Rust

Today’s digest is split between practical infrastructure updates and the next wave of AI developer tooling: DuckDB 2.0, Rust GPU offload, VS Code, Mojo, Qwen, and AI security automation.

Today’s picks track AI tooling moving into real systems: tiny on-device models, local agent workflows, reusable skills, observability edge cases, and developer-controlled information feeds.

Today’s picks are about operational control: moderation models, agent security, passkey edge cases, WebKit network leaks, AI-ready CLI/logging patterns, and trace-driven performance analysis.

Today’s thread is AI coding infrastructure: open devtools, verifiable research output, agent memory, AI-friendly CLIs, stacked PRs, PDF inspection, and Rust moving higher up the web stack.

Anthropic acquires SDK-generation company Stainless. PyTorch Lightning hit by Shai-Hulud-family malware — AI training is now a supply-chain target. Mozilla rejects Chrome’s Prompt API push. Plus Bun’s six-day Rust rewrite, Red Hat’s no-EOL RHEL, and HN’s Claude-Code OpenClaw screenshots.

Weekend edition. Browser politics meet AI plumbing again — Mozilla files a hard ’no’ on Chrome’s Prompt API (the one that lets pages call into a browser-bundled LLM), 564 points on HN. Shai-Hulud-style supply chain attack lands in PyTorch Lightning; AI training pipelines are now in the same threat model as npm. Two Japanese-source items: VS Code ships Agent window for parallel coding agents, Node.js 26 enables Temporal by default. From the Chinese dev community: ‘Gemini got worse this week’ and ‘AI coding is more exhausting than the old way’ — both early signals that the cost side of the AI coding ledger is finally being talked about.

Claude Code is reportedly refusing requests or up-charging when commits mention ‘OpenClaw’ — 865 points on HN and counting. Shai-Hulud lands in PyTorch Lightning. Simon Willison digs into Anthropic’s Colossus-1 lease and the new ‘Elon can yank the compute’ supply-chain risk. Bun migrates from Zig to Rust in a week with Claude. Zed 1.0 ships. V2EX has the bug-reintroduction complaint we’ve all been thinking. Plus Rivian’s hard-off privacy switch, durable queues inside SQLite, and Daniel Lemire on beating binary search.

Chrome silently installs a 4GB Gemini Nano model, Bun ports its core from Zig to Rust, an Async Rust ‘still MVP’ rebuttal goes viral, Google ships Gemma 4 with speculative decoding, Coinbase cuts ~14% of staff.

A telling Thursday on HN. Zed 1.0 lands with the day’s highest score (1319 pts, HN #2) — but the #1 slot belongs to a GitHub issue inside anthropics/claude-code: a config file called HERMES.md, an internal A/B experiment, double-charged a customer ~$200 and Anthropic refused the refund (836 pts). HN #13 ‘We need a federation of forges’ (488 pts) keeps yesterday’s Ghostty-leaving-GitHub thread burning. AI: Mistral Medium 3.5 ships remote agents (HN #24). Security double feature: Copy Fail / CVE-2026-31431 (HN #3) and Ramp’s Sheets AI exfiltrating financials via prompt injection (HN #9). Japan’s Zenn delivers two strong Claude Code field reports — LayerX’s ‘ccgate’ auto-approves 97% of permission prompts; Finatext warns against handing Google accounts to AI agents. China’s V2EX is consumed by Xiaomi’s MiMo Token Plan.