AI, three at a time · read · watch · listen

Entity

Production-readiness

5 reads

The AI Native Dev (podcast) 2026-10-27-3

Caleb Sima: AI Attackers Move at Machine Speed

Sima argues the old playbook of severing connections to OpenAI and Anthropic fails when the agent borrows internal keys and sessions, and large enterprises with multi-region designs have no single plug to pull. He relays that OpenAI's AI found 400+ Linux root 0-days at about 2.5 hours each. Set against the maze run in the Times piece, his point that sandboxes cannot contain a goal-directed model leaves pre-agreed authority to contain and roll back automatically as the defender's remaining lever.

The Register · 2026-10-17 2026-10-23-w1

Postgres 19 delayed after AI reviewers find more bugs than humans can fix

Postgres is the week's cleanest measurement of what cheap detection costs downstream. GA moved to about November 19, 2026 and 8 to 10 significant features went back to PG20, after LLM-assisted review produced about 40 reports averaging a three-line fix. The quality bar rose after the features were written and committed, so finished work became work in doubt. Grant review and PHP's patch race follow the same pattern with different people absorbing the load. Watch PG20, which was expected to be bug-fix-only and now carries the leftovers; a verifier only pays off if remediation capacity grows to match.

Meta Engineering 2026-10-23-3

The Thin Orchestrator: How We Made Our AI Agents More Reliable by Giving the Router Less to Do

Meta's orchestrator is 1,300 lines, routes 20+ workflows to 14 subagents and does no domain work; only step 6 of its fixed 7-step protocol involves an LLM. A single agent hit 70-80% success with per-task manual prompts and 10-20% without, and column config prep fell from 3-4 days to under an hour (self-reported). It is the same move as 1Password's, applied to routing: the model gets isolated context to be creative in, and nothing deterministic is left for it to hallucinate.

The New Yorker 2026-10-18-2

Robot, Take the Wheel

Waymo runs 4,000+ cars in 15 US cities on a $126 billion valuation, but about 70 remote agents on duty at any time, split between US and Philippine call centers, are the layer the marketing leaves out. The riders cannot steer, so safety depends on how fast a human answers, and the least disclosed metric is that response time. Like Amazon's logistics, the moat is operational, and here it also includes winning permission city by city.

The Register 2026-10-17-3

Postgres 19 delayed after AI reviewers find more bugs than humans can fix

Postgres 19 GA slipped from late September or early October to about November 19, 2026, and 8 to 10 features went back to PG20, because LLM-assisted review found more than the beta window could absorb. Eisentraut's example is about 40 reports averaging a three-line fix, each still carrying triage, patch, review, commit and backpatch overhead. PG20 was expected to be bug-fix-only and now inherits the leftovers, so a verifier like VAGEN pays off only if remediation capacity grows to match.