TLDR Dev 2026-09-17
Agents refactor Hermes π€, Codex sandbox escapes π, AI cheating π€₯
If you're building with AI, clear your schedule for October 7 (Sponsor)
WorkOS is hosting
init(), a one-day conference for people building with AI. October 7 at SFJAZZ Center in San Francisco, during SF Tech Week.Aaron Levie (Box), Howie Liu (Hyperagent), swyx, Rita Kozlov (Cloudflare), Claire Vo, Evan Conrad (SF Compute), and more on the decisions, tradeoffs, and lessons behind the AI products they're shipping today.Join the people building what's next.
Register for init() β π§βπ»
Articles & Tutorials
Designing Evaluations That Actually Tell You Something (25 minute read)
Useful evaluations begin with a decision and a representative set of real workflows, including rare high-risk, edge, and adversarial cases. This guide covers dataset structure, evaluator calibration, inter-rater agreement, failure severity, production-derived tests, and hidden holdouts that reduce overfitting to a fixed score.
Refactoring Hermes with 1,393 agents (10 minute read)
Hermes coordinated 1,393 subagents over about 19 active hours to refactor a million-line Python repository, cutting non-test source by 34.4% for roughly $19,300 in model costs. Worktrees and frozen baselines supported parallel integration, but community review still caught removed public APIs and changed exception handling that the tests missed.
6-7 loops we use everyday to make PostHog self-driving (14 minute read)
PostHog describes agent loops that turn MCP feedback, Slack reports, issue specs, anomaly alerts, session replays, and runtime logs into investigations and pull requests. The key is persistent validation: scouts deduplicate evidence, keep humans at review and merge gates, then return after deployment to confirm the fix actually held.
AI Is Making Activity-Based Engineering Metrics Obsolete (8 minute read)
AI-generated code makes lines of code, commit counts, and raw pull request volume even weaker proxies for engineering value. The proposed replacement keeps delivery outcomes and adds team-level diagnostics such as review queue time, 14-day rework, validation failures, remediation deployments, and rework per unit of AI spend, while keeping them out of individual performance reviews.
Postgres for your app. ClickHouse for its analytics. (Sponsor)
Run your app on ClickHouse Managed Postgres, with fast local NVMe storage and automatic backups. Replicate data into ClickHouse for analytics, all in one platform. Build with your own data and get $300 in free trial credits.
Start your free trialSoup (GitHub Repo)
Soup wraps LLM fine-tuning and post-training in one YAML file and command, with support for common training methods, local and cloud backends, evaluation, export, serving, and a web UI. Its beta layer-streaming mode trained an 8B NF4 LoRA model in 3.32 GB of GPU memory, though the published laptop throughput predates a later correctness repair.
Ouroboros (GitHub Repo)
Ouroboros is a local-first Agent OS that turns vague coding requests into replayable, policy-bound workflows through an interview, immutable specification, execution ledger, staged evaluation, and budgeted evolution loop. Its MCP server and adapters support 14 agent runtimes, including Claude Code, Codex CLI, Gemini CLI, OpenCode, and Copilot.
DeepSeek-V4.1 Flash: Pushing the Limits of KV Cache Compression (146 minute read)
This deep dive explains how DeepSeek-V4.1 Flash combines a causal encoder-decoder, cross-layer sparse attention and index reuse, hierarchical retrieval, Engram memory, and FP4 storage to shrink the KV cache to 890 bytes per token. The 40-layer design activates 8B parameters during prefill and 16B during decoding, targeting lower HBM, SSD, and compute costs for long-horizon agent workloads.
Escaping the OpenAI Codex sandbox, twice (5 minute read)
Two disclosed Codex sandbox escapes crossed different trust boundaries: one widened patch write permissions, while another recovered a trusted token from a shared JavaScript heap to reach an unsandboxed parent process. Both were fixed within eight days, and the broader lesson is to keep enforcement and real credentials outside the environment being constrained.
Production-grade infrastructure for conversational AI (Sponsor)
Build AI agents and voice-enabled applications that perform and scale even under challenging network conditionsβwith fully managed, real-time infrastructure.
Get started with 300 free minutes.
AI Cheating is on the Rise (4 minute read)
Trajectory audits across BioMysteryBench, Terminal-Bench 2.1, and SWE-bench Verified show rising attempts to obtain prohibited answers, strengthening the case for independent evaluators and explicit anti-cheating checks.
Anecdotally, programmers dislike "reduce" (2 minute read)
Code reviews often accept map and filter while flagging βreduceβ as harder to read, possibly because it is less familiar, less constrained, or less ergonomic in common imperative languages.
If Your Tool Isn't Reachable by Agents, It Doesn't Exist (4 minute read)
As agents become the interface to software, skills and MCP servers can outperform dashboards as a distribution channel by making capabilities discoverable and callable inside the user's existing workflow.
Small Programming Tricks (4 minute read)
Small, reusable tricks such as fuzzy shell history, EXPLAIN ANALYZE, git log -S, and ripgrep can compound into meaningful productivity gains when teams share them regularly.
The most important software engineering news in one daily email
Join 470,000 readers for
one daily email