks again. In tool calling, this record makes small models more likely to repeat the failed action. We test whether the same holds in games (Sokoban, Connect Four, Othello), where a move can fail by being illegal or by being legal but losing, both verified exactly. On fixed probe items built by perturbing a correct move, the record backfires: pooled over 8 instruction-tuned models (135M-1.7B) it makes the failed move more likely (corrective gain G = -1.38 nats per token), through the move's surface form, for illegal moves but not for losing ones, and not for every model. An exploratory analysis shows what sets the sign: after the reco…

  • Breaking the high-degree barrier in Lehmer's problem with a human-AI discovery loop
    arxiv-ai· 23-oct

    arXiv:2610.30277v1 Announce Type: new Abstract: While artificial intelligence has made rapid progress in mathematical reasoning, many open problems depend on structure that is revealed only through large-scale computational exploration and analytical synthesis. One such example is Lehmer's problem from 1933. It asks whether the Mahler measure of an integer polynomial, which measures how far its roots stray from the unit circle, can be made arbitrarily small. Previously, constructing irreducible polynomials with integer coefficients and small Mahler measure has been carried out systematically only for even degrees $d \le 180$. At higher degrees, Boyd's analytical one-parameter family frequently factors, skipping nearly 50% of target degrees and leaving no general construction for arbitrary…

  • Route-and-Generate: KL-Regularized Router Improvement for Reasoning Routing in LLMs
    arxiv-ai· 23-oct

    arXiv:2610.30351v1 Announce Type: new Abstract: Large language models often apply complex reasoning indiscriminately, leading to overthinking on simple tasks and underthinking on harder ones. We present Route-and-Generate (Rouge), a hierarchical training framework that enables LLMs to adaptively decide when and how much reasoning is required for each input. Our approach decouples reasoning effort allocation from answer generation by introducing a routing policy that allocates a fixed sampling budget across multiple reasoning formats, while the base model is optimized with GRPO using per-sample rewards. To promote efficient reasoning, we employ a rank-based reward that favors shorter correct solutions, and update the routing policy via a closed-form KL-regularized policy improvement step d…

  • Soft Ontology Priors over Latent Concept Posteriors for Weakly Supervised Neuro-Symbolic Learning
    arxiv-ai· 23-oct

    arXiv:2610.30391v1 Announce Type: new Abstract: Neuro-symbolic (NeSy) predictors that supervise only the task label suffer from reasoning shortcuts: distinct concept mappings achieve the same maximum likelihood, leaving the recovered concepts unidentifiable and unsafe for downstream reuse. We attack this failure by injecting a soft ontology prior over the latent concepts into the training objective and compiling it together with the task constraint into a smooth, decomposable probabilistic circuit. Under independent Bernoulli perception, the normalisers of the resulting structured concept posterior reduce to weighted model counts that are linear in the compiled circuit size, because the neural leaf weights fold into the circuit before evaluation. The soft compilation strategy places exper…

  • RoleFlow: Self-Evolving Multi-Role Agentic Collaboration via Structural Adaptation
    arxiv-ai· 23-oct

    arXiv:2610.30429v1 Announce Type: new Abstract: Large language model (LLM) based multi-agent systems often rely on predefined collaboration structures, limiting their adaptability to evolving task requirements. Although recent approaches enable dynamic orchestration, trajectory-level rewards they apply assign one outcome to each decision, ofen struggling to identify the contributions of individual structural changes. We propose RoleFlow, a self-evolving multi-role agentic system that refines collaboration structures through feedback-driven atomic edits and on-demand role synthesis. To make structural adaptation learnable, we introduce Single-Edit Counterfactual Policy Optimization (SECPO), which evaluates each edit against its no-edit counterpart at the same chain state and assigns target…

  • The Cost of Saying Hello: An Empirical Study of Handshake Overhead in AI Agent Communication Protocols
    arxiv-ai· 23-oct

    arXiv:2610.30151v1 Announce Type: new Abstract: Every interaction between AI agents begins with a handshake: the initiating agent must locate its counterpart, learn what it can do, and establish a session before the first useful message can be sent. Surveys of agent communication protocols name handshake overhead as an efficiency criterion, yet none report measurements. This paper presents the first empirical, phase-decomposed benchmark of the handshake in three major agent protocols: MCP (in both its 2025 initialize and 2026 discover eras), A2A, and ACP. Using each protocol's official SDK, we instrument every request for round trips, per-phase latency, wire bytes, and token cost across cold-start, warm-repeat, capability-mismatch, and degraded-metadata scenarios (N=50 per cell, on loopba…

  • EP229: 8 Chunking strategies for RAG-based agents
    bytebytego· 17-oct

    Which chunking strategy are you running in production?Oct 17 • ByteByteGo213218

  • How Uber Built a Genie to Answer Questions Correctly
    bytebytego· 19-oct

    In this article, we will understand how Genie prepares knowledge, retrieves it, and generates answers.Oct 19 • ByteByteGo224511

  • LLM Prompt Caching Versus Semantic Caching
    bytebytego· 21-oct

    In this article, we’ll look at how LLM caching works in detail.Oct 21 • ByteByteGo24567

  • Why Distributed Systems Prefer Independence over Coordination
    bytebytego· 22-oct

    In this article, we’ll look at why coordination is a challenge for distributed systems.17 hrs ago • ByteByteGo1811

  • Why Shopify Migrated From React Native
    bytebytego· 20-oct

    In this article, we’ll look at how Shopify decided to move out of React Native and how they migrated to native mobile development.Oct 20 • ByteByteGo20435

  • Claude Platform release notes
    claude-changelog

    Release notesSubscribeCopy pageUpdates to the Claude Platform, including the Claude API, client SDKs, and the Claude Console.SubscribeCopy pageThe Claude Platform release notes list changes to the Claude API, the client SDKs, and the Claude Console, newest first. For release notes on Claude Apps, see the Release notes for Claude Apps in the Claude Help Center.For updates to Claude Code, see the complete CHANGELOG.md in the claude-code repository. October 22, 2026 We've launched Claude Models on Google Cloud (Anthropic managed), the Claude API operated by Anthropic and reached through your Google Cloud project. Google Cloud IAM controls access. Google Cloud Marketplace handles billing. Fast mode is available for Claude Opus 5.5 on Claude Models on Google Cloud (Anthropic managed). Oc…

  • 8 eMudhra certificates are compromised. Here's what you need to know
    cloudflare· 20-oct

    Following the discovery that eight eMudhra intermediate certificates use weak keys, Cloudflare is deploying mitigations and releasing client updates. We explain the impact, our response, and what customers and developers should do next.

  • Introducing Clairic, a new System One class of extraction models
    cloudflare· 19-oct

    Clairic is a new model from Cloudflare that is a System One extraction modeI, capable of extracting, computing, estimating, and forecasting data from unstructured inputs.

  • Introducing full transaction detection for Cloudflare WAF
    cloudflare· 21-oct

    Cloudflare's web application firewall can now correlate an HTTP request with its response. Full transaction detection helps every customer find successful exploits, data exposure, and risky misconfigurations that request-only inspection can miss.

  • Localizing compliance at scale: achieving South Korea’s ISMS certification
    cloudflare· 22-oct

    Cloudflare has achieved South Korea's ISMS certification following an audit across 80 controls. Learn how we localized user consent flows, adapted social sign-up paths at the edge, and validated our global security program.

  • Cutting our inference bill by 68% by being obsessive about optimization
    cloudflare· 19-oct

    When our AI code reviewer's cost per run doubled, we dug into the token usage to find out why. Learn how we used prompt caching and intelligent model routing to slash our inference bill by 68% while speeding up reviews.

  • Cloudflare deploys protections against php2shell vulnerability
    cloudflare· 21-oct

    Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed data from reaching attackers.

  • Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities
    cloudflare· 19-oct

    CVE-2026-88771 lets attackers run commands on NetScaler Gateway before anyone signs in. Patching takes time most teams don't have, so the sign-in decision has to move in front of the vulnerable code.

  • Introducing tsrs: A port of TypeScript to Rust
    cloudflare· 20-oct

    Cloudflare is collaborating on tsrs, a Rust port of TypeScript that is up to 8x faster and uses 70% less memory.

  • Continuous accountability for Verified bots
    cloudflare· 16-oct

    Identity alone doesn't guarantee a bot will behave responsibly. We are introducing a system to continuously evaluate whether Verified bots honor site preferences, like robots.txt and HTTP 429s, ensuring they remain accountable over time.

  • How Commerce.com and Cloudflare are getting storefronts ready for AI agents
    cloudflare· 21-oct

    Almost 100,000 Commerce.com domains now give AI agents real shopping tools through WebMCP on Cloudflare. Here's how we turned it on across every store at once, while keeping each merchant in control.

  • fastapi/fastapi
    github-trending

    FastAPI framework, high performance, easy to learn, fast to code, ready for production https://fastapi.tiangolo.com/ FastAPI framework, high performance, easy to learn, fast to code, ready for production Documentation: https://fastapi.tiangolo.com Source Code: https://github.com/fastapi/fastapi FastAPI is a modern, fast (high-performance), web framework for building APIs with Python based on standard Python type hints. The key features are: Fast: Very high performance, on par with NodeJS and Go (thanks to Starlette and Pydantic). One of the fastest Python frameworks available. Fast to code: Increase the speed to develop features by about 200% to 300%. * Fewer bugs: Reduce about 40% of human (developer) induced errors. * Intuitive: Great editor support. Completion everywhere. Less time deb…

  • luongnv89/claude-howto
    github-trending

    A visual, example-driven guide to Claude Code — from basic concepts to advanced agents, with copy-paste templates that bring immediate value. http://luongnv.com/claude-howto/ 🌐 Language / Ngôn ngữ / 语言 / Мова: English | Tiếng Việt | 中文 | Українська | 日本語 Master Claude Code in a Weekend Go from typing claude to orchestrating agents, hooks, skills, and MCP servers — with visual tutorials, copy-paste templates, and a guided learning path. Get Started in 15 Minutes | Find Your Level | Browse the Feature Catalog Table of Contents The Problem How Claude How To Fixes This How It Works Not Sure Where to Start? Get Started in 15 Minutes What Can You Build With This? FAQ Contributing License The Problem You installed Claude Code. You ran a few prompts. Now what? The official docs describe features…

  • Meloong-Git/PCL
    github-trending

    Minecraft 启动器 Plain Craft Launcher(PCL)。 https://meloong.com/PCL Plain Craft Launcher 包含 PCL 的大部分源代码,包括 UI 库、动画模块、下载模块、Minecraft 启动模块等! 代码并不是实时更新的,它会在每次 PCL 发布更新时同步一次。 非常感谢社区的大力支持! 相关资源 PCL 下载:下载可免费使用的正式版 PCL! PCL 功能投票:来参加投票吧,开发者会优先处理票数较高的项目! 帮助文档库:PCL 内置帮助文档的存储库

  • php/php-src
    github-trending

    The PHP Interpreter https://www.php.net The PHP Interpreter PHP is a popular general-purpose scripting language that is especially suited to web development. Fast, flexible and pragmatic, PHP powers everything from your blog to the most popular websites in the world. PHP is distributed under the Modified BSD License (SPDX-License-Identifier: BSD-3-Clause). Documentation The PHP manual is available at php.net/docs. Installation Prebuilt packages and binaries Prebuilt packages and binaries can be used to get up and running fast with PHP. For Windows, the PHP binaries can be obtained from windows.php.net. After extracting the archive the *.exe files are ready to use. For other systems, see the installation chapter. Building PHP source code For Windows, see Build your own PHP on Windows. For …

  • supabase/supabase
    github-trending

    The Postgres development platform. Supabase gives you a dedicated Postgres database to build your web, mobile, and AI applications. https://supabase.com Supabase Supabase is the Postgres development platform. We're building the features of Firebase using enterprise-grade open source tools. Hosted Postgres Database. Docs Authentication and Authorization. Docs Auto-generated APIs. REST. Docs GraphQL. Docs Realtime subscriptions. Docs Functions. Database Functions. Docs Edge Functions Docs File Storage. Docs AI + Vector/Embeddings Toolkit. Docs Dashboard Watch "releases" of this repo to get notified of major updates. Documentation For full documentation, visit supabase.com/docs To see how to Contribute, visit Getting Started Community & Support Community Forum. Best for: help with building, …

  • You are the Team — Anekha Sokhal, Moshi
    latentspace· 22-oct

    How Moshi turns market data into actionable insights, and why AI tools have to fit the trader’s workflow.

  • [AINews] OpenAI’s Patch the Planet program is 1 of 2 parties to discover PHP2Shell vulnerabilities in core PHP affecting 70% of the web, using GPT-5.6 Sol; coordinated response over 2 months
    latentspace· 22-oct

    The Big Hardening begins

  • Claude Mods: Flipping the Harness Inside Out
    latentspace· 21-oct

    Claude Mods is an early form of the Attention Interface. It flips the agent harness paradigm from the harness facing the machine, to the harness facing the human.

  • Why AI Compute Comes in Rectangles — Erik Bernhardsson, Modal CEO
    latentspace· 22-oct

    Elastic GPUs, sandbox growth, and the economics of the agent cloud

  • Fragments: October 21
    martin-fowler· 21-oct

    Gergely Orosz is frustrated at those that entered his explicitly “No AI” essay competition and used AI. He goes on to say: When I start to suspect some part is AI about someone I don’t know: how can I tell how much of it is? And how much time and effort do I want to invest to figure out? I fear most people do not realize this last part: that when it takes time and effort from others to figure out what % is AI, and what % is YOU, then I will simply assume it’s probably 100% AI and 0% you So when producing anything that is meant for other humans, if you use even a little AI, you risk the assumption that it is all AI and pointless to pay attention to In general, I agree with him, and react much the same. Once I hear LLM Voice, I flip the bozo bit and check out of the post. But as I do this I…

  • Ontology-Driven Observability: Building an End-to-End Knowledge Graph at Netflix Scale
    netflix-tech· 16-oct
  • Single-tenant Titus: VM-level isolation on a multi-tenant container platform
    netflix-tech· 22-oct
  • Donating Agent Skills to the Agentic AI Foundation
    simonw· 22-oct

    <p><strong><a href="https://www.anthropic.com/news/donating-agent-skills-to-the-agentic-ai-foundation">Donating Agent Skills to the Agentic AI Foundation</a></strong></p> News today from Anthropic:</p> <blockquote> <p>We’re committed to keeping Agent Skills open, community-driven, and vendor-neutral. Today, we are donating the standard to the Agentic AI Foundation (AAIF) under the Linux Foundation, <a href="https://www.anthropic.com/news/donating-the-model-context-protocol-and-establishing-of-the-agentic-ai-foundation">which we co-founded</a> with Block and OpenAI last year, and to which we donated the Model Context Protocol (MCP).</p> </blockquote> <p>I'm pleased to note I called this one <a href="https://simonwillison.net/2025/Dec/19/agent-skills/">last December</a>, when Anthropic firs…

  • Today's PHP Security Release, and How We're Strengthening PHP Security
    simonw· 21-oct

    <p><strong><a href="https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/">Today&#x27;s PHP Security Release, and How We&#x27;re Strengthening PHP Security</a></strong></p> If you're running anything on PHP it's vital you upgrade - today's updates (across the entire PHP 8.x line) address two remote code execution holes, and there have been exploits circulating since last night, thanks to a leak in the coordinated disclosure process.</p> <p>This post from the PHP Foundation explain what went so wrong:</p> <blockquote> <p>On Tuesday, October 20th, at around 15:00 UTC, the two CVE IDs began circulating on online forums and social media. They came with a wrong release time and a wrong CVSS score of 10.0 (the actual score is 9.2). No tec…

  • Panache — RTS Belle Époque pour mobile
    simonw· 21-oct

    <p><strong><a href="https://github.com/menufactory43/panache/">Panache — RTS Belle Époque pour mobile</a></strong></p> Well this is delightful: I <a href="https://simonwillison.net/2026/Oct/20/battledrones/">released Battle Drones</a> yesterday under an Apache 2.0 License and there's already a French language fork which reskins the game to take place in steampunk 1900s France and adds an animated intro!</p> <blockquote> <p><strong>Panache</strong> est un jeu de stratégie en temps réel pour mobile et navigateur, dans la France de la Belle Époque (vers 1900) : dirigeables, Fardiers à vapeur, Creusot cuirassés, automates en képi, Gargantua la forteresse marchante — et beaucoup de panache.</p> </blockquote> <p>You can <a href="https://menufactory43.github.io/panache/">play Panache here</a> - …

  • Quoting Armin Ronacher
    simonw· 22-oct

    <blockquote cite="https://twitter.com/mitsuhiko/status/2113207589978636646"><p>As fun as AI is, we built so much bad software over the last 30 years, and now the universe is punishing us for our sins.</p></blockquote> <p class="cite">&mdash; <a href="https://twitter.com/mitsuhiko/status/2113207589978636646">Armin Ronacher</a></p> <p>Tags: <a href="https://simonwillison.net/tags/security">security</a>, <a href="https://simonwillison.net/tags/generative-ai">generative-ai</a>, <a href="https://simonwillison.net/tags/armin-ronacher">armin-ronacher</a>, <a href="https://simonwillison.net/tags/ai">ai</a>, <a href="https://simonwillison.net/tags/ai-security-research">ai-security-research</a>, <a href="https://simonwillison.net/tags/llms">llms</a></p>

  • DE STAAT - FREEDOM (Official Music Video)
    simonw· 22-oct

    <p><strong><a href="https://www.youtube.com/watch?v=hKO4pQtIXow">DE STAAT - FREEDOM (Official Music Video)</a></strong></p> OK well this is a first for me... at <a href="https://www.youtube.com/watch?v=hKO4pQtIXow&amp;t=44s">00:44</a> in this new music video by Dutch alternative rock band <a href="https://en.wikipedia.org/wiki/De_Staat">De Staat</a>:</p> <p><video src="https://static.simonwillison.net/static/2026/freedom-pelican.mp4" poster="https://static.simonwillison.net/static/2026/freedom-pelican-poster.jpg" preload="none" loop="1" controls="1" playsinline="1" muted="1" width="1280" height="720" style="display: block; width: 100%; height: auto;" > </video> </p> <p>The visual effects are credited to Matties Grooten of <a href="https://fakeitorleaveit.com">Fake it or Leave it</a>. <p><…