How a 'AI Proposes, Human Approves' Rule Keeps Compliance Tools Out of EU AI Act High-Risk Scope

A compliance engineer working with AI-assisted quality management systems has outlined a practical framework to avoid triggering high-risk classification under the EU AI Act's Title III. The core rule is straightforward: AI may generate suggestions, drafts, or prioritisation scores, but a named, trained human must review, edit if needed, and formally sign off before any change to a regulated record takes effect. This distinction matters because systems that autonomously execute decisions affecting safety or regulatory records can be reclassified as high-risk AI, bringing heavier conformity assessments, stricter post-market monitoring, and greater liability exposure. To enforce this boundary, the author's team implemented technical controls such as restricting AI from changing record status fields, requiring timestamped review comments, and maintaining immutable audit logs of both AI outputs and human decisions. Procedural safeguards including SOPs, approver training records, and periodic drift reviews are also integrated directly into the quality management system.

Musk tells Cursor engineers SpaceXAI trails Anthropic after $60B acquisition

Elon Musk addressed over 1,000 Cursor engineers following SpaceX's $60 billion acquisition of the AI coding startup. In his first remarks to the team, Musk acknowledged that Grok is not the market leader and praised rival Anthropic for its competitive edge. Cursor CEO Michael Truell now reports directly to Musk, with staff being integrated into SpaceXAI teams. Since April, 45 employees have departed the company amid the organizational transition.

79% HR leaders see fresh jobs despite AI disruption

Cricket Australia urges curators to prepare batter-friendly pitches after rash of quick Tests

Cricket Australia has instructed ground curators to prepare pitches more favorable to batters following a string of unusually short Test matches. The directive comes after three of Australia's last seven home Tests concluded within two days, raising concerns about pitch quality. The issue came to a head after the Mackay Test, which finished well ahead of schedule. Officials have adopted a guiding principle of 'if in doubt, favour the batter' to restore competitive balance in home Test cricket.

Developer Builds Read-Only AI Security Console Using Cloudflare Workers

A developer has published a guide on DEV Community detailing how to build a read-only security operations console using Cloudflare Workers and Workers AI. The system is designed to give security analysts a fast, readable operational view of WAF events, bot signals, and access logs without granting the AI model any administrative authority. The architecture splits responsibilities clearly: the Worker handles authentication, query execution, and secret management, while Workers AI handles intent classification and summarization only. Four core workflows are supported, including natural language security queries, an approved query catalogue, a security posture digest, and a Ray ID investigator. The guide emphasizes a governance-first approach, where AI recommendations are reviewed and approved by humans before any changes are applied through formal change control processes.

Developer shares hard-won lessons from building a 12-language AI product search tool

A developer building OneFindMe, an AI-powered product search frontend, deployed the entire system on Cloudflare Workers using Claude Haiku for query translation and image recognition. One key challenge was that LLM-generated translations produced natural prose rather than the keyword-style strings that marketplace search engines expect, requiring a prompt redesign. The system also faced issues with the AI confidently returning non-existent category IDs, which was resolved by validating model output against a strict allow-list and treating category suggestions as optional enrichment rather than core logic. To address slow cold-path searches — which involve multiple LLM and API calls — the team implemented instant bestseller previews and pre-caching of new search terms to mask latency. The project now supports 12 languages, with each bug surfacing only after real multilingual users began searching.

Why some US restaurants are banning tips

Article URL: https://www.bbc.com/news/articles/c4g36yze692o Comments URL: https://news.ycombinator.com/item?id=49431364 Points: 11 # Comments: 4

Developer Proposes 'Platform First' Web Approach to Reduce Framework Dependency

A developer building a custom SPA router for HTML and Web Components began questioning why modern frontend development relies so heavily on frameworks instead of native browser capabilities. This led to a philosophy called 'Platform First,' which treats the Web Platform — HTML, CSS, the DOM, Web Components, and browser APIs — as the default foundation rather than an implementation detail. Alongside it, the developer introduced MANA (Minimal, Aligned, Native, Additive), a four-question checklist to help evaluate whether an abstraction is truly necessary. The argument is not anti-framework but cost-aware: abstractions add mental models, runtime layers, and compatibility overhead that are not always justified. The proposal urges developers to first ask whether the browser already solves the problem before reaching for a framework.

Jayasuriya reprimanded for bat-on-boundary-wedge incident after dismissal

Sri Lanka's Pathum Nissanka Jayasuriya was officially reprimanded by match officials after he struck boundary wedges with his bat following his dismissal during a Test match. The incident added to a series of disciplinary issues that had already surfaced in the game. Earlier in the same Test, India's Yashasvi Jaiswal and Sri Lanka's Asitha Fernando had both been penalised for an on-field confrontation that occurred on the first day. The repeated flashpoints highlighted a tense atmosphere throughout the match between the two sides.

Sugar prices drop 18% to Rs 55/kg after record high amid govt crackdown

Sugar prices have fallen 18% from record highs, with ex-mill rates declining to Rs 55 per kilogram. The government stepped in with measures targeting hoarding and speculation, which helped stabilize the market. Further price cuts are expected in the near term, according to reports. Despite forecasts of lower domestic sugar production this season, current inventory levels are considered sufficient. Consumers, however, continue to push for more meaningful reductions at both wholesale and retail levels.

Three Players Sanctioned for Conduct Breaches in Colombo Test

Sri Lanka spinner Prabath Jayasuriya has been officially reprimanded and handed one demerit point by the ICC for a Code of Conduct violation during the Colombo Test. The incident occurred when Jayasuriya struck boundary wedges with his bat in frustration after being given out leg-before wicket. He becomes the third player to be punished in the same match, joining India's Yashasvi Jaiswal and Sri Lanka's Asitha Fernando, who were sanctioned earlier. The Colombo Test has now seen an unusually high number of disciplinary actions in a single game.

Undisclosed foreign assets? Dec 31 deadline matters

SOCKS5 Proxies Explained: Use Cases, Technical Features, and Provider Comparison

SOCKS5 proxies are network intermediaries that operate at the transport layer, supporting any TCP or UDP protocol — making them more versatile than standard HTTP proxies. They are widely used by developers, marketers, and businesses for tasks such as web scraping, geolocation testing, load testing, and application-specific IP masking. Unlike VPNs, SOCKS5 proxies route only selected application traffic through the proxy server, leaving other system traffic unaffected. Key providers in the market include Bright Data, Oxylabs, Smartproxy, and Proxies.com, which differ in pricing, uptime guarantees, and IP pool types. Choosing the right provider depends on factors such as residential IP availability, SOCKS5 support, cost per gigabyte, and uptime SLA commitments.

How to Iterate Over Strings in Dart Using ASCII and UTF-8 Encoding

Dart strings are not natively iterable and must be converted to a list or iterable class before character-by-character traversal. The dart:convert module provides ascii.encode() and utf8.encode() methods to handle this conversion. However, using utf8.encode() directly on a string splits multi-byte Unicode characters into individual bytes, producing fragmented output. A simpler workaround is to use the built-in String.split('') method, which correctly preserves each Unicode character as a single element in the resulting list. This approach is especially useful when working with non-ASCII characters such as Chinese glyphs or special symbols.

Border Wall Construction Puts 6,000 Years of Archeological History at Risk

Planned border wall construction in the United States is set to cut across private ranch lands that contain significant historical and archeological sites. Many of these sites span up to 6,000 years of history and have not yet been fully studied or documented. Archeologists are warning of an irreplaceable cultural loss if construction proceeds through these areas. The sites, located on privately owned land, fall outside the typical protections afforded to public or federally managed historic grounds.

SA20 turns cricket fever into a $406m GDP boost

GitHub Agentic Workflows Let Developers Automate CI Triage Using Markdown

GitHub Agentic Workflows, currently in public preview, allow developers to define automation logic in Markdown with natural-language instructions that compile into standard GitHub Actions YAML. A tutorial published on DEV Community demonstrates building a CI failure triage workflow that reads failed runs, analyses logs and jobs, and proposes a diagnostic issue for maintainer review. The workflow operates with read-only permissions and uses a staged mode that previews proposed changes in the Actions step summary without writing anything to the repository. Multiple guardrails — including scoped triggers, failure-only conditions, and restricted tool access — keep the agent's reach bounded and protect against risks like prompt injection. The sample was validated using gh-aw v0.86.2 on 25 August 2026, and the feature remains subject to change while in preview.

Armed gang raid in Kenscoff kills at least 47, wounds 22 near Haiti capital

An armed group attack in Kenscoff, a strategically located area overlooking routes to Haiti's capital Port-au-Prince, left at least 47 people dead and 22 others injured. The assault is part of ongoing gang violence that has plagued the region, forcing many residents to abandon their homes. Kenscoff's elevated position makes it a significant flashpoint in Haiti's broader security crisis. In the wake of the attack, the Haitian government pledged to strengthen security measures and restore order in the affected area.

Vermont to expand Snake Mountain WMA and secure 949 acres of timber rights

China Builds New Island Base in South China Sea Amid Military Expansion

China has constructed a new island installation in the South China Sea as part of what observers describe as its largest military buildup in the region. The new structure, identified as Antelope, adds to Beijing's growing network of artificial island facilities in the disputed waters. Chinese authorities have not officially confirmed any military purpose for the construction. State media instead claim the installation will serve civilian functions, including weather forecasting, fisheries protection, and scientific research. The development raises fresh concerns among regional neighbors and international observers monitoring China's expanding presence in the South China Sea.