Ai

Today’s digest is about the operational layer around AI agents: model releases, isolated sandboxes, prompt-injection resistance, model routing, cost tracing, and build-system migration.

Today’s picks are about engineering fundamentals around AI: reading hidden data, tightening compiler semantics, speeding up runtimes, documenting design systems, and giving agents safer cloud integrations.

Today is about the infrastructure around AI work: computer use, OAuth, PR spam controls, Mac containers, browser compatibility data, and isolated serverless execution.

Today is about AI work becoming infrastructure: agent harnesses, plugin directories, PR limits, vulnerability triage, faster TypeScript, and a few very practical device-level tools.

Today’s thread is operational AI: patch automation, prompt-injection boundaries, codebase memory, PR rate limits, and the review process around AI-generated code. The useful signal is less about speed and more about control.

Today’s thread is practical AI infrastructure: context compression, codebase memory, temporary cloud deployments, SQLite migrations, auth hardening, and agent-aware cloud security. V2EX was reachable, but its hot page had little technical signal today.

Today is about the infrastructure around AI agents: version control, browser sandboxes, code memory, scientific evaluation, cloud cost analysis, and the operational reality of agentic coding.

Today is about AI engineering infrastructure maturing around acquisitions, deployment simulation, agent-ready source control, shared agent knowledge, local models, and mobile security.

Today is about the less glamorous reality around AI tooling: recruiting backdoors, model export controls, local coding models, agent browsing, desktop sandboxes, and cloud-cost pressure.

Today is about agent-era engineering: securing reusable skills, rethinking IDE-centered workflows, making RAG more structural, treating deletes as lifecycle design, and pushing WASI forward as a safer execution substrate.

Today is about AI agents becoming operational infrastructure: Anthropic is pushing governance proposals, Fedora shows what happens when automation gets write access, and macOS containers plus Postgres scaling continue to reshape developer platforms.

Today is about developer infrastructure shifting under our feet: Anthropic shipped Fable 5 and Mythos 5, Apple exposed more of its macOS container stack, npm v12 is preparing breakage, and Cloudflare is adding AI spend controls.

Today is about the engineering systems around AI: supply-chain security, Apple’s Gemini-backed architecture, OpenCV 5, high-speed inference, Postgres query hints, vector search, and reusable agent skills. The useful question is how these pieces behave in production, not how impressive they sound in isolation.

Anthropic acquires SDK-generation company Stainless. PyTorch Lightning hit by Shai-Hulud-family malware — AI training is now a supply-chain target. Mozilla rejects Chrome’s Prompt API push. Plus Bun’s six-day Rust rewrite, Red Hat’s no-EOL RHEL, and HN’s Claude-Code OpenClaw screenshots.

LinkedIn fingerprints 6,278 browser extensions, PyTorch Lightning gets a Shai-Hulud supply-chain hit, Anthropic ties up $200M with the Gates Foundation, and Mozilla draws a line against Chrome’s Prompt API.

HN’s top three slots are all AI trust stories: Claude Code allegedly refusing or upcharging requests when commits mention ‘OpenClaw’ (865 pts); PyTorch Lightning hit by a Shai-Hulud-themed supply-chain attack (299 pts); Rivian shipping a real, vehicle-wide kill switch for cloud telemetry (331 pts). V2EX threads document a Gemini quality regression and a clean mihomo-via-Tailscale exit-node recipe. Publickey covers Node.js 26 enabling Temporal by default and Mojo reaching 1.0 Beta. Simon Willison ships a CSP allow-list iframe experiment and quotes Boris Mann’s deadpan: ‘11 AI agents’ is as meaningful as ‘11 browser tabs.’ On GitHub Trending, obra/superpowers — a packaging convention for Claude Code skills — keeps climbing.

LinkedIn probes 6,278 browser extensions and ships the encrypted result on every request — 299 points on HN. Mozilla files a formal ‘opposed’ on Chrome’s Prompt API push, opening the browser-AI standards war in earnest. Simon Willison reads GitLab’s Act 2 layoff post as the SaaS survival script for the agentic era. Zenn’s #1 today asks why some engineers viscerally hate software design principles. Publickey reports Claude Platform on AWS shipping GA. V2EX has parallel threads on the explosion of AI API resellers and on AI coding being more exhausting than writing it yourself. Plus CopyFail not getting disclosed to Gentoo, a 400-line shell coding-agent harness, and a Game Boy emulator in F#.

LinkedIn probes 6,278 browser extensions and ships the encrypted result on every request — 299 points on HN. Mozilla files a formal ‘opposed’ on Chrome’s Prompt API push, opening the browser-AI standards war in earnest. Simon Willison reads GitLab’s Act 2 layoff post as the SaaS survival script for the agentic era. Zenn’s #1 today asks why some engineers viscerally hate software design principles. Publickey reports Claude Platform on AWS shipping GA. V2EX has parallel threads on the explosion of AI API resellers and on AI coding being more exhausting than writing it yourself. Plus CopyFail not getting disclosed to Gentoo, a 400-line shell coding-agent harness, and a Game Boy emulator in F#.

Claude Code is reportedly refusing requests or up-charging when commits mention ‘OpenClaw’ — 865 points on HN and counting. Shai-Hulud lands in PyTorch Lightning. Simon Willison digs into Anthropic’s Colossus-1 lease and the new ‘Elon can yank the compute’ supply-chain risk. Bun migrates from Zig to Rust in a week with Claude. Zed 1.0 ships. V2EX has the bug-reintroduction complaint we’ve all been thinking. Plus Rivian’s hard-off privacy switch, durable queues inside SQLite, and Daniel Lemire on beating binary search.

Mozilla draws a hard line on Chrome’s Prompt API, Mozilla itself uses Claude Mythos to fix 423 Firefox security bugs in a single month, LinkedIn is caught fingerprinting browser extensions on every request, Shai-Hulud lands in PyTorch Lightning, and Anthropic teams up with Blackstone, Hellman & Friedman, and Goldman to spin up an enterprise AI services company. Meanwhile V2EX is having a Claude-Code-fatigue moment.