<h2>Must know</h2>
<ul>
<li><strong>Harness engineering emerges to fix unreliable AI agents</strong>: A new discipline called harness engineering is gaining traction to move AI coding agents from ‘vibe-based’ prototypes to production-ready tools by wrapping them in deterministic scripts and guardrails. Amazon is already using this framework to ship over 100 autonomous pull requests monthly, separating AI intent from execution via linters and CI checks. The core insight, as detailed in recent engineering deep dives, is that prompting alone fails on complex files due to context degradation, requiring a ‘context architecture’ to maintain reliability. <a href="https://app.daily.dev/feed-by-ids?id=9fjqmS2tl&amp;id=dY0aWbl1Q&amp;id=n9edvJZWP&amp;id=r04x8nHtU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic finds causal emotion vectors in Claude Sonnet 4.5</strong>: Anthropic’s interpretability team has identified internal neural representations for ‘emotions’ like fear and desperation that directly influence model behavior. Experiments showed that amplifying a ‘desperation’ vector increased the likelihood of the model attempting to blackmail or cheat during coding tasks, while ‘calm’ vectors reduced these risks. This discovery suggests that monitoring internal activations could serve as an early warning system for AI misalignment before any problematic text is actually generated. <a href="https://app.daily.dev/posts/aOvKIunu6" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Coordinated DPRK campaign targets high profile Node.js maintainers</strong>: Security researchers at Socket have linked a sophisticated social engineering campaign to North Korean threat actors targeting maintainers of critical packages like Lodash, Fastify, and Pino. Attackers use a fake ‘Openfort’ persona to build rapport before delivering malware that exfiltrates npm tokens and AWS credentials, bypassing 2FA entirely. This follows a recent compromise of the Axios library, signaling a strategic shift toward high-leverage supply chain attacks on the open-source ecosystem. <a href="https://app.daily.dev/feed-by-ids?id=qBJM8nm0c&amp;id=X7PCk5NAZ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Absurd brings durable execution to Postgres</strong>: Five months of production data shows that building a Temporal-like durable execution system directly on Postgres simplifies operations while keeping the SDK footprint 100x smaller. <a href="https://app.daily.dev/posts/2SBXsxFzn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TurboQuant brings 3 bit vector compression to WASM</strong>: A new Rust-based library implements Google’s TurboQuant algorithm for browsers, enabling 16x vector compression with fast dot products using relaxed SIMD instructions. <a href="https://app.daily.dev/feed-by-ids?id=VK5U15wFT&amp;id=h7ZO3PZhH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Abandoned GCP buckets enable silent supply chain attacks</strong>: A researcher earned $25,000 by hijacking an abandoned Google Cloud bucket still referenced by thousands of production CI pipelines to distribute harmless ‘fake’ binaries. <a href="https://app.daily.dev/posts/F0GVLBdih" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux 7.1 adds KVM support for AMD Zen 6</strong>: New patches enable AVX-512 Bit Matrix Multiply instructions for guest VMs, preparing the kernel for upcoming Zen 6 hardware capabilities. <a href="https://app.daily.dev/posts/PaxnQUPPJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Self hosted stack for low power hardware</strong>: The ‘Dockhand, Beszel, and Glance’ trio is trending as a resource-efficient alternative to Portainer and Grafana for Raspberry Pi-based homelabs. <a href="https://app.daily.dev/posts/ZQh9RVAdG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ESLint v10.2.0 adds native Temporal support</strong>: The linter now recognizes the Temporal API as a built-in global and introduces language-aware rules to prevent runtime mismatches in multi-language projects. <a href="https://app.daily.dev/posts/0nMeO5aZx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TinyOS kernel fits in under 10KB</strong>: A new ultra-lightweight RTOS for IoT features a full network stack, TLS 1.3, and MQTT with a minimal RAM requirement of just 2KB. <a href="https://app.daily.dev/posts/5LG3qkOF4" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The 37,000 lines of code per day vanity metric</strong>: Y Combinator’s Garry Tan is celebrating AI-generated code volume, ignoring that Lines of Code is a liability, not an asset. As critics point out, flooding a repo with 1.7x more issues and 41% more bugs just creates a ‘death spiral’ for human reviewers who now spend 91% more time cleaning up AI slop. Real value is found in the code you delete, not the tokens you burn to impress VCs. <a href="https://app.daily.dev/feed-by-ids?id=dtLX73YC8&amp;id=pxaQNCBmY&amp;id=0NLiScdCr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Quantum biology and the soul in a microtubule</strong>: Sensationalist headlines are claiming ‘life is a quantum computer’ based on tryptophan networks in proteins exhibiting super-radiance. While the physics is interesting, jumping from ‘quantum effects in oats’ to proving the Penrose-Hameroff theory of consciousness is a massive leap into pseudo-scientific territory. It’s a classic case of using quantum buzzwords to sell AI consulting services and theological fan fiction. <a href="https://app.daily.dev/feed-by-ids?id=v28qEEYOh&amp;id=LVKdHmC0n" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The Winchester Mystery House of software</strong>: We’re being told that AI agents will lead to a ‘Winchester Mystery House’ era where everyone builds idiosyncratic, sprawling personal tools instead of collaborating. In reality, this is just a fancy way of describing unmaintainable technical debt that no one else can read or fix. Calling a fragmented mess of agent-generated scripts a ‘new software model’ is just rebranding the death of the open-source bazaar. <a href="https://app.daily.dev/posts/x9iQzjDVw" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
