Search posts, papers, and topics
Alibaba open-sourced OpenCodeReview, an AI-powered code review CLI that combines deterministic pipelines for file selection and rule matching with an LLM agent for dynamic analysis. Used internally for two years, it claims higher precision and F1 scores than Claude Code with fewer tokens, though external reviews note recall limitations.
Spec‑driven development encodes architectural rules as machine‑readable Zod schemas, letting automated agents (e.g., Copilot, Claude Code) be checked for boundary violations, API drift, and runtime invariants via AST analysis and CI tests.
The author turned a one‑off script that rendered each Jekyll page to Markdown and added a `<link rel="alternate" type="text/markdown">` tag into a reusable Jekyll plugin (jekyll‑md). The gem hooks into the build, extracts the main content (defaulting to `<main>` or `[role="main"]`), converts it to Markdown, injects the discovery link, and requires no per‑page front‑matter. Configuration is option…
Step‑by‑step recipe to run OpenBao (Vault fork) on Kubernetes using CloudNativePG as a password‑less, TLS‑authenticated PostgreSQL storage backend. Shows how to spin up a Kind cluster with the cnpg‑playground, deploy a 3‑node CNPG cluster with synchronous quorum replication, configure DatabaseRole‑based client certificates, set up pg_hba rules, and initialize OpenBao’s schema via a one‑off Job.
A step‑by‑step tutorial showing how to run a persistent, free Cloudflare Tunnel alongside a TypeScript/Node.js webhook consumer in Docker Compose, replacing ngrok for local webhook debugging.
DoorDash built a two‑phase, multi‑agent LLM system (Claude Sonnet orchestrator + Claude Opus cleanup agents) that automatically removes stale feature flags from 623 repos. In a 50‑flag pilot it generated usable PRs for 45 flags at ~14 min and $4.79 each, with 100 % success on simple flags and no regressions.
Agentic coding lets AI agents write, test, and submit code autonomously, shifting the bottleneck from writing to governing code in production. Enterprises face rising failures, unclear ownership, growing costs, and weakened controls, which require a unified pipeline visibility layer.
Cloudflare adds four granular roles (Metadata Read‑Only, Content Read‑Only, Editor, Admin) that can be scoped to a single Worker (or other Developer Platform resources). The roles let you enforce least‑privilege for teammates, CI/CD agents, or third‑party services, and can be granted via the dashboard or scoped API tokens.
Sebastián Passaro (Qubika) demonstrated a live RAG pipeline attack at Testear.la 2026, showing how a single poisoned document can hijack LLM outputs and trigger unsafe actions. He tied the demo to the OWASP LLM Top 10, highlighted open‑source tooling for finding such weaknesses, and advocated a defense‑in‑depth threat model for QA teams. The talk reframed AI from a testing aid to a security surfa…
Building AI agents is now easy, but as deployments grow into dozens or hundreds, companies lose visibility into ownership, usage, and cost—a problem called agent sprawl. Blocks Enterprise offers a private network that lets heterogeneous agents be discovered, permissioned, and audited across clouds without forcing a single framework.
Datadog’s Bits Chat adds a natural‑language interface to Slack, letting responders start investigations, get root‑cause analysis, generate code fixes, and close incidents without leaving the channel. The post walks through a sample e‑commerce outage to show the end‑to‑end workflow.
This article details how to diagnose PostgreSQL index bloat, write amplification, and buffer cache inefficiency using SQL tools like pgstattuple and pg_buffercache. It provides a reusable SQL toolbox and a Docker environment to identify and understand performance bottlenecks caused by MVCC-related index fragmentation.
This article addresses common security vulnerabilities in AI-generated "vibe-coded" applications, such as exposed API keys and data breaches. It provides practical steps and agent skills to build securely from the start, perform security reviews, and protect sensitive data and keys.
Avant replaced many personal AI‑assistant setups with a single, organization‑wide Claude Code configuration that embeds the company’s coding standards, project‑tracking links, and documentation. Treated as an internal product, the setup is versioned, owned by delivery engineers, and iteratively improved. The shared tool speeds routine tasks (scaffolding, tests, migrations, docs) and enforces cons…
AWS announced a new “project” onboarding flow that lets new users start building with default configurations, free credits, and simplified IAM handling. Sign‑in via Google/GitHub/Apple creates an isolated AWS account, auto‑provisions a CLI/agent toolkit, and lets you invite collaborators by email. Spend limits can be set per project, and advanced features (multi‑region, org policies) can be enabl…
Duolingo’s DevEx AI team built a program of AI‑literacy workshops, observability dashboards, office‑hours, and vendor partnerships to get engineers comfortable with LLM‑based tools. With that foundation they launched a PR‑risk‑assessment bot that auto‑approves low‑risk pull requests, cutting review bottlenecks while keeping defect rates flat.
A step‑by‑step tutorial for building a deterministic AST‑based security scanner that runs in GitHub Actions to catch prototype‑pollution, high‑entropy secrets, and unauthorized network egress in AI‑generated pull requests.
Google Cloud Consulting proposes a four‑pillar micro‑learning framework for enterprise AI upskilling: 5‑minute browser‑based exercises, pre‑configured sandboxes, daily streaks, and delivering runnable code each session. A pilot (Advent of Agents) showed >150k participants, 859k code runs, and a 31% daily return rate, suggesting short, frictionless tasks improve engagement versus traditional bootc…
Nvidia frames AI security as an engineering discipline, outlining required controls across the AI agent stack (model, harness, runtime) and advocating for enforceable boundaries, traceable identities, and evidence‑based testing. It highlights OpenShell as a sandboxed runtime, the Open Secure AI Alliance, and several vendor tools for testing and red‑team exercises.
The post proposes a three‑principle framework—Curiosity, Craft, and Care—to decide how much AI should author each artifact in a software development workflow. It argues that AI can be used aggressively for exploratory, disposable outputs (Curiosity) but should be limited for artifacts that commit the team to decisions (Craft) and for communications that require personal ownership (Care). The auth…
The article outlines a structured Verify→Investigate→Report→Resolve→Review workflow for GCP reliability incidents and stresses pre‑incident preparation across design, data, playbooks, and training. It lists concrete tools (Cloud Logging, Service Health, Gemini Assist) and reporting steps to help engineers reduce outage impact.
The author used GitHub Copilot CLI to port a Strava bot from Discord to Microsoft Teams in three days, a ~7× speedup over the three‑week manual effort. The post details token usage, cost, bugs that slipped through, and stresses that good test coverage is still essential.
Hostinger staff use custom AI agents to automate daily tasks—from code reviews to influencer lead sourcing—shifting their work from doing the work to managing the agents. Building reliable “harnesses” (prompt contexts, constraints) consumes most of the engineering effort, and agents still hallucinate, repeat work, or suggest unsafe fixes, so human oversight remains essential.
Google’s Threat Intelligence team outlines three AI‑driven shifts—software build changes, expanded attack surface, and enhanced threat capabilities—then describes their multi‑model, graph‑based defense stack (AI Threat Tracker, in‑editor “spellcheck”, Wiz Security Graph, Gemini‑powered AI Threat Defense) and concrete threat examples like supply‑chain poisoning, LLMJacking, and AI‑orchestrated cre…
Datadog Observability Pipelines now ships pre‑built Microsoft Sentinel Packs that map logs from Palo Alto, Fortinet, Cisco ASA, Cisco Meraki, and ExtraHop into Sentinel’s CommonSecurityLog or Syslog tables. Packs handle field extraction, severity derivation, and device‑action mapping, letting you filter or drop low‑value events before ingest, validate mappings with Live Capture, and reduce per‑GB…
Twilio built a two‑phase pipeline that first scores each error‑code doc with a deterministic script, then feeds only low‑scoring pages to an LLM (gpt‑5.4) using a strict prompt. The model’s diff is applied via git, linted, and opened as a PR for a reviewer. In 12 weeks they updated 1,138 pages (≈34.6 s/page) with a human reviewing every change, cutting manual effort from an estimated 18 k hours a…
pgAssistant 3.8.0 expands from a tuning advisor to a continuous PostgreSQL improvement platform, adding a Collector that records historical workload and environment data. It lets teams run an Observe‑Diagnose‑Prioritize‑Plan‑Implement‑Measure loop, compare consecutive snapshots, and measure the impact of applied recommendations.
A hands‑on benchmark of five LLM code‑review models (Claude Opus 5, GPT 5‑6 Sol, Grok 4.6, Kimi 3, GLM 5.3, Qwen 3.8 Max, DeepSeek v4 Pro) shows that all models ace tiny 15‑line diffs but diverge sharply on 100‑300‑line, cross‑file changes. The author built a deterministic harness (single HTTP call, fixed system prompt, JSON output) and measured detection rate, false‑positives, latency, token usa…
This article advocates writing end-to-end tests in the backend's language to leverage domain models and persistence tools for efficient test data setup. It details a strategy for structuring E2E tests with inline data creation, small helpers, and parallel execution considerations.
Cloudflare’s Agent Development Lifecycle (ADLC) replaces the classic SDLC with an autonomous, event‑driven workflow system that lets AI agents handle code generation, testing, deployment, and maintenance. The platform builds on Cloudflare Workflows and the new @cloudflare/ci library to spin up containers, run headless browsers, and chain steps with caching and credential support. Observability is…
