TLDR Dev 2026-04-02
Claude Codeβs leak deep dive π, become unpromptable π±, AI on long tasks π°
Stop babysitting your agents. Write a spec (Sponsor)
You've got Claude Code, OpenCode, and Codex and you're still the one making sure they don't conflict. That's not leverage. That's a second job.
Intent by Augment turns one spec into parallel agent execution:
- Define the work, the boundaries, and the success criteria
- Agents read the same plan and build in their own lane
- Ship without stepping on each other, no merge conflicts
- One spec, full coordination, zero babysitting
Free with Claude Code, OpenCode, and Codex.Build with Intent
π§βπ»
Articles & Tutorials
Don't trust, verify (7 minute read)
Independent verification is needed for software integrity against threats like malicious insiders and compromised distribution channels. Projects like curl model this by combining external release verification with internal practices like code reviews, testing, and security audits to maintain trustworthiness.
Diving into Claude Code's Source Code Leak (15 minute read)
On March 31, Anthropic accidentally leaked the full source code for Claude Code via a .map sourcemap file in an npm update, which was quickly mirrored and analyzed. This led to rapid "clean-room" rewrites in other languages to prevent legal troubles. The leak revealed unannounced features like KAIROS, a proactive 24/7 autonomous agent, Claude Code's memory architecture, and anti-distillation mechanisms designed to poison competitor training data.
Things I Think I Think... About Touching Code (12 minute read)
Coding agents will not eliminate the need for developers to work directly with code. The inherent nondeterministic nature of LLMs makes their code output unreliable and prone to errors, requiring human intervention to diagnose and fix issues.
Slop Is Not Necessarily The Future (5 minute read)
While AI coding tools currently prioritize quantity over quality, economic incentives will eventually drive models to produce simpler, more efficient "good code" that is cheaper to maintain. Competitive market forces will compel these models to prioritize high-quality outputs to help developers reduce long-term costs and ship features faster.
Unblocked: Context that saves you time and tokens (Sponsor)
Stop babysitting your coding agents.
Unblocked gives them the decisions, history, and conventions behind your code so they generate mergeable output. It pulls from organizational knowledge, resolves conflicts, and cuts rework by delivering only the context agents need for the task at hand.
See how Unblocked works.Claude Code Unpacked (Website)
Claude Code Unpacked visualizes Claude Code's internal agent loop, architecture, extensive tools, commands, and unreleased features, all mapped directly from its source code.
Zerobox (GitHub Repo)
Zerobox is a lightweight, cross-platform tool that sandboxes commands with a deny-by-default policy for granular control over file and network access. It has secure API key injection and is available as a binary or TypeScript SDK to safely run untrusted code and AI agent tools.
Agents Observe (GitHub Repo)
Agents Observe is a real-time observability dashboard for Claude Code agents. It captures every agent action, tool call, and subagent interaction via hooks, streaming this data to a live, interactive dashboard.
Review: Measuring AI Ability to Complete Long Software Tasks (6 minute read)
The "time horizon" metric measures AI progress by the time a human expert needs to complete a task that an LLM can now solve, with success rates currently doubling every seven months. While this suggests AIs may soon tackle month-long expert tasks, these benchmarks often overlook the complex, non-automated realities of real software development.
What's cch? Reverse Engineering Claude Code's Request Signing (12 minute read)
Anthropic's Claude Code client uses a "cch" hash for request signing, which researchers discovered is an xxHash64 of the request body computed within a custom native Bun runtime. This mechanism serves as a non-cryptographic attribution and metering tool to make sure requests originate from official clients rather than acting as a security boundary.
The Self-Cancelling Subscription (11 minute read)
This dev diagnosed a persistent, mysterious deactivation of his streaming subscription as a "sync-vs-async race condition" between his credit card and the service. By unlinking the accounts and allowing the asynchronous cancellation to fully process overnight before re-linking, he successfully resolved the complex issue.
The most important software engineering news in one daily email
Join 450,000 readers for
one daily email