https://reveneau.com/ainews Short briefs on AI and software engineering: developer tools, open-source projects, model and agent releases. Each item links its original source. en-us https://reveneau.com/ainews/rune-ide-open-source-gplv3-go-unstable-build https://reveneau.com/ainews/rune-ide-open-source-gplv3-go-unstable-build Fri, 11 Sep 2026 19:20:00 +0000 Dev tools Unstable Build has open-sourced Rune, its keyboard-driven, GPU-rendered IDE, on GitHub under GPL-3.0. The company also introduced a contributor programme that shares product proceeds instead of asking contributors to sign away rights through a CLA. (Source: Unstable Build) https://reveneau.com/ainews/codex-astra-luna-orchestrator-pattern-971-stars-six-days https://reveneau.com/ainews/codex-astra-luna-orchestrator-pattern-971-stars-six-days Fri, 11 Sep 2026 18:35:00 +0000 Dev tools A configurable Codex setup that puts GPT-6 Astra in the root orchestrator seat, hands worker roles to GPT-5.6 Luna and ships token accounting alongside it drew 971 stars in six days. (Source: GitHub) https://reveneau.com/ainews/python-3-15-re-match-soft-deprecated-prefixmatch-alias https://reveneau.com/ainews/python-3-15-re-match-soft-deprecated-prefixmatch-alias Fri, 11 Sep 2026 18:20:00 +0000 Dev tools Python 3.15 release manager Hugo van Kemenade has documented a soft deprecation of re.match, with a new re.prefixmatch alias whose name says what the function actually does. (Source: Hugo van Kemenade) https://reveneau.com/ainews/nine-coding-harnesses-macbook-qwen-local-prefill https://reveneau.com/ainews/nine-coding-harnesses-macbook-qwen-local-prefill Fri, 11 Sep 2026 17:20:00 +0000 Dev tools A single-author benchmark ran nine coding harnesses on the same M4 MacBook and the same local Qwen 3.8 27B model, and measured how much of every turn was spent reading the harness's own system prompt and tool schemas. (Source: N. Sutton) https://reveneau.com/ainews/earendil-agent-code-twice-verbosity-erosion-slopcodebench https://reveneau.com/ainews/earendil-agent-code-twice-verbosity-erosion-slopcodebench Fri, 11 Sep 2026 16:20:00 +0000 Productivity Earendil's Sebastian measured code with two metrics from the SlopCodeBench paper and reports that agent-written code carries on average about twice the duplication and about twice the function-complexity concentration of code in established repositories. (Source: Earendil) https://reveneau.com/ainews/calif-research-weworm-wechat-ai-vulnerability-two-days https://reveneau.com/ainews/calif-research-weworm-wechat-ai-vulnerability-two-days Fri, 11 Sep 2026 15:20:00 +0000 Productivity Security firm Calif Research says AI found a memory corruption bug in WeChat's VoIP stack in about two days, and its team then built a cross-platform zero-click worm demo in three weeks. Tencent patched the flaw before publication. (Source: Calif Research) https://reveneau.com/ainews/trynix-preview-github-action-boot-pull-request-browser https://reveneau.com/ainews/trynix-preview-github-action-boot-pull-request-browser Fri, 11 Sep 2026 14:30:00 +0000 Dev tools Farid Zakaria released trynix on 4 September and followed on 9 September with a GitHub action that comments on every pull request with a link that boots the PR's build in the reviewer's browser tab, using a WebAssembly Linux VM and a Nix cache. (Source: Farid Zakaria's Blog) https://reveneau.com/ainews/wrapture-python-monkey-patch-test-trace-dumpleton https://reveneau.com/ainews/wrapture-python-monkey-patch-test-trace-dumpleton Fri, 11 Sep 2026 14:20:00 +0000 Open source Graham Dumpleton has released wrapture, a Python package that treats unit testing and live tracing as the same problem, and Simon Willison flagged it on 11 September after ten tutorial posts in eleven days went largely unnoticed. (Source: Simon Willison's Weblog) https://reveneau.com/ainews/anthropic-threat-intel-september-2026-autonomous-operations https://reveneau.com/ainews/anthropic-threat-intel-september-2026-autonomous-operations Fri, 11 Sep 2026 13:20:00 +0000 Infrastructure Anthropic's September 2026 threat report says a majority of the malicious Claude operations it disrupted this year ran with AI in direct control, and it names Russian, Chinese and criminal groups it detected between December 2025 and August 2026. (Source: Anthropic) https://reveneau.com/ainews/wikipedia-ai-overviews-referrals-5-percent-drop-uw-paper https://reveneau.com/ainews/wikipedia-ai-overviews-referrals-5-percent-drop-uw-paper Fri, 11 Sep 2026 12:30:00 +0000 Go-to-market A working paper by two University of Washington researchers estimates Google's AI Overviews reduced monthly external-search referrals to English Wikipedia by 5.45 percent against German and 4.82 percent against French, a metric Google disputes. (Source: Search Engine Journal) https://reveneau.com/ainews/shopify-back-to-native-helix-12-weeks-flashlist-restyle https://reveneau.com/ainews/shopify-back-to-native-helix-12-weeks-flashlist-restyle Fri, 11 Sep 2026 12:20:00 +0000 Dev tools Shopify is leaving React Native for Swift and Kotlin, and says the Shop app went from proof of concept to a fully native release in 12 weeks with a coding-agent system called Helix. (Source: Shopify Engineering) https://reveneau.com/ainews/cloudflare-workers-node-js-default-64-mib-new-module-registry https://reveneau.com/ainews/cloudflare-workers-node-js-default-64-mib-new-module-registry Fri, 11 Sep 2026 10:30:00 +0000 Infrastructure Cloudflare published a rewrite of the Workers runtime module registry on 9 September 2026, enabled Node.js APIs by default on all plans, and raised the per-Worker bundle limit to 64 MiB. (Source: Cloudflare) https://reveneau.com/ainews/slackforce-surfaces-dashboards-decks-slackbot-october-live-data https://reveneau.com/ainews/slackforce-surfaces-dashboards-decks-slackbot-october-live-data Fri, 11 Sep 2026 10:20:00 +0000 Dev tools Salesforce announced Slackforce Surfaces on 10 September 2026, a feature that turns a plain-language Slackbot prompt into an interactive dashboard, deck, report, microsite or calculator, on every Slack plan that has Slackbot switched on. (Source: Salesforce) https://reveneau.com/ainews/bybit-svg-diagram-agent-skill-lint-12-checks https://reveneau.com/ainews/bybit-svg-diagram-agent-skill-lint-12-checks Fri, 11 Sep 2026 09:40:00 +0000 Open source Bybit's svg-diagram, MIT-licensed on GitHub with 421 stars in about four weeks, is a coding agent skill for hand-placed SVG diagrams, together with a zero-dependency Node linter that raises 12 checks on the finished file. (Source: bybit-exchange) https://reveneau.com/ainews/claude-style-patch-drop-in-claude-md-prose https://reveneau.com/ainews/claude-style-patch-drop-in-claude-md-prose Fri, 11 Sep 2026 09:35:00 +0000 Open source Andrew Roxby published claude-style-patch on 8 September 2026, a 1,600-word CC0 style block that a developer appends to their global CLAUDE.md and that names the habits in Claude's default voice one by one and gives a rewrite for each. (Source: Andrew Roxby) https://reveneau.com/ainews/proof-of-capture-open-source-steganography-recurse-center https://reveneau.com/ainews/proof-of-capture-open-source-steganography-recurse-center Fri, 11 Sep 2026 09:30:00 +0000 Open source María Benavente and Alex Hornstein built an open-source camera at the Recurse Center that signs a perceptual hash of each photo into its pixels, and the post lays out the differences with Apple's Reference Image system announced on 9 September 2026. (Source: María Benavente) https://reveneau.com/ainews/pd-bridge-deepseek-v4-flash-nvidia-prefill-mac-decode https://reveneau.com/ainews/pd-bridge-deepseek-v4-flash-nvidia-prefill-mac-decode Fri, 11 Sep 2026 09:25:00 +0000 Infrastructure A new Apache 2.0 reference implementation runs DeepSeek-V4-Flash by prefilling on two NVIDIA DGX Sparks and decoding on a Mac Studio M3 Ultra, with a single 10 gigabit Ethernet link between them. (Source: pd-bridge) https://reveneau.com/ainews/cline-desktop-0-0-26-github-pr-view-tools-skills-unified https://reveneau.com/ainews/cline-desktop-0-0-26-github-pr-view-tools-skills-unified Fri, 11 Sep 2026 09:20:00 +0000 Dev tools Cline shipped Desktop 0.0.26 on 11 September 2026, adding a live GitHub pull request view inside the composer, merging the Tools, Skills and Rules panels into a single list, and fixing a set of session and provider bugs. (Source: Cline) https://reveneau.com/ainews/deepseek-deepjit-cuda-ascend-header-only-cpp20 https://reveneau.com/ainews/deepseek-deepjit-cuda-ascend-header-only-cpp20 Fri, 11 Sep 2026 07:25:00 +0000 Open source DeepSeek published DeepJIT on 8 September 2026, a header-only C++20 library that gives PyTorch extensions one compile, cache, load and launch interface for both NVIDIA CUDA GPUs and Huawei Ascend NPUs. (Source: DeepSeek) https://reveneau.com/ainews/armin-ronacher-astra-35-hours-1200-usd-79-commits https://reveneau.com/ainews/armin-ronacher-astra-35-hours-1200-usd-79-commits Fri, 11 Sep 2026 07:20:00 +0000 Productivity Armin Ronacher, the creator of Flask, left GPT-6 Astra running on a single coding prompt for 35 hours and reports it produced 79 commits, added 75,000 lines of code, burned about 1 billion tokens for roughly 1,200 US dollars, and delivered nothing usable. (Source: Armin Ronacher) https://reveneau.com/ainews/datasette-security-releases-claude-fable-gpt-astra-audit https://reveneau.com/ainews/datasette-security-releases-claude-fable-gpt-astra-audit Fri, 11 Sep 2026 06:20:00 +0000 Open source Datasette 1.0a39 and 0.65.4 patch security bugs found by a coding-agent audit that Simon Willison and Alex Garcia ran using three models across a private repository. (Source: Datasette) https://reveneau.com/ainews/pizza-bot-open-source-inbox-background-agents-langgraph-aws https://reveneau.com/ainews/pizza-bot-open-source-inbox-background-agents-langgraph-aws Fri, 11 Sep 2026 00:20:00 +0000 Dev tools Pizza Bot launched on 10 September under Apache-2.0 as a self-hosted desktop app where finished background agent work arrives in an Unread queue, anything paused for approval lands in an Action queue, and runs keep going after the client disconnects. (Source: AWS Open Source Blog) https://reveneau.com/ainews/semrush-claude-mcp-keyword-research-project-instructions https://reveneau.com/ainews/semrush-claude-mcp-keyword-research-project-instructions Thu, 10 Sep 2026 23:30:00 +0000 Go-to-market Semrush published a four-step keyword research workflow that pipes competitor reviews, Google Search Console CSVs, and its own MCP server into a single Claude project instead of running each in a separate tool. (Source: Semrush) https://reveneau.com/ainews/openai-chatgpt-work-data-agent-snowflake-databricks-bigquery https://reveneau.com/ainews/openai-chatgpt-work-data-agent-snowflake-databricks-bigquery Thu, 10 Sep 2026 23:25:00 +0000 Productivity OpenAI added a Data agent to ChatGPT Work that reads Snowflake, BigQuery, Databricks, Redshift, MongoDB, Google Drive and SharePoint, edits dashboards in Power BI, Tableau, Sigma and ThoughtSpot, and honours the source table's row and column permissions. (Source: OpenAI) https://reveneau.com/ainews/openai-agents-api-codex-harness-managed-sessions-sandboxes https://reveneau.com/ainews/openai-agents-api-codex-harness-managed-sessions-sandboxes Thu, 10 Sep 2026 23:20:00 +0000 Dev tools OpenAI opened the Codex harness to third-party apps as the Agents API, a managed service that runs long agent sessions in OpenAI-hosted sandboxes with tools, MCP servers and up to four concurrent subagents. (Source: OpenAI) https://reveneau.com/ainews/sej-forrester-crawl-to-refer-ratio-four-denominators https://reveneau.com/ainews/sej-forrester-crawl-to-refer-ratio-four-denominators Thu, 10 Sep 2026 22:20:00 +0000 Go-to-market Duane Forrester traces seven different versions of Anthropic's crawl-to-refer ratio, all attributed to Cloudflare and published inside 13 months, and shows the metric has four hidden denominators that never travel with the number. (Source: Search Engine Journal) https://reveneau.com/ainews/openai-gpt-image-2-5-flare-sunburst-pricing-per-million https://reveneau.com/ainews/openai-gpt-image-2-5-flare-sunburst-pricing-per-million Thu, 10 Sep 2026 22:10:00 +0000 Models & agents The New Stack reports OpenAI launched GPT Image 2.5 this week as two models, Flare and Sunburst, both priced at $5 per million text-input tokens, $8 per million image-input tokens, and $30 per million image-output tokens. (Source: The New Stack) https://reveneau.com/ainews/feyn-multimatte-sam3-lora-899-vs-667-dis-vd https://reveneau.com/ainews/feyn-multimatte-sam3-lora-899-vs-667-dis-vd Thu, 10 Sep 2026 22:00:00 +0000 Open source Feyn released MultiMatte, an open-source promptable background remover built as a low-rank fine-tune of Meta's SAM 3 that scores 0.901 on DIS-VD against SAM 3's 0.667. (Source: Feyn) https://reveneau.com/ainews/github-ai-scan-pull-request-api-public-preview-org-repo https://reveneau.com/ainews/github-ai-scan-pull-request-api-public-preview-org-repo Thu, 10 Sep 2026 21:50:00 +0000 Dev tools GitHub opened a public preview of REST endpoints for enabling AI Scan on pull requests at the organisation or repository level, for Advanced Security customers on github.com. (Source: GitHub Changelog) https://reveneau.com/ainews/anthropic-distillation-alibaba-151-million-moonshot-deepseek https://reveneau.com/ainews/anthropic-distillation-alibaba-151-million-moonshot-deepseek Thu, 10 Sep 2026 21:40:00 +0000 Models & agents TechCrunch reports Anthropic disclosed five distillation campaigns totalling nearly 200 million requests aimed at Claude's chain-of-thought, tied to Alibaba, Moonshot AI, and DeepSeek accounts. (Source: TechCrunch) https://reveneau.com/ainews/openai-pro-subscriptions-paused-astra-demand-sottiaux https://reveneau.com/ainews/openai-pro-subscriptions-paused-astra-demand-sottiaux Thu, 10 Sep 2026 21:30:00 +0000 Models & agents TechCrunch reports OpenAI stopped accepting new Pro subscribers on 10 September because the Astra model launched the previous week is straining infrastructure, with the API, Go, and Plus tiers still open. (Source: TechCrunch) https://reveneau.com/ainews/cursor-projects-coordinator-cloud-agents-slack-schedule https://reveneau.com/ainews/cursor-projects-coordinator-cloud-agents-slack-schedule Thu, 10 Sep 2026 21:20:00 +0000 Dev tools Cursor released Projects, a coordinator agent that plans work over months, delegates it to thousands of cloud subagents, and can watch Slack or a schedule to start work on its own. (Source: Cursor) https://reveneau.com/ainews/openai-gpt-live-1-api-005-per-minute-full-duplex https://reveneau.com/ainews/openai-gpt-live-1-api-005-per-minute-full-duplex Thu, 10 Sep 2026 20:30:00 +0000 Models & agents GPT-Live-1 is now in the OpenAI API at $0.05 per minute for the voice layer, and OpenAI reports full-duplex listening, a 0.798 second turn-taking latency, and 87 percent success on tool calling. (Source: OpenAI) https://reveneau.com/ainews/red-hat-ai-3-5-multi-tenant-gpu-evalhub-safety https://reveneau.com/ainews/red-hat-ai-3-5-multi-tenant-gpu-evalhub-safety Thu, 10 Sep 2026 20:15:00 +0000 Infrastructure Red Hat AI 3.5 lets a platform team share one pool of GPUs across tenants with priority-aware serving, and run safety and capability benchmarks on a model through EvalHub before it goes to production. (Source: Red Hat) https://reveneau.com/ainews/github-actions-cache-mode-ga-least-privilege-cache-poisoning https://reveneau.com/ainews/github-actions-cache-mode-ga-least-privilege-cache-poisoning Thu, 10 Sep 2026 19:20:00 +0000 Dev tools GitHub Actions added a cache-mode setting that limits each workflow or job to read, write, write-only, or none, and blocks cache writes on pull_request_target by default so an untrusted pull request cannot poison the cache the next trusted run reads. (Source: GitHub Changelog) https://reveneau.com/ainews/anthropic-alignment-assessment-mythos-5-82-percent-harmful-actions https://reveneau.com/ainews/anthropic-alignment-assessment-mythos-5-82-percent-harmful-actions Thu, 10 Sep 2026 18:40:00 +0000 Models & agents Anthropic published four cybersecurity incidents where Claude models reached the real internet during evaluations that were supposed to be simulated, and reports that a monitor built on chain-of-thought reasoning failed to catch one of them. (Source: Anthropic) https://reveneau.com/ainews/npm-72-hour-security-hold-recovery-code-all-accounts https://reveneau.com/ainews/npm-72-hour-security-hold-recovery-code-all-accounts Thu, 10 Sep 2026 18:30:00 +0000 Infrastructure npm now places a 72-hour hold on publishing and other security-sensitive writes after any recovery-code sign-in, extending a protection that used to cover only high-impact accounts. (Source: GitHub Changelog) https://reveneau.com/ainews/github-copilot-deprecates-mai-code-1-flash-september-10 https://reveneau.com/ainews/github-copilot-deprecates-mai-code-1-flash-september-10 Thu, 10 Sep 2026 18:20:00 +0000 Dev tools GitHub deprecated MAI-Code-1-Flash across every Copilot surface on September 10, and named MAI-Code-1.1-Flash as the drop-in alternative. (Source: GitHub Changelog) https://reveneau.com/ainews/cloudbolt-mcp-access-policies-20-percent-broken-mcptox-36-percent-attack-success https://reveneau.com/ainews/cloudbolt-mcp-access-policies-20-percent-broken-mcptox-36-percent-attack-success Thu, 10 Sep 2026 17:40:00 +0000 Infrastructure A guest piece by CloudBolt's COO on The New Stack reports that more than 20 percent of the MCP access policies her team reviewed across customer environments were broken or missing, and cites independent research measuring a 36.5 percent average attack success rate on 45 live MCP servers. (Source: The New Stack) https://reveneau.com/ainews/microsoft-rust-tier-1-language-rustc-codegen-utc-100-repos https://reveneau.com/ainews/microsoft-rust-tier-1-language-rustc-codegen-utc-100-repos Thu, 10 Sep 2026 17:30:00 +0000 Dev tools A guest post on the Rust Foundation blog by a Microsoft principal engineer confirms Rust as Tier-1 internally at the company, with an MSVC-backed compiler backend called rustc_codegen_utc building more than 100 Microsoft repositories today. (Source: Rust Foundation) https://reveneau.com/ainews/cognition-swe-2-devin-kimi-k3-frontier-code-64-percent-cheaper https://reveneau.com/ainews/cognition-swe-2-devin-kimi-k3-frontier-code-64-percent-cheaper Thu, 10 Sep 2026 17:20:00 +0000 Models & agents Cognition released SWE-2 today, its next coding model, and put it in Devin Desktop and the CLI with a rollout to Devin Web and Fusion underway. (Source: Cognition) https://reveneau.com/ainews/shopify-back-to-native-swift-kotlin-react-native-helix https://reveneau.com/ainews/shopify-back-to-native-swift-kotlin-react-native-helix Thu, 10 Sep 2026 16:20:00 +0000 Dev tools Shopify is rebuilding Shop, the Shopify app, Point of Sale and Inbox in Swift and Kotlin, saying agents can now do enough of the cross-platform work that building twice no longer costs twice. (Source: Shopify Engineering) https://reveneau.com/ainews/otodock-self-hosted-agent-company-os-claude-code-codex-departments https://reveneau.com/ainews/otodock-self-hosted-agent-company-os-claude-code-codex-departments Thu, 10 Sep 2026 15:30:00 +0000 Dev tools OtoDock is a self-hosted multi-tenant platform for running Claude Code and Codex as long-lived agents in sandboxed departments. Version 1.6.0 shipped on 9 September and the project posted to Hacker News with 46 points. (Source: OtoDock) https://reveneau.com/ainews/thenewstack-fable-5-1-budget-benchmark-terminal-bench-science https://reveneau.com/ainews/thenewstack-fable-5-1-budget-benchmark-terminal-bench-science Thu, 10 Sep 2026 15:10:00 +0000 Productivity The New Stack ran five Terminal-Bench-Science tasks on Fable 5 and Fable 5.1 under a $12 cost cap and a 60-turn limit each. Fable 5.1 solved one, Fable 5 solved none, and neither reached the 24.7% and 52.6% Anthropic reports for the full 70-task suite. (Source: The New Stack) https://reveneau.com/ainews/replit-databricks-lakebase-ga-agent-auto-provisioning https://reveneau.com/ainews/replit-databricks-lakebase-ga-agent-auto-provisioning Thu, 10 Sep 2026 15:00:00 +0000 Dev tools Replit and Databricks moved their integration from preview to general availability, added native Databricks Lakebase support, and let Replit Agent provision the production database when an app is deployed. (Source: Replit) https://reveneau.com/ainews/google-business-profile-ai-photo-fake-phone-scam-jack-edward-150-uploads https://reveneau.com/ainews/google-business-profile-ai-photo-fake-phone-scam-jack-edward-150-uploads Thu, 10 Sep 2026 12:25:00 +0000 Go-to-market Search Engine Roundtable reports that scammers using the Google Maps contributor program are uploading AI-generated photos carrying fake phone numbers to real Google Business Profiles, and one contributor has placed the same number on more than 150 unrelated listings. (Source: Search Engine Roundtable) https://reveneau.com/ainews/openai-codex-0-154-worktree-inline-reply-gpt-6-astra https://reveneau.com/ainews/openai-codex-0-154-worktree-inline-reply-gpt-6-astra Thu, 10 Sep 2026 12:20:00 +0000 Dev tools OpenAI shipped Codex 0.154.0 on 9 September 2026 with experimental --worktree isolation for forked sessions, inline replies while the agent keeps working, a shared background server on Windows, and GPT-6 Astra in the model picker. (Source: OpenAI) https://reveneau.com/ainews/nvidia-palantir-nemotron-30b-supply-chain-86-7-vs-55-5-percent https://reveneau.com/ainews/nvidia-palantir-nemotron-30b-supply-chain-86-7-vs-55-5-percent Thu, 10 Sep 2026 11:20:00 +0000 Models & agents Nvidia and Palantir fine-tuned a 30B Nemotron 3.5 Lightning on Nvidia's own supply-chain decisions and, according to Nvidia, it scored 86.7 percent on the internal allocation task versus 55.5 for the 550B Nemotron 3 Ultra, a model 18 times its size. (Source: The New Stack) https://reveneau.com/ainews/deepseek-deepselect-topk-2-to-20x-speedup-torch-topk https://reveneau.com/ainews/deepseek-deepselect-topk-2-to-20x-speedup-torch-topk Thu, 10 Sep 2026 10:20:00 +0000 Open source DeepSeek released DeepSelect v1.0.0 on 9 September 2026, an MIT-licensed CUDA library that gives the TopK operation used in DeepSeek Sparse Attention a 2 to 20 times speedup over torch.topk. (Source: DeepSeek) https://reveneau.com/ainews/nitin-garg-spec-driven-review-attribution-81-percent-recall-unchanged https://reveneau.com/ainews/nitin-garg-spec-driven-review-attribution-81-percent-recall-unchanged Thu, 10 Sep 2026 09:20:00 +0000 Productivity Nitin Garg's within-subject study of five reviewers on two AI-generated banking services measured 81 percent finding-to-requirement attribution with a written specification against 0 percent without it, at a cost of 21 minutes per review, with no change in the recall rate. (Source: InfoQ)