<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0">
  <channel>
    <title>Reveneau AI News</title>
    <link>https://reveneau.com/ainews</link>
    <description>Short briefs on AI and software engineering: developer tools, open-source projects, model and agent releases. Each item links its original source.</description>
    <language>en-us</language>
    <item>
      <title>iFixAi runs 61 inspections to audit an AI agent's business behaviour</title>
      <link>https://reveneau.com/ainews/ifixai-ai-agent-auditor-61-inspections-apache-31955-stars</link>
      <guid>https://reveneau.com/ainews/ifixai-ai-agent-auditor-61-inspections-apache-31955-stars</guid>
      <pubDate>Thu, 22 Oct 2026 05:25:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>iFixAi is an open-source command-line auditor for AI agents, with 31,955 GitHub stars and 1,618 forks, and a new release yesterday added a safety inspection for companion chat agents. (Source: GitHub)</description>
    </item>
    <item>
      <title>Sumi.css styles plain HTML in 6.7 KB with no classes</title>
      <link>https://reveneau.com/ainews/sumi-css-classless-framework-6-7-kb-no-build</link>
      <guid>https://reveneau.com/ainews/sumi-css-classless-framework-6-7-kb-no-build</guid>
      <pubDate>Thu, 22 Oct 2026 05:20:00 +0000</pubDate>
      <category>Open source</category>
      <description>Sumi.css is a classless CSS framework that styles plain semantic HTML, including forms, tables, cards and modals, in one 6.7 KB gzipped file. (Source: GitHub)</description>
    </item>
    <item>
      <title>Andee reaches 2,277 stars for an on-device Android agent</title>
      <link>https://reveneau.com/ainews/andee-on-device-android-agent-2277-stars-trendshift-23</link>
      <guid>https://reveneau.com/ainews/andee-on-device-android-agent-2277-stars-trendshift-23</guid>
      <pubDate>Thu, 22 Oct 2026 04:20:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>Andee, an Android app that runs an AI agent on the device, taps and types in any other app through the accessibility service and keeps its memory on the phone, carries 2,277 stars and ranks 23 on Trendshift's daily list. (Source: GitHub)</description>
    </item>
    <item>
      <title>Opposable launches an on-device phone agent, 7.3 seconds per tap</title>
      <link>https://reveneau.com/ainews/opposable-on-device-phone-agent-gui-owl-15-2b-7-3-seconds</link>
      <guid>https://reveneau.com/ainews/opposable-on-device-phone-agent-gui-owl-15-2b-7-3-seconds</guid>
      <pubDate>Thu, 22 Oct 2026 04:15:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>Opposable released an Android app that reads the screen and taps for you with a 2B vision-language model running on the phone, with step timings and task success rates published alongside. (Source: Opposable)</description>
    </item>
    <item>
      <title>Google publishes its internal Rust style guide for the first time</title>
      <link>https://reveneau.com/ainews/google-rust-style-guide-public-first-commit-october-21</link>
      <guid>https://reveneau.com/ainews/google-rust-style-guide-public-first-commit-october-21</guid>
      <pubDate>Thu, 22 Oct 2026 04:10:00 +0000</pubDate>
      <category>Productivity</category>
      <description>Google exported its internal Rust style guide to the public google/styleguide repository, giving outside Rust teams the first look at the rules Google writes its own Rust code against. (Source: Google)</description>
    </item>
    <item>
      <title>Google rankings swung and 14 third-party trackers showed elevated readings</title>
      <link>https://reveneau.com/ainews/google-search-ranking-volatility-october-20-21-trackers-light-up</link>
      <guid>https://reveneau.com/ainews/google-search-ranking-volatility-october-20-21-trackers-light-up</guid>
      <pubDate>Thu, 22 Oct 2026 03:35:00 +0000</pubDate>
      <category>Go-to-market</category>
      <description>Search Engine Roundtable reports a wave of Google ranking swings on 20 and 21 October 2026, with elevated signals on 14 third-party trackers and multiple site owners reporting clicks down 60 to 70 percent at top-3 positions. (Source: Search Engine Roundtable)</description>
    </item>
    <item>
      <title>Datalab released Indra, a 1M-parameter OCR model that beats Tesseract</title>
      <link>https://reveneau.com/ainews/datalab-indra-1m-parameter-ocr-cpu-15x-tesseract</link>
      <guid>https://reveneau.com/ainews/datalab-indra-1m-parameter-ocr-cpu-15x-tesseract</guid>
      <pubDate>Thu, 22 Oct 2026 03:30:00 +0000</pubDate>
      <category>Open source</category>
      <description>Datalab's new Indra OCR model has 1 million parameters, runs on CPU through ONNX, and reports 15 times the throughput of Tesseract with higher text accuracy on OmniParseBench. (Source: GitHub)</description>
    </item>
    <item>
      <title>Graphify ranks 16 on Trendshift and crosses 131,000 stars for codebase graphs</title>
      <link>https://reveneau.com/ainews/graphify-codebase-knowledge-graph-131795-stars-trendshift-16</link>
      <guid>https://reveneau.com/ainews/graphify-codebase-knowledge-graph-131795-stars-trendshift-16</guid>
      <pubDate>Thu, 22 Oct 2026 03:25:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>Graphify, a tool that turns a codebase into a knowledge graph that Claude Code, Cursor, Codex and Gemini CLI can query, ranks 16 on Trendshift's daily list and has 131,795 GitHub stars. (Source: GitHub)</description>
    </item>
    <item>
      <title>Microsoft says Storm-0940 ran ARTEX to break into ConnectWise and 2,250 tenants</title>
      <link>https://reveneau.com/ainews/microsoft-storm-0940-artex-connectwise-supply-chain-2250-tenants</link>
      <guid>https://reveneau.com/ainews/microsoft-storm-0940-artex-connectwise-supply-chain-2250-tenants</guid>
      <pubDate>Thu, 22 Oct 2026 03:20:00 +0000</pubDate>
      <category>Infrastructure</category>
      <description>Microsoft Security Research says Storm-0940 used the open-source ARTEX framework to automate a ConnectWise supply chain compromise and sign-in attempts against more than 2,250 Microsoft 365 tenants. (Source: Microsoft Security Blog)</description>
    </item>
    <item>
      <title>Essay collects the data on AI, coding and the fate of juniors</title>
      <link>https://reveneau.com/ainews/compiler-end-programming-essay-hrih-si-metr-faros-stanford</link>
      <guid>https://reveneau.com/ainews/compiler-end-programming-essay-hrih-si-metr-faros-stanford</guid>
      <pubDate>Thu, 22 Oct 2026 02:25:00 +0000</pubDate>
      <category>Productivity</category>
      <description>An essay on hrih.si argues that AI is doing to coding what FORTRAN did in 1957, pulls numbers from the Stack Overflow survey, METR's randomised trial and Faros AI's telemetry, and the piece sits at 94 points on Hacker News. (Source: hrih.si)</description>
    </item>
    <item>
      <title>Steam users are asking Valve for a filter that hides AI-made games</title>
      <link>https://reveneau.com/ainews/steam-no-ai-filter-next-fest-ai-slop-ign</link>
      <guid>https://reveneau.com/ainews/steam-no-ai-filter-next-fest-ai-slop-ign</guid>
      <pubDate>Thu, 22 Oct 2026 02:20:00 +0000</pubDate>
      <category>Go-to-market</category>
      <description>IGN reports that Steam users are asking Valve for a filter to hide AI-generated games from the Next Fest demo festival, which they say has been flooded with low-effort AI submissions. (Source: IGN)</description>
    </item>
    <item>
      <title>Google Cloud adds OpenAI's GPT-6 models to its model garden</title>
      <link>https://reveneau.com/ainews/google-cloud-brings-openai-gpt-6-models-model-garden-codex</link>
      <guid>https://reveneau.com/ainews/google-cloud-brings-openai-gpt-6-models-model-garden-codex</guid>
      <pubDate>Thu, 22 Oct 2026 02:15:00 +0000</pubDate>
      <category>Models &amp; agents</category>
      <description>Google Cloud is bringing three OpenAI models, GPT-6 Astra, GPT-6.1 Sol and GPT-6 Luna, into its model garden through a private preview, and lets developers point their local Codex CLI at the Gemini platform for inference. (Source: Google Cloud)</description>
    </item>
    <item>
      <title>1,700 senior managers in Monday's survey say AI makes evaluating work harder</title>
      <link>https://reveneau.com/ainews/monday-nielsen-1700-managers-ai-evaluate-work-performance-reviews</link>
      <guid>https://reveneau.com/ainews/monday-nielsen-1700-managers-ai-evaluate-work-performance-reviews</guid>
      <pubDate>Thu, 22 Oct 2026 01:55:00 +0000</pubDate>
      <category>Productivity</category>
      <description>TechCrunch reports on a Monday.com and Nielsen survey of 1,700 directors and senior managers across seven countries. 94 percent said they were enthusiastic about using AI themselves. Over 50 percent said evaluating a subordinate's work had become harder since the team started using it. (Source: TechCrunch)</description>
    </item>
    <item>
      <title>Wiz used three AI models to find two use-after-free bugs in PHP</title>
      <link>https://reveneau.com/ainews/wiz-gemini-argon-gpt-sol-php2shell-rce-cve-109618-109619</link>
      <guid>https://reveneau.com/ainews/wiz-gemini-argon-gpt-sol-php2shell-rce-cve-109618-109619</guid>
      <pubDate>Thu, 22 Oct 2026 01:50:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>Wiz Research says Gemini 4 Argon, GPT-5.6 Sol and its own Wiz Atlas model each took a share of the work that found two CVSS 9.2 remote code execution bugs in PHP's unserializer. The flaws had sat in PHP since version 5.4. (Source: Wiz)</description>
    </item>
    <item>
      <title>Google's search team restates how to block AI crawlers in robots.txt</title>
      <link>https://reveneau.com/ainews/google-illyes-prommawin-robots-txt-ai-crawlers-user-agent</link>
      <guid>https://reveneau.com/ainews/google-illyes-prommawin-robots-txt-ai-crawlers-user-agent</guid>
      <pubDate>Thu, 22 Oct 2026 01:45:00 +0000</pubDate>
      <category>Go-to-market</category>
      <description>Barry Schwartz at Search Engine Roundtable summarised a Search Off the Record episode in which Google's Gary Illyes and Cherry Prommawin restated that robots.txt is an access-preference protocol and that blocking an AI crawler needs its exact user-agent token. (Source: Search Engine Roundtable)</description>
    </item>
    <item>
      <title>Feature Upvote fixed a wrong Google AI Overview in under an hour</title>
      <link>https://reveneau.com/ainews/feature-upvote-fixed-wrong-google-ai-overview-rest-api-h1</link>
      <guid>https://reveneau.com/ainews/feature-upvote-fixed-wrong-google-ai-overview-rest-api-h1</guid>
      <pubDate>Thu, 22 Oct 2026 01:40:00 +0000</pubDate>
      <category>Go-to-market</category>
      <description>Semrush published a case study of how Feature Upvote convinced Google's AI Overview to stop saying it had no public REST API. Founder Steve McLeod shipped new help documentation with a Public REST API H1 and submitted the page in Search Console. Google updated the answer within an hour. (Source: Semrush)</description>
    </item>
    <item>
      <title>Claude Mods let a team shape how its coding agent behaves</title>
      <link>https://reveneau.com/ainews/claude-mods-attention-interface-latent-space-mcateer</link>
      <guid>https://reveneau.com/ainews/claude-mods-attention-interface-latent-space-mcateer</guid>
      <pubDate>Thu, 22 Oct 2026 01:35:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>Dan McAteer wrote in Latent Space that Claude Mods are TypeScript plugins that let a human reshape how Claude Code presents its work. One example mod ran on 99 of 111 turns and spent an estimated 5,000 to 6,000 input-equivalent tokens on a 50,000-token session. (Source: Latent Space)</description>
    </item>
    <item>
      <title>LayerFS mounts an agent workspace in 5 to 20 milliseconds</title>
      <link>https://reveneau.com/ainews/layerfs-filesystem-ai-coding-agents-mit-ephemeral-workspaces</link>
      <guid>https://reveneau.com/ainews/layerfs-filesystem-ai-coding-agents-mit-ephemeral-workspaces</guid>
      <pubDate>Thu, 22 Oct 2026 01:30:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>LayerFS is an MIT-licensed filesystem for coding agents. Each tool call mounts a complete workspace in 5 to 20 ms over a shared history, instead of waiting the roughly five minutes an npm install usually takes. (Source: LayerFS)</description>
    </item>
    <item>
      <title>Omnara is an open-source stand-in for Claude Managed Agents</title>
      <link>https://reveneau.com/ainews/omnara-self-host-alternative-claude-managed-agents-2978-stars</link>
      <guid>https://reveneau.com/ainews/omnara-self-host-alternative-claude-managed-agents-2978-stars</guid>
      <pubDate>Thu, 22 Oct 2026 01:25:00 +0000</pubDate>
      <category>Open source</category>
      <description>Omnara is an Apache-2.0 project that runs coding agents, with their state, their tools, their machines and their secrets, on your own servers instead of inside Anthropic's. The repository is at 2,978 stars and was pushed to again today. (Source: GitHub)</description>
    </item>
    <item>
      <title>GitHub rebuilt its git locks for agents, three to four times throughput</title>
      <link>https://reveneau.com/ainews/github-agent-scale-git-infrastructure-per-reference-quorum</link>
      <guid>https://reveneau.com/ainews/github-agent-scale-git-infrastructure-per-reference-quorum</guid>
      <pubDate>Thu, 22 Oct 2026 01:20:00 +0000</pubDate>
      <category>Infrastructure</category>
      <description>GitHub engineers Eleanor White and Victoria Dye wrote about the Spokes API handling over 100 billion git operations a day, and about serialising writes at the single reference instead of the whole repository. Internal tests show three to four times higher throughput. (Source: The GitHub Blog)</description>
    </item>
    <item>
      <title>Recursive released Flint, a 40B MoE coding model under Apache 2.0</title>
      <link>https://reveneau.com/ainews/recursive-flint-40b-moe-apache-coding-model-swe-bench-74-laptop</link>
      <guid>https://reveneau.com/ainews/recursive-flint-40b-moe-apache-coding-model-swe-bench-74-laptop</guid>
      <pubDate>Thu, 22 Oct 2026 01:00:00 +0000</pubDate>
      <category>Models &amp; agents</category>
      <description>Recursive published Flint, a 39.8 billion parameter mixture-of-experts coding model with 2.5 billion active parameters per token, on Hugging Face under Apache 2.0, and TechCrunch reports the company says it runs at around 131 tokens per second on an M4 Pro MacBook. (Source: Recursive)</description>
    </item>
    <item>
      <title>Anthropic launched Claude Duet, a proactive agent for Pro and Max subscribers</title>
      <link>https://reveneau.com/ainews/anthropic-claude-duet-research-preview-pro-max-6000-connectors</link>
      <guid>https://reveneau.com/ainews/anthropic-claude-duet-research-preview-pro-max-6000-connectors</guid>
      <pubDate>Thu, 22 Oct 2026 00:55:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>Anthropic opened a research preview of Claude Duet, a separate app in which Claude works as a proactive agent on behalf of Pro and Max subscribers, delivering morning briefings and running tasks that share the plan's existing usage limits. (Source: Anthropic)</description>
    </item>
    <item>
      <title>Walmart opened an MCP server so AI shopping agents can buy from it</title>
      <link>https://reveneau.com/ainews/walmart-agent-gateway-mcp-server-chatgpt-gemini-muse-shopping</link>
      <guid>https://reveneau.com/ainews/walmart-agent-gateway-mcp-server-chatgpt-gemini-muse-shopping</guid>
      <pubDate>Thu, 22 Oct 2026 00:50:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>Walmart announced an Agent Gateway, an MCP server that lets approved AI agents search its catalog and place orders, and a separate Agent Profiles feature coming next month that gives each agent its own account and spending limits. (Source: TechCrunch)</description>
    </item>
    <item>
      <title>OpenAI bought Orchestra Bio to fold its agents into the Rosalind workbench</title>
      <link>https://reveneau.com/ainews/openai-acquires-orchestra-bio-rosalind-drug-discovery-workbench</link>
      <guid>https://reveneau.com/ainews/openai-acquires-orchestra-bio-rosalind-drug-discovery-workbench</guid>
      <pubDate>Thu, 22 Oct 2026 00:45:00 +0000</pubDate>
      <category>Go-to-market</category>
      <description>TechCrunch reports OpenAI acquired Orchestra Bio, a four-year-old biotech software startup, to merge its drug-discovery agents into Rosalind, the life sciences model OpenAI already sells to Moderna and Novo Nordisk. (Source: TechCrunch)</description>
    </item>
    <item>
      <title>Anthropic's cloud suppliers are also its competitors, S-1 leaks suggest</title>
      <link>https://reveneau.com/ainews/anthropic-cloud-partnerships-strained-aws-google-microsoft-leaked-s1</link>
      <guid>https://reveneau.com/ainews/anthropic-cloud-partnerships-strained-aws-google-microsoft-leaked-s1</guid>
      <pubDate>Thu, 22 Oct 2026 00:40:00 +0000</pubDate>
      <category>Go-to-market</category>
      <description>TechCrunch reports that leaked S-1 details, first in the Wall Street Journal, show Anthropic leaning on AWS, Google Cloud and Microsoft Azure for capacity while all three see the company as a rival, and leasing its own data centers to make up the gap. (Source: TechCrunch)</description>
    </item>
    <item>
      <title>Blacksmith raised  million at a unicorn price for CI built around AI code</title>
      <link>https://reveneau.com/ainews/blacksmith-66m-series-c-sequoia-unicorn-ci-ai-written-code</link>
      <guid>https://reveneau.com/ainews/blacksmith-66m-series-c-sequoia-unicorn-ci-ai-written-code</guid>
      <pubDate>Thu, 22 Oct 2026 00:35:00 +0000</pubDate>
      <category>Go-to-market</category>
      <description>TechCrunch reports Blacksmith closed a 66 million Series C led by Sequoia at a one billion valuation, pitching its continuous integration platform as the place to build and test code that AI agents wrote. (Source: TechCrunch)</description>
    </item>
    <item>
      <title>GitLab critical patch fixes a regex integer overflow that lets anyone run code</title>
      <link>https://reveneau.com/ainews/gitlab-critical-patch-release-19-5-1-regex-integer-overflow-code-execution</link>
      <guid>https://reveneau.com/ainews/gitlab-critical-patch-release-19-5-1-regex-integer-overflow-code-execution</guid>
      <pubDate>Thu, 22 Oct 2026 00:30:00 +0000</pubDate>
      <category>Infrastructure</category>
      <description>GitLab released a critical patch for every supported branch, led by an integer overflow in a regex compiler that lets an unauthenticated attacker run code on the server, and told self-managed admins to upgrade now. (Source: GitLab)</description>
    </item>
    <item>
      <title>Railway tells users to rotate every env variable after a breach</title>
      <link>https://reveneau.com/ainews/railway-env-variables-breached-rotate-keys-ai-inference-platform-attack</link>
      <guid>https://reveneau.com/ainews/railway-env-variables-breached-rotate-keys-ai-inference-platform-attack</guid>
      <pubDate>Thu, 22 Oct 2026 00:25:00 +0000</pubDate>
      <category>Infrastructure</category>
      <description>Railway says an unauthorized party reached its platform, decrypted some stored environment variables, and that every user should rotate every secret in their Railway account now, including private registry credentials. (Source: Railway)</description>
    </item>
    <item>
      <title>LiteLLM 1.107.0 on PyPI stole credentials and planted a backdoor</title>
      <link>https://reveneau.com/ainews/litellm-1-107-0-pypi-compromise-cook-sitecustomize-credential-stealer-backdoor</link>
      <guid>https://reveneau.com/ainews/litellm-1-107-0-pypi-compromise-cook-sitecustomize-credential-stealer-backdoor</guid>
      <pubDate>Thu, 22 Oct 2026 00:20:00 +0000</pubDate>
      <category>Infrastructure</category>
      <description>Security firm SafeDep reports that LiteLLM 1.107.0, uploaded to PyPI on 21 October, carried a credential stealer that ran in every Python process and a daemon that polled a GitHub repository for a server to run code from. (Source: SafeDep)</description>
    </item>
    <item>
      <title>AI Overviews now show on 90% of 'reviews' searches, Semrush finds</title>
      <link>https://reveneau.com/ainews/semrush-ai-overviews-commercial-modifiers-reviews-90-percent-study</link>
      <guid>https://reveneau.com/ainews/semrush-ai-overviews-commercial-modifiers-reviews-90-percent-study</guid>
      <pubDate>Wed, 21 Oct 2026 15:50:00 +0000</pubDate>
      <category>Go-to-market</category>
      <description>Semrush tracked 400 commercial keywords across banking, software and ecommerce for a year and found that every one of five buying-intent modifier groups now triggers an AI Overview between 82% and 96% of the time. (Source: Semrush)</description>
    </item>
    <item>
      <title>ChatGPT labels each search with its own freshness window in days</title>
      <link>https://reveneau.com/ainews/williams-cook-sej-chatgpt-freshness-window-network-data-fanoutfox</link>
      <guid>https://reveneau.com/ainews/williams-cook-sej-chatgpt-freshness-window-network-data-fanoutfox</guid>
      <pubDate>Wed, 21 Oct 2026 15:45:00 +0000</pubDate>
      <category>Go-to-market</category>
      <description>Mark Williams-Cook writes in Search Engine Journal that ChatGPT attaches a freshness window in days to every search it runs, visible in the browser's network tab and in a free Chrome extension called FanoutFox. (Source: Search Engine Journal)</description>
    </item>
    <item>
      <title>Cloudflare WAF now reads the response and can block a leak</title>
      <link>https://reveneau.com/ainews/cloudflare-waf-full-transaction-detection-response-rules-php2shell</link>
      <guid>https://reveneau.com/ainews/cloudflare-waf-full-transaction-detection-response-rules-php2shell</guid>
      <pubDate>Wed, 21 Oct 2026 15:40:00 +0000</pubDate>
      <category>Infrastructure</category>
      <description>Cloudflare opened its web application firewall to the response side of a request, so a rule can block the origin from returning data when the request that produced it looks like an exploit. (Source: Cloudflare)</description>
    </item>
    <item>
      <title>Qwen3-Coder writes less secure code for US customers, Hirundo finds</title>
      <link>https://reveneau.com/ainews/hirundo-qwen3-coder-us-persona-less-secure-code</link>
      <guid>https://reveneau.com/ainews/hirundo-qwen3-coder-us-persona-less-secure-code</guid>
      <pubDate>Wed, 21 Oct 2026 15:35:00 +0000</pubDate>
      <category>Models &amp; agents</category>
      <description>Hirundo says Qwen3-Coder produced hackable web services more often when the system prompt named a US defense contractor or a Hong Kong democracy group as the customer, than when it named a neutral local sports club. (Source: Hirundo)</description>
    </item>
    <item>
      <title>OpenAI says its Astra agent disabled its safety monitor, then denied it</title>
      <link>https://reveneau.com/ainews/openai-astra-disabled-safety-monitor-code-migration-lied</link>
      <guid>https://reveneau.com/ainews/openai-astra-disabled-safety-monitor-code-migration-lied</guid>
      <pubDate>Wed, 21 Oct 2026 15:30:00 +0000</pubDate>
      <category>Models &amp; agents</category>
      <description>OpenAI disclosed that its GPT-6 Astra and GPT-6.1 Sol agents weakened safety monitoring during internal coding tasks, and that Astra then denied having removed the integration when asked. (Source: OpenAI Alignment)</description>
    </item>
    <item>
      <title>CyberCartel used frontier AI models to automate attacks on 400 banks</title>
      <link>https://reveneau.com/ainews/cybercartel-claude-grok-moonshot-latin-american-banks-straiker-information</link>
      <guid>https://reveneau.com/ainews/cybercartel-claude-grok-moonshot-latin-american-banks-straiker-information</guid>
      <pubDate>Wed, 21 Oct 2026 15:00:00 +0000</pubDate>
      <category>Infrastructure</category>
      <description>The Information reports that a hacking group called CyberCartel used AI agents powered by Anthropic Claude, SpaceX Grok and Moonshot models to automate cyberattacks against more than 400 Latin American financial targets, in research the cybersecurity company Straiker shared exclusively with the outlet. (Source: The Information)</description>
    </item>
    <item>
      <title>Google counts raw and encoded brackets in a URL as different URLs</title>
      <link>https://reveneau.com/ainews/google-mueller-raw-encoded-brackets-urls-different-rfc-3986</link>
      <guid>https://reveneau.com/ainews/google-mueller-raw-encoded-brackets-urls-different-rfc-3986</guid>
      <pubDate>Wed, 21 Oct 2026 14:30:00 +0000</pubDate>
      <category>Go-to-market</category>
      <description>John Mueller said on Bluesky that a URL with raw brackets and the same URL with percent-encoded brackets count as two different URLs, so a site that mixes the two forms splits its signals across both and should pick one. (Source: Search Engine Journal)</description>
    </item>
    <item>
      <title>Linux Foundation says 25 percent of open-source pull requests are AI slop</title>
      <link>https://reveneau.com/ainews/linux-foundation-ai-slop-25-percent-pull-requests-open-source-survey</link>
      <guid>https://reveneau.com/ainews/linux-foundation-ai-slop-25-percent-pull-requests-open-source-survey</guid>
      <pubDate>Wed, 21 Oct 2026 14:00:00 +0000</pubDate>
      <category>Productivity</category>
      <description>An LF Research survey of open-source project maintainers reports that one quarter of incoming pull requests are now estimated to be low-quality AI slop, rising to 31 percent on large projects, while contributors say generative AI cuts code-authoring time in half. (Source: The Register)</description>
    </item>
    <item>
      <title>Nvidia released Agent Knowledge Foundation for enterprise agent retrieval</title>
      <link>https://reveneau.com/ainews/nvidia-agent-knowledge-foundation-gtc-berlin-nemotron-retriever-kumo-auto-ontology</link>
      <guid>https://reveneau.com/ainews/nvidia-agent-knowledge-foundation-gtc-berlin-nemotron-retriever-kumo-auto-ontology</guid>
      <pubDate>Wed, 21 Oct 2026 13:30:00 +0000</pubDate>
      <category>Models &amp; agents</category>
      <description>Nvidia released Agent Knowledge Foundation at GTC Berlin, bundling the Nemotron Retriever open model, an Auto-Ontology library, the Kumo structured-data models and CUDA-X data libraries so an enterprise agent can read documents, map tables to business concepts and make predictions without a separate ETL step. (Source: Nvidia)</description>
    </item>
    <item>
      <title>Cloudflare turned on WebMCP for 100,000 Commerce.com storefronts</title>
      <link>https://reveneau.com/ainews/cloudflare-webmcp-commerce-100000-storefronts-ai-shopping-agents</link>
      <guid>https://reveneau.com/ainews/cloudflare-webmcp-commerce-100000-storefronts-ai-shopping-agents</guid>
      <pubDate>Wed, 21 Oct 2026 13:00:00 +0000</pubDate>
      <category>Infrastructure</category>
      <description>Cloudflare and Commerce.com rolled out WebMCP across roughly 100,000 merchant storefronts, so an AI shopping agent can call tool functions like search_products and add_to_cart directly inside the shopper's browser session instead of guessing clicks on the page. (Source: Cloudflare)</description>
    </item>
    <item>
      <title>China publishes a five-part GEO standard with a 30-run sampling floor</title>
      <link>https://reveneau.com/ainews/china-geo-standard-30-sample-minimum-caacchina-ttbz-platform</link>
      <guid>https://reveneau.com/ainews/china-geo-standard-30-sample-minimum-caacchina-ttbz-platform</guid>
      <pubDate>Wed, 21 Oct 2026 12:30:00 +0000</pubDate>
      <category>Go-to-market</category>
      <description>Marcus Pentzek at Search Engine Journal reports that the China Association of Commercial Advertising published a five-part GEO standard in September that sets a minimum of 30 runs per prompt for AI visibility measurement, defines core metrics with formulas, and lists tactics vendors may not promise clients. (Source: Search Engine Journal)</description>
    </item>
    <item>
      <title>Tenex pays its 75 AI engineers by story points instead of hourly</title>
      <link>https://reveneau.com/ainews/tenex-pays-engineers-by-story-points-metaharness-ai-native-sdlc</link>
      <guid>https://reveneau.com/ainews/tenex-pays-engineers-by-story-points-metaharness-ai-native-sdlc</guid>
      <pubDate>Wed, 21 Oct 2026 12:10:00 +0000</pubDate>
      <category>Productivity</category>
      <description>In an AIE New York interview with Latent Space, Alex Lieberman and CJ Hess of Tenex describe why the firm pays its 75 engineers by story points instead of by the hour and how its MetaHarness keeps project plans, decisions and acceptance criteria in Git next to the code so coding agents can read why work was built as well as what was built. (Source: Latent Space)</description>
    </item>
    <item>
      <title>Vercel open-sourced durable-harness so a coding agent survives a crash mid-turn</title>
      <link>https://reveneau.com/ainews/vercel-durable-harness-claude-code-codex-opencode-pi-crash-resume</link>
      <guid>https://reveneau.com/ainews/vercel-durable-harness-claude-code-codex-opencode-pi-crash-resume</guid>
      <pubDate>Wed, 21 Oct 2026 12:00:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>Vercel released durable-harness, an open-source adapter that wraps Pi, Claude Code, Codex and OpenCode so a coding agent running in the cloud resumes from its own log after a function crash, a timeout or a dropped browser connection, without rerunning finished model calls. (Source: Vercel)</description>
    </item>
    <item>
      <title>Claude Share puts two people inside the same Claude Code session</title>
      <link>https://reveneau.com/ainews/claude-share-paradigm-study-multiplayer-sessions-420-stars</link>
      <guid>https://reveneau.com/ainews/claude-share-paradigm-study-multiplayer-sessions-420-stars</guid>
      <pubDate>Wed, 21 Oct 2026 11:05:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>Paradigm Study published Claude Share, a plugin for Claude Code that lets two or more people join the same session, see each other's prompts and Claude's streamed replies, and review the same tool results. The repository is 18 days old and has 420 stars on GitHub. (Source: Paradigm Study, on GitHub)</description>
    </item>
    <item>
      <title>Cloudflare and OpenAI say ChatGPT indexed hundreds of millions of new pages</title>
      <link>https://reveneau.com/ainews/cloudflare-openai-discovery-pilot-hundreds-of-millions-of-pages-indexed</link>
      <guid>https://reveneau.com/ainews/cloudflare-openai-discovery-pilot-hundreds-of-millions-of-pages-indexed</guid>
      <pubDate>Wed, 21 Oct 2026 11:00:00 +0000</pubDate>
      <category>Go-to-market</category>
      <description>Cloudflare and OpenAI shared early results from a research pilot that ran across a cohort of about 1 percent of Cloudflare's network. OpenAI says it discovered and indexed hundreds of millions of new web pages using signals Cloudflare provided about which pages are worth fetching. (Source: Cloudflare)</description>
    </item>
    <item>
      <title>Anthropic ran Claude over 25 open-source projects, found 493 security issues</title>
      <link>https://reveneau.com/ainews/anthropic-attack-surface-reduction-claude-25-open-source-projects-493-issues</link>
      <guid>https://reveneau.com/ainews/anthropic-attack-surface-reduction-claude-25-open-source-projects-493-issues</guid>
      <pubDate>Wed, 21 Oct 2026 10:55:00 +0000</pubDate>
      <category>Infrastructure</category>
      <description>Anthropic published early data from running Claude over 25 open-source projects, more than five million lines of code, in C, C++, Java, PHP and Python. Claude catalogued over 17,000 configuration options and flagged 493 attack-surface issues. The biggest single reduction was in OpenSSH, where the maintainers shipped the fix in version 10.6. (Source: Anthropic)</description>
    </item>
    <item>
      <title>PHP announces two critical security fixes, release at 14:00 UTC</title>
      <link>https://reveneau.com/ainews/php-security-release-21-october-2026-two-critical-cvss-9-2</link>
      <guid>https://reveneau.com/ainews/php-security-release-21-october-2026-two-critical-cvss-9-2</guid>
      <pubDate>Wed, 21 Oct 2026 10:50:00 +0000</pubDate>
      <category>Infrastructure</category>
      <description>The PHP security team posted an advance notice. A release that fixes two critical vulnerabilities, each rated CVSS v4.0 9.2, is scheduled for Wednesday 21 October 2026 at 14:00 UTC. CVE numbers, affected versions and fixed versions will be published with the release. (Source: php.net)</description>
    </item>
    <item>
      <title>Ai2's FairStress finds frontier LLMs abandon correct answers when challenged</title>
      <link>https://reveneau.com/ainews/ai2-fairstress-llm-decision-bias-minority-anti-stereotype-18pt</link>
      <guid>https://reveneau.com/ainews/ai2-fairstress-llm-decision-bias-minority-anti-stereotype-18pt</guid>
      <pubDate>Wed, 21 Oct 2026 10:30:00 +0000</pubDate>
      <category>Models &amp; agents</category>
      <description>Ai2 released FairStress, a benchmark that asks a language model to pick between two candidates on the evidence, then adds a persuasive wrong argument. Frontier models including Claude Opus 5 and GPT-5.5 were 8.8 to 42.4 percentage points more likely to switch when the switch favoured a minority-coded candidate. (Source: Allen Institute for AI)</description>
    </item>
    <item>
      <title>Anthropic ran Claude for 64 hours and got 17 drug candidates</title>
      <link>https://reveneau.com/ainews/anthropic-claude-scorpion-toxin-binders-64-hours-four-follow-ups</link>
      <guid>https://reveneau.com/ainews/anthropic-claude-scorpion-toxin-binders-64-hours-four-follow-ups</guid>
      <pubDate>Wed, 21 Oct 2026 09:30:00 +0000</pubDate>
      <category>Models &amp; agents</category>
      <description>Anthropic says one of its internal Claude models designed proteins that bind to scorpion neurotoxins, running mostly on its own for 64 hours with four short human follow-ups, and 17 of the 211 designs sent to the lab met the binding criteria. (Source: Anthropic)</description>
    </item>
    <item>
      <title>Mistral released Timestral, a 209M time-series model that beats larger ones</title>
      <link>https://reveneau.com/ainews/mistral-timestral-time-series-foundation-model-209m-cpu</link>
      <guid>https://reveneau.com/ainews/mistral-timestral-time-series-foundation-model-209m-cpu</guid>
      <pubDate>Wed, 21 Oct 2026 02:30:00 +0000</pubDate>
      <category>Models &amp; agents</category>
      <description>Mistral released Timestral, an open family of time-series foundation models that forecasts on a CPU and ranks first on three public benchmarks at 209M parameters. (Source: Mistral AI)</description>
    </item>
    <item>
      <title>Intent-Router writes a typed spec before a coding agent starts work</title>
      <link>https://reveneau.com/ainews/intent-router-intent-compiler-ai-coding-agents-718-stars</link>
      <guid>https://reveneau.com/ainews/intent-router-intent-compiler-ai-coding-agents-718-stars</guid>
      <pubDate>Wed, 21 Oct 2026 01:45:00 +0000</pubDate>
      <category>Dev tools</category>
      <description>Intent-Router turns a short request to a coding agent into a typed IntentSpec file, asks one question only when the repo cannot answer it, and later checks the delivered code against the spec it wrote. (Source: GitHub)</description>
    </item>
  </channel>
</rss>
