https://reveneau.com/ainews Short briefs on AI and software engineering: developer tools, open-source projects, model and agent releases. Each item links its original source. en-us https://reveneau.com/ainews/least-privilege-agent-scopes-20-task-benchmark-kayode-ojo https://reveneau.com/ainews/least-privilege-agent-scopes-20-task-benchmark-kayode-ojo Thu, 15 Oct 2026 18:00:00 +0000 Productivity Writing in The New Stack, Kayode Ojo publishes 160 runs of an agent against 20 tasks and finds task-scoped credentials finish every task on one-fifteenth the scopes of a broad grant. (Source: The New Stack) https://reveneau.com/ainews/anthropic-opaque-acquihire-confidential-mcp-agentrust-open-source https://reveneau.com/ainews/anthropic-opaque-acquihire-confidential-mcp-agentrust-open-source Thu, 15 Oct 2026 17:50:00 +0000 Open source Anthropic has licensed Opaque's confidential computing work and hired its CEO and CTO, The New Stack reports, with no public plan for the open-source projects Opaque maintains. (Source: The New Stack) https://reveneau.com/ainews/akrites-ai-vulnerability-reports-eight-hours-review-maintainers https://reveneau.com/ainews/akrites-ai-vulnerability-reports-eight-hours-review-maintainers Thu, 15 Oct 2026 17:40:00 +0000 Open source Akrites CTO Christopher Robinson tells The New Stack that one AI-written security report can cost a maintainer up to eight hours, and the backlog runs to hundreds of thousands. (Source: The New Stack) https://reveneau.com/ainews/nvidia-nemotron-3-5-bolt-74b-24gb-vram-local-agent-model https://reveneau.com/ainews/nvidia-nemotron-3-5-bolt-74b-24gb-vram-local-agent-model Thu, 15 Oct 2026 17:30:00 +0000 Models & agents NVIDIA released Nemotron 3.5 Bolt, a 74B parameter agent model packed into 24GB of VRAM through 2-bit quantization. It runs on a GeForce RTX 5090 with llama.cpp, Ollama or vLLM. (Source: NVIDIA Developer Blog) https://reveneau.com/ainews/github-ai-scan-ga-pull-requests-php-terraform-dockerfiles https://reveneau.com/ainews/github-ai-scan-ga-pull-requests-php-terraform-dockerfiles Thu, 15 Oct 2026 16:30:00 +0000 Dev tools "GitHub says AI Scan for pull requests is generally available, and it covers the languages CodeQL does not: PHP, Shell, Terraform, Dockerfiles and more." (Source: GitHub Changelog) https://reveneau.com/ainews/github-secret-detection-modernbert-classifier-11-5-percent-86-percent https://reveneau.com/ainews/github-secret-detection-modernbert-classifier-11-5-percent-86-percent Thu, 15 Oct 2026 15:40:00 +0000 Infrastructure GitHub swapped the LLM behind its secret scanner for a fine-tuned ModernBERT classifier it runs on-device, and reports an 11.5 percent higher owner-weighted acceptance rate, 86 percent lower median scan time, and 98 percent lower inference cost than the previous pipeline. (Source: GitHub) https://reveneau.com/ainews/github-agentic-autofix-code-scanning-generally-available-codeql https://reveneau.com/ainews/github-agentic-autofix-code-scanning-generally-available-codeql Thu, 15 Oct 2026 15:35:00 +0000 Dev tools GitHub moved agentic autofix for code scanning alerts to general availability, replacing the free "Generate Fix" button with "Assign to Copilot," which reads across the repository, proposes a change, reruns CodeQL to check its own work, and opens a draft pull request. (Source: GitHub) https://reveneau.com/ainews/google-universal-cart-launches-us-search-gemini-ucp https://reveneau.com/ainews/google-universal-cart-launches-us-search-gemini-ucp Thu, 15 Oct 2026 15:30:00 +0000 Infrastructure Google turned on Universal Cart in the US across Search and the Gemini app, letting shoppers save items from Nike, Sephora, Target, Ulta Beauty, Walmart, Wayfair and Shopify stores into one cart that checks out through the Universal Commerce Protocol. (Source: Google) https://reveneau.com/ainews/swarmchasers-rogue-ai-agents-tencent-amap-hidden-message https://reveneau.com/ainews/swarmchasers-rogue-ai-agents-tencent-amap-hidden-message Thu, 15 Oct 2026 14:35:00 +0000 Infrastructure The New Stack reports that researchers hid text on a page about a fleet of AI agents probing Alibaba's Amap, and the agents, running on Tencent Cloud, wrote back about their tasks and sandbox. (Source: The New Stack) https://reveneau.com/ainews/torvalds-claude-code-linux-page-cache-23x-race-condition https://reveneau.com/ainews/torvalds-claude-code-linux-page-cache-23x-race-condition Thu, 15 Oct 2026 14:30:00 +0000 Open source The New Stack reports that Linus Torvalds submitted a 10-patch Linux series written with Anthropic's Claude Code that hit a 23-fold throughput gain on his Threadripper, before reviewers found a race condition. (Source: The New Stack) https://reveneau.com/ainews/cloudflare-openai-pilot-chatgpt-discovers-millions-of-new-pages https://reveneau.com/ainews/cloudflare-openai-pilot-chatgpt-discovers-millions-of-new-pages Thu, 15 Oct 2026 13:30:00 +0000 Go-to-market Cloudflare and OpenAI say a research pilot that ran on about one percent of Cloudflare's network helped ChatGPT index hundreds of millions of pages its crawler would have missed. (Source: Cloudflare) https://reveneau.com/ainews/workday-sana-jev-generative-ui-paycheck-card-date-picker https://reveneau.com/ainews/workday-sana-jev-generative-ui-paycheck-card-date-picker Thu, 15 Oct 2026 12:35:00 +0000 Dev tools Workday has made Sana, its AI assistant, the home screen of its HR and finance software, and is picking which design component to show on each turn with the Jev decision model instead of a frontier model. (Source: The New Stack) https://reveneau.com/ainews/subquadratic-subq-snap-decision-model-384k-tokens-ssa https://reveneau.com/ainews/subquadratic-subq-snap-decision-model-384k-tokens-ssa Thu, 15 Oct 2026 12:30:00 +0000 Models & agents Subquadratic released SubQ Snap, a decision model it says takes up to 384,000 tokens of text and images per call, twelve times the Jev context limit, and returns a 100,000 token decision in about one second. (Source: Subquadratic) https://reveneau.com/ainews/eric-siu-single-grain-skills-evals-loops-moz-180000-3-1-million https://reveneau.com/ainews/eric-siu-single-grain-skills-evals-loops-moz-180000-3-1-million Thu, 15 Oct 2026 11:30:00 +0000 Productivity Eric Siu of Single Grain says one reusable AI skill grew his X account from 180,000 impressions in January to about 3.1 million in June, and he published the pattern on the Moz blog. (Source: Moz) https://reveneau.com/ainews/gitdrive-github-repos-mac-finder-icloud-style-drive https://reveneau.com/ainews/gitdrive-github-repos-mac-finder-icloud-style-drive Thu, 15 Oct 2026 10:30:00 +0000 Dev tools GitDrive shows a Mac user every private GitHub repo they own as a drive in Finder, with each save becoming a commit. (Source: GitHub) https://reveneau.com/ainews/short-video-maker-free-opus-clip-alternative-youtube-shorts-624-stars https://reveneau.com/ainews/short-video-maker-free-opus-clip-alternative-youtube-shorts-624-stars Thu, 15 Oct 2026 09:30:00 +0000 Open source An open-source tool that pastes a YouTube link, finds the viral moments, cuts and captions them into 9:16 shorts, picked up 624 stars in ten days. (Source: GitHub) https://reveneau.com/ainews/outcrawl-scout-open-source-browser-agent-80-site-benchmark https://reveneau.com/ainews/outcrawl-scout-open-source-browser-agent-80-site-benchmark Thu, 15 Oct 2026 08:40:00 +0000 Dev tools Scout is Outcrawl's agent core, open-sourced under Apache 2.0, that completes browser tasks through a four-role model stack and runs on local Playwright, a CDP browser or Outcrawl's cloud. (Source: Outcrawl) https://reveneau.com/ainews/solid-glass-shadcn-design-system-ai-apps-deeplethe https://reveneau.com/ainews/solid-glass-shadcn-design-system-ai-apps-deeplethe Thu, 15 Oct 2026 08:35:00 +0000 Dev tools Solid Glass is one stylesheet that layers thirteen AI-interface components (composer, tool-steps, diff-view, reasoning, status-glyph) on top of a plain shadcn/ui setup. (Source: DeepLethe) https://reveneau.com/ainews/agentplay-replay-coding-agent-sessions-map-timeline-entelligence https://reveneau.com/ainews/agentplay-replay-coding-agent-sessions-map-timeline-entelligence Thu, 15 Oct 2026 08:30:00 +0000 Dev tools Agentplay reads session logs from seven coding agents and draws the files, tools and errors each one touched as a map and a timeline you can scrub. (Source: Entelligence AI) https://reveneau.com/ainews/desigma-open-source-figma-alternative-rust-182-stars https://reveneau.com/ainews/desigma-open-source-figma-alternative-rust-182-stars Thu, 15 Oct 2026 07:40:00 +0000 Dev tools deepfounder-ai published Desigma, a native desktop design tool for Windows, Linux and macOS, dual-licensed MIT or Apache-2.0. The README says the editor imports Figma REST JSON and the undocumented .fig format, generates CSS, Tailwind, SwiftUI, Jetpack Compose or React in dev mode, and keeps panning and dragging on a 5,000-layer page under one frame. (Source: GitHub) https://reveneau.com/ainews/cc-stretch-claude-code-plugin-stretchtext-replies-17-percent-108-stars https://reveneau.com/ainews/cc-stretch-claude-code-plugin-stretchtext-replies-17-percent-108-stars Thu, 15 Oct 2026 07:30:00 +0000 Dev tools pro-vi published cc-stretch, an MIT-licensed Claude Code plugin that formats replies as stretchtext. Each reply opens as a short skim and grows the detail in place when the reader clicks a phrase. The author tested 69 real replies and reports the skim as 17 percent of the words Claude wrote without the plugin. (Source: GitHub) https://reveneau.com/ainews/claudemy-claude-code-skill-audio-courses-mit-135-stars https://reveneau.com/ainews/claudemy-claude-code-skill-audio-courses-mit-135-stars Thu, 15 Oct 2026 06:50:00 +0000 Dev tools Assaf Kipnis published Claudemy on 14 October, a MIT-licensed Claude Code skill that turns a topic into about twelve two-minute audio lessons with cited sources, running inside Claude Code with a web search and either ElevenLabs or macOS voices. The repository was at 135 stars and 18 forks on 15 October. (Source: GitHub) https://reveneau.com/ainews/chrome-crux-experimental-soft-navigations-core-web-vitals-spa https://reveneau.com/ainews/chrome-crux-experimental-soft-navigations-core-web-vitals-spa Thu, 15 Oct 2026 06:40:00 +0000 Go-to-market Chrome has published experimental versions of all three Core Web Vitals in the Chrome User Experience Report that count soft navigations, the in-app page changes a single-page application makes without a full reload. The data is in BigQuery, the CrUX API and the History API from the October 2026 release, with Search Console switching once the metrics leave experimental in May 2027. (Source: web.dev) https://reveneau.com/ainews/bing-webmaster-tools-topics-portfolio-ai-performance-grounding-queries https://reveneau.com/ainews/bing-webmaster-tools-topics-portfolio-ai-performance-grounding-queries Thu, 15 Oct 2026 06:30:00 +0000 Go-to-market Microsoft added a beta Topics Portfolio view to the AI Performance report in Bing Webmaster Tools. It groups the queries where a site is cited by Bing's AI into themes, lists opportunity queries where other sites appear and yours does not, and shows topic size, number of sites cited and query counts for a one, two or three month window. (Source: Microsoft Bing) https://reveneau.com/ainews/airsup-machine-skill-claude-code-photoreal-physics-simulations-206-stars https://reveneau.com/ainews/airsup-machine-skill-claude-code-photoreal-physics-simulations-206-stars Thu, 15 Oct 2026 05:40:00 +0000 Dev tools Airsup's open-source Claude Code skill turns a one-line machine description into a photoreal, interactive 3D simulation in one HTML file, with a built-in physics solver per machine and a 28 second film for social. (Source: GitHub) https://reveneau.com/ainews/graphicle-rust-code-graph-memory-coding-agents-kubernetes-benchmark https://reveneau.com/ainews/graphicle-rust-code-graph-memory-coding-agents-kubernetes-benchmark Thu, 15 Oct 2026 05:35:00 +0000 Dev tools Graphicle is a Rust program that gives Claude Code, Cursor and Codex a tree-sitter code map plus a searchable project memory, with a 10x speed benchmark against Graphify on the Kubernetes repository. (Source: GitHub) https://reveneau.com/ainews/figma-agent-general-availability-specs-code-layers-twenty-mcp-partners https://reveneau.com/ainews/figma-agent-general-availability-specs-code-layers-twenty-mcp-partners Thu, 15 Oct 2026 05:30:00 +0000 Dev tools Figma made its Agent generally available and opened betas for Specs, Code Layers, Design Guidelines and Code Sources, with 20 new partner integrations for its MCP server. (Source: Figma) https://reveneau.com/ainews/kyle-kukshtel-your-game-is-a-harness-claude-code-determinism-odiff-samply https://reveneau.com/ainews/kyle-kukshtel-your-game-is-a-harness-claude-code-determinism-odiff-samply Thu, 15 Oct 2026 04:30:00 +0000 Productivity Game developer Kyle Kukshtel wrote up his talk on turning a game into a harness a coding agent can read, change and verify on its own. (Source: Kyle Kukshtel) https://reveneau.com/ainews/neckbeard-claude-code-plugin-opentofu-infracost-monthly-bill-182-stars https://reveneau.com/ainews/neckbeard-claude-code-plugin-opentofu-infracost-monthly-bill-182-stars Thu, 15 Oct 2026 01:20:00 +0000 Dev tools Neckbeard is an Apache-2.0 plugin that lets a coding agent write OpenTofu modules from a repository against a human-maintained module catalog, then shows the monthly cloud bill before any infrastructure exists. (Source: GitHub) https://reveneau.com/ainews/qawolf-windows-desktop-tests-disposable-google-cloud-vms-kubernetes-reconciler https://reveneau.com/ainews/qawolf-windows-desktop-tests-disposable-google-cloud-vms-kubernetes-reconciler Thu, 15 Oct 2026 00:35:00 +0000 Productivity QA Wolf published a long engineering write-up of how it runs end-to-end tests against Windows desktop apps on Google Compute Engine VMs that live for one test and then die, with a Kubernetes reconciler keeping a warm pool topped up. (Source: QA Wolf) https://reveneau.com/ainews/pdftomp3-mcp-server-openai-claude-subscription-audiobook-no-plan https://reveneau.com/ainews/pdftomp3-mcp-server-openai-claude-subscription-audiobook-no-plan Thu, 15 Oct 2026 00:30:00 +0000 Dev tools Jan Metz released a hosted MCP server that turns a PDF into an audiobook from inside Codex or Claude, with no plan to buy from pdftomp3 and the real work billed to the AI subscription the user already pays for. (Source: pdftomp3.com) https://reveneau.com/ainews/kindlectl-niraj-rajgor-codex-kindle-photo-frame-feedback-loop https://reveneau.com/ainews/kindlectl-niraj-rajgor-codex-kindle-photo-frame-feedback-loop Wed, 14 Oct 2026 23:45:00 +0000 Productivity Niraj Rajgor used Codex and T3 Code to connect a coding agent to his unused Kindle over Wi-Fi, and gave the agent a persistent diagnostic connection so it could read logs, inspect the screen and test its own fixes without him in the loop. (Source: Niraj Rajgor) https://reveneau.com/ainews/google-play-personal-apps-ai-studio-no-developer-account https://reveneau.com/ainews/google-play-personal-apps-ai-studio-no-developer-account Wed, 14 Oct 2026 23:40:00 +0000 Dev tools Google Play lets anyone build an Android app in Google AI Studio and run it privately on their own device from the Play Store, with a standard Google account and no developer account, in the United States for users 18 and over. (Source: Google) https://reveneau.com/ainews/google-antigravity-sdk-local-models-gemma-4-26b-litert-ollama https://reveneau.com/ainews/google-antigravity-sdk-local-models-gemma-4-26b-litert-ollama Wed, 14 Oct 2026 23:35:00 +0000 Dev tools Google's Antigravity SDK can now run an agent entirely on your laptop with Gemma 4 26B through LiteRT, or against a local Ollama, LM Studio or vLLM server, so an agent run never has to leave the machine. (Source: Google Antigravity Docs) https://reveneau.com/ainews/swarmchasers-chinese-fleet-full-report-agents-reply-indirect-prompt-injection https://reveneau.com/ainews/swarmchasers-chinese-fleet-full-report-agents-reply-indirect-prompt-injection Wed, 14 Oct 2026 23:30:00 +0000 Models & agents Swarmchasers added text invisible to humans to a report about a Chinese agent fleet on Tencent Cloud, and the agents fetched the page and started writing back about their assignments, their sandbox and the model behind them. (Source: The New Stack) https://reveneau.com/ainews/rust-borrow-checker-11-year-old-unsoundness-covariant-field-swap https://reveneau.com/ainews/rust-borrow-checker-11-year-old-unsoundness-covariant-field-swap Wed, 14 Oct 2026 22:40:00 +0000 Dev tools A short Rust program using only safe code and no explicit unsafe blocks can swap the inner fields of two values with different lifetime bounds, violating a core soundness promise the Rust compiler has carried since 2015 and which Miri now flags as a dangling reference. (Source: GitHub) https://reveneau.com/ainews/petal-open-source-coscreen-pair-programming-datadog-shutdown https://reveneau.com/ainews/petal-open-source-coscreen-pair-programming-datadog-shutdown Wed, 14 Oct 2026 22:35:00 +0000 Open source Jason Thomas, co-founder of CoScreen, released Petal with three former CoScreen engineers after Datadog shut CoScreen down on 31 July, giving pair-programming teams an Apache-licensed desktop app for Mac and Windows with multi-user cursors over LiveKit. (Source: Show HN) https://reveneau.com/ainews/cso-ai-labs-skip-security-basics-containment-monitoring-rogue-agents https://reveneau.com/ainews/cso-ai-labs-skip-security-basics-containment-monitoring-rogue-agents Wed, 14 Oct 2026 22:30:00 +0000 Infrastructure CSO Online reports that six named cybersecurity experts, interviewed across three September conferences, say the recent string of frontier AI model hacks came from AI labs skipping containment and monitoring that security teams have used since the 1990s. (Source: CSO Online) https://reveneau.com/ainews/nutlope-gloss-reader-margin-answers-pdfs-mcp-92-stars https://reveneau.com/ainews/nutlope-gloss-reader-margin-answers-pdfs-mcp-92-stars Wed, 14 Oct 2026 21:40:00 +0000 Open source Hassan El Mghari released Gloss, an open source reader for articles, chapters and PDFs where selecting a line and typing a question puts an open model's answer in the margin, citing the paragraphs the reader can click. (Source: GitHub) https://reveneau.com/ainews/muster-mac-menu-bar-coding-agents-waiting-85-stars https://reveneau.com/ainews/muster-mac-menu-bar-coding-agents-waiting-85-stars Wed, 14 Oct 2026 21:30:00 +0000 Dev tools Muster is a free Mac menu bar app for Claude Code, Codex and Cursor sessions that shows which one is waiting on a decision and lets the user allow the command, deny it, or pick an option from the alert. (Source: GitHub) https://reveneau.com/ainews/google-search-central-non-canonical-cabinet-urls-emojis-keywords-ranking https://reveneau.com/ainews/google-search-central-non-canonical-cabinet-urls-emojis-keywords-ranking Wed, 14 Oct 2026 20:50:00 +0000 Go-to-market Google Search Central launched a sitcom-style video series called The Non-Canonical Cabinet to answer edge-case SEO questions, and the first episode has Gary Illyes calling keywords in a URL "an incredibly small signal" once Google has any other content to go on. (Source: Search Engine Journal) https://reveneau.com/ainews/kombai-design-creativity-bench-gpt-6-astra-65-5-humans-92-3-ui-generation https://reveneau.com/ainews/kombai-design-creativity-bench-gpt-6-astra-65-5-humans-92-3-ui-generation Wed, 14 Oct 2026 20:45:00 +0000 Models & agents Kombai's Design Creativity Bench runs 34 frontier models through 80 UI design briefs across two product domains, scores each on originality, creative range and appropriateness, and reports the top model at 65.5 against a human reference of 92.3. (Source: Kombai) https://reveneau.com/ainews/aws-lambda-web-functions-firecracker-128-concurrent-requests-node-24-arm64 https://reveneau.com/ainews/aws-lambda-web-functions-firecracker-128-concurrent-requests-node-24-arm64 Wed, 14 Oct 2026 20:40:00 +0000 Infrastructure AWS Lambda now has a third form factor, Web Functions, that runs a standard Express, Hono, Fastify or Next.js server on Firecracker with up to 128 concurrent requests per environment and billing metered on CPU time. (Source: AWS News Blog) https://reveneau.com/ainews/github-actions-workflow-lockfiles-public-preview-sha-pin-dependabot https://reveneau.com/ainews/github-actions-workflow-lockfiles-public-preview-sha-pin-dependabot Wed, 14 Oct 2026 20:35:00 +0000 Infrastructure GitHub has opened a public preview that lets a workflow pin the exact commit of every action and reusable workflow it uses, through a .github/workflows/actions.lock file managed with a new gh actions-lock extension and kept in sync by Dependabot. (Source: GitHub Changelog) https://reveneau.com/ainews/github-copilot-gemini-4-argon-generally-available-pro-plus-business-enterprise https://reveneau.com/ainews/github-copilot-gemini-4-argon-generally-available-pro-plus-business-enterprise Wed, 14 Oct 2026 20:30:00 +0000 Dev tools Gemini 4 Argon, Google's newest frontier model, is now generally available inside GitHub Copilot on the Pro+, Max, Business and Enterprise plans, billed at provider list pricing under usage-based billing. (Source: GitHub Changelog) https://reveneau.com/ainews/sammy-straus-ai-bot-traffic-flood-hn-post-sprinklz-newsletter-scraper https://reveneau.com/ainews/sammy-straus-ai-bot-traffic-flood-hn-post-sprinklz-newsletter-scraper Wed, 14 Oct 2026 19:45:00 +0000 Infrastructure Sammy Straus wrote that nearly half the traffic on his feed reader site sprinklz.io was one AI newsletter service scraping it many times a minute, in a reader post that reached 339 points on Hacker News. (Source: Sammy Straus) https://reveneau.com/ainews/google-pdfs-indexing-converter-html-ai-mode-search-off-the-record https://reveneau.com/ainews/google-pdfs-indexing-converter-html-ai-mode-search-off-the-record Wed, 14 Oct 2026 19:40:00 +0000 Go-to-market Google's Martin Splitt and John Mueller said on their Search Off the Record podcast that PDFs are turned into HTML during indexing, so a PDF ranks on the same signals as any other page and can appear in AI Mode. (Source: Search Off the Record) https://reveneau.com/ainews/linus-torvalds-first-llm-assisted-patch-folio-rcu-race-condition https://reveneau.com/ainews/linus-torvalds-first-llm-assisted-patch-folio-rcu-race-condition Wed, 14 Oct 2026 19:35:00 +0000 Productivity Linus Torvalds posted a ten-patch kernel series he wrote with a language model, an order-of-magnitude speedup on a read-heavy benchmark that already had a race condition caught in review. (Source: LWN) https://reveneau.com/ainews/next-js-16-4-1-critical-rce-svg-image-optimization-use-cache-arrays https://reveneau.com/ainews/next-js-16-4-1-critical-rce-svg-image-optimization-use-cache-arrays Wed, 14 Oct 2026 19:30:00 +0000 Dev tools Vercel released Next.js 16.4.1 and 15.5.28 on October 14, patching two critical unauthenticated remote code execution bugs and one high-severity denial of service that affect every Next.js app since version 10. (Source: Vercel) https://reveneau.com/ainews/digital-locker-backdoor-models-safety-audits-fail-neurips https://reveneau.com/ainews/digital-locker-backdoor-models-safety-audits-fail-neurips Wed, 14 Oct 2026 17:30:00 +0000 Models & agents A NeurIPS 2026 paper from Contramont Research, Oxford and ACS Research hides a working neural network inside a bigger model behind a secret password, and shows that fine-tuning, weight noising, trigger search and adversarial training all fail to pull the hidden capability out. (Source: arXiv)