TL;DR — Key Takeaways OpenAI plans to end Cursor’s direct access to its AI models on Nov. 12, 2026, following SpaceX’s acquisition of Cursor parent Anysphere. OpenAI says it cannot be confident SpaceX will comply with its terms of service, citing past disputes involving Musk-owned companies. Cursor says OpenAI models account for only about 5% of its user traffic, suggesting the cutoff may be disruptive but not existential. OpenAI is ending Cursor’s direct access to its AI models after Elon Musk’s SpaceX acquired its parent company, Anysphere. This is the next move in the increasingly bitter conflict between Elon Musk…
Author: drweb
Every worker a company employs, be it a person or a program, builds on a foundation someone else assembled, and that includes the newest hire on your team. This new hire got to work the moment they arrived, building with what your company already has in place and they’re shipping code at a pace your reviews can’t keep up with. Also, everything they make is going out under your name. If it were a human, they’d spend the first week asking where things live and who maintains what. This one never asks. It treats everything it finds as trustworthy, so…
Redgate had some Claude training recently, which I went through as my knowledge has been gained in bits and pieces and is fragmented. I wasn’t sure I’d get a lot out of it, but I was surprised by a few things I learned.One of these was scheduling a task to give me a daily report. This post looks at that process for me. I’ll walk through what happened, and then a summary below of what I think of this.This is part of a series of experiments with AI systems.Getting Started with SkillsOne of the first demos shown was to build…
Laravel Developer (TALL)
TL;DR — Key Takeaways VS Code 1.135 introduces experimental Rubber Duck, using a complementary AI model to review an agent’s work for missed details and edge cases. The new Agent Host and open AHP architecture make agent sessions more persistent and portable across windows, clients and agent implementations. Developers also gain external Copilot and Claude session continuity, a streamlined Agents window and per-model token usage visibility. Anyone who has leaned on an AI coding agent for a few months knows the pattern. The agent writes confident code, the tests pass, and then a reviewer catches an edge case the agent…
The job that was never there is the hardest one to explain. After the last post, my inbox filled up for four days. The hardest messages were not from people who had lost a job. They were from people who had gone outside, sat down, looked back, and realised they had never quite had one.A few weeks ago I published an interview with somebody who finished their company’s AI development plan and was let go eleven days later.I expected messages about the training. Those came.The other kind I did not expect. There were more of them. They were worse. And every…
Certificate renewal is often treated as a scheduled task: run an ACME client, obtain a new certificate, and move on. In practice, that view is too narrow for production systems.A certificate is not useful because it exists on disk. It is useful because the right service is presenting it to users. Between issuance and that final state, several operational steps can fail.The more useful way to think about renewal is as a deployment workflow: renew, deploy, reload, verify, and recover when something goes wrong.Renewal Success Is Not Production SuccessThe first failure mode is simple: a certificate authority successfully issues a…
(Technical) Project Manager
TL;DR — Key Takeaways Pillar Security researchers exploited a prompt injection in Google’s Gemini CLI workflow to gain Editor-level access to an internal Google Cloud project. The attack began with hidden instructions embedded in a GitHub issue that were processed by an AI agent triaging bug reports. The prompt injection led to the issuance of Workload Identity Federation credentials, one of which enabled impersonation of a more privileged account. Cybersecurity researchers from Pillar Security this week revealed how a prompt injection inserted into a GitHub repository was used to gain Editor-level access to an internal Google Cloud project using a…
TL;DR — Key Takeaways Testing alone does not prove a release is production-ready. Business-critical systems also need data integrity, reconciliation, exception handling and operational approval. Production validation creates a formal release gate, ensuring issues, dependencies, evidence and sign-offs are resolved before deployment. The strongest model combines automation with business judgment, using repeatable workflows, documentation and targeted manual review for high-risk releases. In an enterprise environment, production failures are more often defined as testing failures, but they include other high-impact aspects, such as release readiness, data quality, exception handling and operational approval. However, the missing layer is not just about conducting…