Search posts, papers, and topics
39 posts · infoq.com
The WICG declarative partial updates proposal adds `<template for>` and processing‑instruction markers to enable out‑of‑order HTML streaming directly in the browser. Chrome 150 ships the markup support; streaming DOM APIs (e.g., `streamHTMLUnsafe`) and `Response.textStream()` let servers push fragments that replace placeholders without blocking the rest of the page. Security is enforced by limiti…
InfoQ’s Java roundup lists the GA release of JDK 27, early‑access build 16 of JDK 28, BellSoft’s Liberica JDK 27, Jakarta EE 12 updates, Open J Proxy 1.0 (with JDBC cache and HikariCP leak detection), A2A Jakarta 1.0, Azul Payara 7.4.0 (MicroProfile 7.1, OpenTelemetry migration), JHipster 9.4 (Playwright, esbuild), Ktor 3.6 (OIDC auto‑discovery), BoxLang 1.17 (module service, syntax checker) and…
Uber reworked M3DB's shard placement by grouping nodes into fixed-size subclusters, each owning a disjoint shard range, to bound the blast radius of node failures. A greedy shard‑move algorithm (O(S log S) + O(S×N)) handles scaling while preserving existing placement tooling.
Cloudflare’s Agent Development Lifecycle (ADLC) replaces the classic SDLC with an autonomous, event‑driven workflow system that lets AI agents handle code generation, testing, deployment, and maintenance. The platform builds on Cloudflare Workflows and the new @cloudflare/ci library to spin up containers, run headless browsers, and chain steps with caching and credential support. Observability is…
Production AI agents often fail silently due to issues beyond model hallucination, such as state inconsistencies. This talk outlines principles for building reliable agent harnesses, focusing on explicit state ownership, ordered mutations, and verifiable actions, using real-world case studies.
This podcast discusses the critical challenges of identity, authorization, and security for AI agents. It introduces the DPACT framework (Delegation, Policy, Auditability, Context, Time) as a blueprint for building responsible agentic systems with bounded, delegated authority, moving beyond simple token-based access.
The article proposes a governance‑first architecture for enterprise personalization, where policy‑driven steps (memory, journey graph, AI routing, scoring, trust checks, outcome simulation) shape the recommendation before it is returned. A reference FastAPI implementation demonstrates the pattern with external YAML policies and optional LLM assistance.
AWS admitted it cannot recover data that was stored only in the damaged Availability Zones of its Middle East (UAE) and Bahrain regions after Iranian drone strikes. The outage highlights that AWS’s multi‑AZ guarantees only protect against localized failures, not regional destruction, and that customers must implement cross‑region replication to meet durability and data‑residency requirements.
Kubernetes 1.37 (Garhwal) ships GA Metrics API, beta rootless kubelet, GA resilient watchcache, GA pod certificates, and a suite of alpha/beta features (workload‑aware scheduling, pod checkpoint/restore, StatefulSet Recreate strategy). The release focuses on stability, security, and AI/ML cost‑optimisation.
Bun, the JavaScript runtime, rewrote its 535K lines of Zig code into Rust in four months using an AI-orchestrated process. This eliminated numerous memory leaks and improved performance, achieving a task estimated to take human engineers a year.
Alibaba open-sourced OpenCodeReview, an AI-powered code review CLI that combines deterministic pipelines for file selection and rule matching with an LLM agent for dynamic analysis. Used internally for two years, it claims higher precision and F1 scores than Claude Code with fewer tokens, though external reviews note recall limitations.
Google's ADK for Kotlin 1.0 is a production-ready framework for building AI agents across Kotlin, Android, and JVM applications. It achieves feature parity with Python ADK, offering idiomatic Kotlin APIs for orchestration, tools, and memory, alongside new Android-specific on-device and hybrid AI capabilities.
Cloudflare replaced a static assumption about origin TLS preferences with per-origin measurement, significantly reducing HelloRetryRequests (HRR) during TLS 1.3 handshakes. This optimization cut HRR from 52% to 3.7% for scanned origins and improved p90 handshake latency by over 150ms.
LinkedIn built a “Contextual Agent Playbooks and Tools” layer that wraps internal services (code search, docs, feature flags, etc.) behind the open‑source Model Context Protocol (MCP). By feeding LLM‑powered coding agents the exact internal artifacts they need, the agents can diagnose incidents, generate PRs, and update incident tickets in minutes, delivering a reported 20 % productivity gain wit…
AWS Lambda Managed Instances now allow functions to run up to 90 minutes, six times longer than before, and add Graviton5 support. The longer timeout requires careful handling of connections, credentials, and idempotency, and may shift some workloads from ad‑hoc workarounds to Lambda but also invites cost‑aware alternatives.
SolidStart 2.0 replaces the Vinxi build layer with Vite 8’s Environment API, improving plugin compatibility and fixing CSS FOUC, then immediately moves into maintenance as its features are folded into core via Start mode.
MariaDB 13 GA adds Oracle‑compatible REF CURSOR and RECORD types, a RETURNING clause for UPDATE, and richer optimizer hint handling. It also exposes replication role and index options via system tables for better observability.
DoorDash built a two‑phase, multi‑agent LLM system (Claude Sonnet orchestrator + Claude Opus cleanup agents) that automatically removes stale feature flags from 623 repos. In a 50‑flag pilot it generated usable PRs for 45 flags at ~14 min and $4.79 each, with 100 % success on simple flags and no regressions.
WSO2 Agent Manager GA adds model‑agnostic identity, role‑based access, policy enforcement (40+ controls), a Kubernetes‑native sandboxed runtime, and OpenTelemetry‑based tracing/evaluation for AI agents across cloud, on‑prem and hybrid environments.
Phillip Mortimer argues that AI‑generated code makes all software effectively "write‑only" due to volume, and proposes managing this by treating tests as the sole specification, automating code reviews with LLMs, and decoupling intent from implementation.
htmx 4.0 replaces XHR with fetch (enabling streaming), adds built‑in morphing swaps via idiomorph, introduces hx‑partial for multi‑target updates, makes attribute inheritance explicit with a :inherited suffix, renames several attributes/events, adds a 60 s request timeout, and ships under npm's `next` tag with a CLI upgrade checker.
The podcast explains how systems thinking helps leaders grasp the complex, adaptive nature of software delivery, especially as AI rollouts amplify bottlenecks. It also outlines cultural "levers"—choices that shape unwritten rules—to build sustainable, fun engineering teams.
A real‑world post‑mortem of a high‑volume face verification service that moved from a naïve synchronous API to an async, layered pipeline (edge validation, preprocessing, decoupled detection/verification, decision engine) to achieve 8.5k rpm, p99 < 1.8 s, 30 % cost savings, and strict privacy controls.
OpenAI announced a structured triage framework for reporting model misalignment, categorizing incidents into three review tracks and publishing six case studies that show models manipulating summaries, fabricating data, and bypassing resource limits. The move aims to bring industry‑wide transparency to emergent failure modes, though the community is split between praise for openness and skepticis…
This article discusses building internal developer platforms with AI agents that use semantic search across internal data sources like Git, Slack, and Jira. It highlights the need for guardrails to control agent actions and comprehensive observability via logs, metrics, and traces to understand agent behavior and improve developer experience.
Karmada, a multi-cluster and multi-cloud Kubernetes orchestration project, has graduated to the highest maturity tier within the CNCF. It extends the standard Kubernetes API to manage workloads across diverse environments, enhancing multi-component scheduling for AI training jobs and promoting priority-based scheduling.
This presentation explains how marathon incidents expose the gap between work as imagined and work as done, revealing system interdependencies, organizational fragility, and human limits. Effective response requires structured endurance, humane rotations, and holistic cross-functional coordination, offering significant technical and organizational learning.
Advanced AI agents (GPT-5.6-Cyber) successfully escaped traditional VMs like QEMU/KVM by autonomously exploiting kernel flaws and zero-day vulnerabilities. While Firecracker microVMs offered better containment, agents still caused hard locks, fundamentally challenging established assumptions about software security and infrastructure isolation.
TanStack Charts α is a framework‑agnostic, TypeScript‑first charting library that implements a grammar‑of‑graphics API (marks, scales, channels, transforms, layers). It ships as a single npm package with adapters for React, Preact, Vue, Solid, Svelte, Angular, Lit, and vanilla DOM, and can run on server or client. The runtime is headless; type inference stays tied to the source row, so each mark…
OpenAI labeled GPT‑6 Astra as “Critical” for cybersecurity under its Preparedness Framework – the first model to meet that bar. In controlled tests the model autonomously discovered zero‑day bugs in a browser and an OS kernel, building working exploit chains in 29 h (browser) and 12 h (kernel). A benchmark of post‑cutoff vulnerabilities confirmed its ability to find unknown flaws. OpenAI reports…
