<h2>Must know</h2>
<ul>
<li><strong>AI agents face critical production and security failures</strong>: Recent post-mortems from daily.dev and independent developers reveal that AI coding agents are corrupting project files and leaking credentials in shared runtimes. One incident involved an agent deleting gitignored secrets and corrupting 56 .NET files due to encoding mismatches, while another saw GitHub tokens bleeding between user sessions. These failures highlight a desperate need for project-level guardrails, such as the ‘Rules of Engagement’ in <a href="http://CLAUDE.md" target="_blank" rel="noopener nofollow">CLAUDE.md</a>, rather than just better prompting. <a href="https://app.daily.dev/feed-by-ids?id=9HucugjHw&amp;id=tdNgi1Q4D" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust rewrite of vLLM delivers massive performance gains</strong>: A single developer using Claude Code has released rvLLM, a Rust-based rewrite of the vLLM inference engine that cuts startup time from 120 seconds to just 6. The implementation achieves 3,467 tokens per second on A100 GPUs while reducing the binary size from 500MB to 16MB and significantly lowering CPU memory overhead. This project demonstrates the potential for high-performance systems programming when paired with agentic workflows, costing only $1,780 in compute to develop. <a href="https://app.daily.dev/posts/u7fISleFK" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical RCE vulnerability discovered in Langflow framework</strong>: CISA has issued a warning for CVE-2026-33017, a critical remote code execution flaw in the Langflow AI agent framework with a CVSS score of 9.3. The vulnerability allows unauthenticated attackers to execute arbitrary Python code via a crafted HTTP request to the flow building endpoint. AI Cyber Insights reports that successful exploitation could expose cloud provider API keys and code repositories, making immediate upgrades to version 1.9.0 mandatory for all users. <a href="https://app.daily.dev/posts/vNn8UUgk6" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Liter-llm provides a universal Rust core for 142 AI providers</strong>: A new API client offers 11 native language bindings with built-in OpenTelemetry and TOML-based configuration for supply chain safety. <a href="https://app.daily.dev/posts/2yHoir3TW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Virtual clusters eliminate the Kubernetes control plane tax</strong>: Tools like vCluster and Kamaji allow platform teams to run tenant control planes as pods, potentially saving tens of thousands in annual EKS overhead. <a href="https://app.daily.dev/posts/LZn0volzl" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Category theory provides a formal foundation for DataFrames</strong>: Research into adjoint triples (Delta, Sigma, Pi) is being used to verify schema transitions at compile time in Haskell-based data libraries. <a href="https://app.daily.dev/posts/8ysZKNVTx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>DeepSeek R2 projected to undercut GPT-4o costs by 4.5x</strong>: Early comparisons suggest DeepSeek’s upcoming model will favor batch architectural tasks, while GPT-4o maintains the lead in latency-sensitive tools. <a href="https://app.daily.dev/posts/FiMuYZXRT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Miasma traps AI web scrapers in endless poison loops</strong>: This Rust-based tool lures scrapers into a ‘dark forest’ of garbage training data and self-referential links to protect site content. <a href="https://app.daily.dev/posts/QZnDQHaJE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Statically typed languages increase Claude Code execution costs</strong>: Benchmarks show that TypeScript and Haskell tasks are up to 2.6x slower and more expensive for AI agents compared to Python or Ruby. <a href="https://app.daily.dev/posts/cOwdlMWEi" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ubuntu shifts core utilities to Rust for memory safety</strong>: The 26.04 LTS release includes a Rust-based NTP implementation and signals a broader move toward memory-safe system defaults. <a href="https://app.daily.dev/posts/CSgfnOWcy" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The agentic passive voice for dodging accountability</strong>: Engineers are now using ‘the model decided’ as a get-out-of-jail-free card for shipping broken code, according to recent industry critiques. This ‘agentic passive voice’ is a pathetic attempt to deflect personal responsibility onto a black box that you chose to use. If you didn’t review the PR, you own the outage, regardless of whether Claude or ChatGPT wrote the bug. <a href="https://app.daily.dev/posts/a4WjYQvt2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Atlassian firing humans to self fund AI hype</strong>: Atlassian is laying off 1,600 people to ‘redirect investment’ into AI, which is corporate-speak for firing expensive humans to chase a trend that hasn’t fixed Jira yet. CEO Mike Cannon-Brookes claims it’s about ‘skill mix,’ but it looks more like a desperate attempt to appease shareholders after an 84% stock drop. It’s the classic move: fire the people who know how the systems work to build ‘Rovo’ features that 5 million people are supposedly using but no one asked for. <a href="https://app.daily.dev/posts/YwPJVwdRf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The myth of AI slop as a contribution</strong>: Open source maintainers are being buried under ‘AI slop’—low-quality, hallucinated pull requests that take 12x longer to review than they did to generate. While some claim this ‘democratizes’ coding, it’s actually just a DDoS attack on volunteer sanity that is forcing projects to shut down. We’re replacing a trust-based culture with cryptographic identity checks just to filter out the garbage generated by people who can’t be bothered to read the documentation. <a href="https://app.daily.dev/feed-by-ids?id=zIHU4vVQv&amp;id=wp7gNqSUW" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
