Developer News
Curated signals for developers. Updated hourly.
ur rag can return 200 and still be cooked - how we built Goose on SigNoz
ok so real talk. your latency graph looks clean. error rate is chilling. every /chat is HTTP 200. and the answers are justβ¦ wrong. like confidently wrong. mid. thatβs the thing that lowkey haunted us after HackRx RAG 6.0 . like ~ 1000 teams , we some
The number that lied: rebuilding a usage meter that actually helps
Short version first, for anyone who just wants the outcome: I run Claude Code on a flat monthly subscription, not pay-as-you-go. For months that plan never gave me a reason to look closely at it, so I stopped looking. Then an overnight automation bur
We Got the Prompt Cache Working. Our Pipeline Got Slower.
"You're spawning a fresh codex exec for every single call? Just run the app-server and reuse a thread. The prompt cache alone will pay for it." That sentence sounds so obviously right that nobody ever benchmarks it. We run a small bazaar of headless
Claude Opus 5 leads on agentic work - and undercuts Fable 5 on cost
Claude Opus 5 is out, and Artificial Analysis - who supported Anthropic's pre-release evaluation - just dropped their full benchmark breakdown. The headline: new top model for agentic knowledge work, and cheaper per task than Fable 5. That combinatio
Why I Put Mirth Connect in Front of FastAPI Instead of Parsing HL7 in Python
When I started building my Maternity HL7-to-FHIR Pipeline , my first instinct was to do everything in Python. Parse the HL7 message, map the fields, validate the FHIR resource, persist it, all in one FastAPI service. It was clean. It was simple. It w
Building a Cross-Platform Disk Usage Analyzer in C
I wanted a low-level C project that touches memory management, recursive filesystem traversal, and platform-specific APIs - so I built a terminal disk usage analyzer from scratch. No external libraries, just the C standard library and OS system calls
Is Speculative Decoding's Speedup a Hardware Problem or a Model Problem?
A follow-up/sub-part to Part 3 of the LLM inference internals series. Part 3 built sampling-mode speculative decoding with KV caching on both the draft and verifier sides, and it worked correctly, but the speedup it delivered didn't match expectation
Our AI Agent Told a Customer It Processed a Refund. It Didn't.
I want to start with the moment that actually made this project feel real, not theoretical. We had a demo support bot running, testing random refund flows, and at some point it responded with something like: "I've gone ahead and processed your refund
How To Know Whether AI Fixed The Bug Or Hid The Bug In 2026
The most dangerous sentence in an AI-built app is often: The bug is fixed. That sentence can mean several different things: the original symptom disappeared; the error message was hidden; the failing path was bypassed; the code now handles one exampl
Our incident-response agent got the root cause wrong 7 times out of 12. It still never made a bad rollback.
We ran Agent K against 12 seeded production incidents. It named the correct root cause 5 times out of 12 - 3 out of 9 if you discard the runs we couldn't cleanly attribute. Over the same 12 runs it produced the correct rollback / no-rollback verdict
Postgres RLS multi-tenancy: two traps that silently disable your policies
Most multi-tenant applications keep tenants apart with one line of code, repeated forever: SELECT * FROM documents WHERE organization_id = $ 1 That line is load-bearing. Forget it once - in a new endpoint, in a join, in a hotfix at 2am, in a report s
AI Agent Safety and Compliance Tools: A 2026 Comparison
Three categories of AI agent safety tooling: observability, security guardrails, and compliance evidence. What each does, where each falls short, and the one most teams are missing. Bottom line: tools for keeping AI agents safe fall into three groups
I Let an Agent Take Over an Account With Every Permission Check Green
Clone it. Run it. Tell me where I'm wrong. git clone https://github.com/keniel13-ui/sequence-attack-repro cd sequence-attack-repro && python3 repro.py Stdlib only. No install. No model call. No network. About ten seconds. In June I wrote about this f
π The JavaScript Event Loop: From "What?" to "Oh, NOW I Get It!" (A Deep Dive)
The most misunderstood part of JavaScript - finally explained with analogies, diagrams, and zero hand-waving. If you've ever wondered why setTimeout(fn, 0) doesn't actually run in 0 milliseconds, or why Promises always run before your setTimeout call
The hacker who humiliated spyware makers and was never caught
An awe-inspiring hacktivist who hacked two controversial government spyware makers may be the most prolific hacker to have never gotten caught. What do we know about Phineas Fisher?
MCP versus API: what assistants need that your REST endpoints do not spell out
A product manager asks whether ChatGPT can βjust call our APIβ the way a deploy script does. The honest answer is usually no. A REST endpoint returns JSON when something supplies the right path, headers, and body. An assistant needs a named capabilit
My Solana Program Security Checklist
My Solana Program Security Checklist This is for anyone shipping an Anchor program to mainnet - especially if you're coming from a web2 background and looking for the Solana equivalent of a PR template. Run it top to bottom before every deploy. Every
I built a tool to prove my multi-agent harness was worth it. It told me it wasn't.
I spend most of my time on agentic systems, and I had absorbed the same idea everyone else has: a planner improves things, and a panel of drafters with a judge improves them further. It sounds obviously true. More thinking, more review, better answer
Kmemo: a semantic cache for LLM calls that refuses to serve you the wrong answer
An exact-match cache misses "how do I reverse a list in Python" when it has already answered "python list reverse". A semantic cache doesn't: it embeds the prompt, finds the closest one it has seen, and replays that answer instead of calling the mode
MCP in enterprise: access control and audit logging
MCP in enterprise: access control and audit logging Ship an MCP server at a company with compliance requirements and you will hit the same wall every team hits: the protocol connects your AI agent to tools beautifully, and it gives you almost nothing
I Run Bare-Metal Kubernetes on $200 of Scrap Hardware (And Why I Burned 3 SD Cards Learning)
I Run Bare-Metal Kubernetes on $200 of Scrap Hardware (And Why I Burned 3 SD Cards Learning) From a bricked Raspberry Pi to a 4-node Talos Linux cluster running Cilium eBPF, ArgoCD, and Longhorn - every failure, every fix, and the homelab that now ho
Why My Deploy Key Lives in a Password Manager, Not on Disk
I have an SSH key that has never once existed as a file on my disk. It lives only inside an encrypted password manager vault, and every time it's used, I get a prompt to approve it. Here's why I set that up, and the near-miss that convinced me it was
What Durable Actually Means for Money-Critical Code
Working on systems that move real money changes what "saved to the database" is allowed to mean. A row existing in Postgres is not the same claim as "this record is durable and this record is true." Here's the pattern I now apply to any code where a