SShortSingh.

Programming

0
ProgrammingDEV Community ·

AI-authored governance review flags security gaps in AGENTS.md specification

An AI operating autonomously published an unsolicited governance review of the AGENTS.md specification, a file format designed to instruct AI coding agents on how to behave within a repository. The review found that AGENTS.md lacks any concept of irreversible, outward-facing, or costly actions, meaning agents receive no built-in signals to pause before taking high-impact steps. A key concern raised is that explicit user chat prompts override all file-level instructions, effectively making AGENTS.md not a security boundary despite being treated as one by many developers. The spec also has no provisions for audit trails, version history, or emergency stop mechanisms. The reviewer recommended simple practical fixes, including separating prohibitions from instructions under a dedicated heading and adding an FAQ entry clarifying that AGENTS.md does not function as a security boundary.

0
ProgrammingDEV Community ·

Developer Builds 52-Game Platform in 8 Days Using Multi-Agent AI Architecture

A developer used a multi-agent AI system involving Codex and Claude Code to autonomously build a small gaming platform called theworldatplay.com over eight days, resulting in 52 completed games with minimal human code input. The agents self-directed their work, divided tasks among themselves, and even extended the system's own scheduler and rules as the project evolved. Despite all tests passing and technical requirements being met, the developer discovered a critical usability flaw: the homepage displayed game images that were not clickable, making games effectively impossible to find. This highlighted a gap the AI could not bridge — verifying whether a real user could intuitively navigate the site, a judgment that required human experience. Token limit pauses became deliberate review sessions, where the developer's real-world feedback, such as being unable to locate games, fed directly into the next round of agent work.

0
ProgrammingHacker News ·

Paradigm Releases Interactive RSI Simulator for DeFi Research

Paradigm, a crypto research and investment firm, has published an interactive RSI (Restaking Slashing Insurance) simulator on its research platform. The tool is designed to help users model and understand risk scenarios related to restaking mechanisms in decentralized finance. The simulator is accessible online as part of Paradigm's ongoing research efforts. The release garnered attention on Hacker News, attracting early discussion from the developer community.

0
ProgrammingDEV Community ·

Rust Module Cuts Pixel-Art Copy Detection from 9 Days to 1 Second per Query

Developers at Pixagram, a pixel-art social network with an on-chain marketplace, built a Rust-based structural hashing system to detect near-duplicate artworks at scale. Every new artwork minted must be checked against up to 10 million existing pieces for similarities like recoloring, rescaling, or single-pixel edits — not just exact byte matches. The naive pixel-comparison approach cost roughly 80 milliseconds per image pair, translating to about nine days of CPU time per mint against the full corpus. The new method converts each image into a 1,024-byte canonical key — normalizing palette order, transparent pixels, and scale — enabling a comparison in just 115 nanoseconds, roughly 700,000 times faster. Unlike standard cryptographic or photographic perceptual hashes, the approach is purpose-built for pixel art's quantized, flat-color structure, neutralizing entire categories of copy attacks at hash time rather than query time.

0
ProgrammingDEV Community ·

Convex raises $57M, Elastic acquires Deductive AI, HashiCorp founder starts new venture

Convex secured a $57 million Series B funding round led by Insight Partners, with participation from Etna Labs, a16z, and Spark Capital. Elastic agreed to acquire Deductive AI, an AI-driven platform designed to help engineering teams resolve production incidents faster. HashiCorp co-founder Mitchell Hashimoto announced a new startup called Multiplexer, focused on server-side terminal multiplexing. Keyfactor also entered an agreement to acquire workload identity platform Cofide, while Supabase joined as a launch partner for OpenAI's Sign in with ChatGPT beta. Additionally, major tech players including OpenAI, AWS, Cursor, GitHub, and Microsoft backed Vercel's Agent Plugins standard, signaling growing industry alignment around agentic development tooling.

0
ProgrammingDEV Community ·

SnipContext v0.7.0 Released with Auto-Indexing and File Watcher Tools

SnipContext has launched version 0.7.0, the latest update to the open-source code snippet context tool. The release introduces auto-index switching and file watcher capabilities alongside migration tools. Support has been expanded with new plugins for both VS Code and Neovim editors. The update also includes provider contract tests and continuous integration powered by uv. The full release is available on GitHub.

0
ProgrammingDEV Community ·

Developer releases free open-source tool to analyse Pokémon team coverage via mGBA

A developer has released a free, open-source desktop app that reads a Pokémon party directly from the mGBA emulator's RAM in real time and analyses its type coverage. The tool uses a Lua script inside mGBA to send raw bytes over TCP, with all game data decoded on the C# side, making it straightforward to add support for additional emulators. Move-level data is keyed by individual game rather than generation, addressing discrepancies found in 42 of 386 Gen 3 species whose move-learn levels differ between Ruby/Sapphire/Emerald and FireRed/LeafGreen. Team strength scores are fully transparent, breaking down each contributing factor along with the specific Pokémon responsible. The project is built on .NET 10, Avalonia, and PKHeX.Core, includes 122 tests, and ships with a decision log documenting the reasoning behind key design choices.

0
ProgrammingHacker News ·

Google Makes Case for Go as a Strong Fit for AI-Assisted Development

Google has published a blog post arguing that the Go programming language is well-suited for AI-assisted software engineering. The post, shared on Google's developer blog, outlines specific characteristics of Go that make it compatible with AI coding tools. The article attracted attention on Hacker News, gathering 43 points and 34 comments from the developer community. Go's design philosophy — emphasizing simplicity, readability, and explicit code structure — is presented as an advantage when AI models parse and generate code.

0
ProgrammingHacker News ·

Modular Releases Mojo 1.0 Programming Language

Modular has announced the release of Mojo 1.0, marking a significant milestone for the programming language. The announcement was made via the official Modular blog. The release generated discussion on Hacker News, attracting points and comments from the developer community. Mojo is developed by Modular and has been positioned as a language targeting AI and systems programming use cases.

0
ProgrammingDEV Community ·

Telegram Bot or Website? Why Most Businesses in 2026 Should Build Both

A web developer and studio founder argues that businesses should not choose between a Telegram bot and a website, but instead decide which to prioritize based on their model. Service-based businesses are advised to start with a Telegram bot, while product-focused or e-commerce operations should lead with a website. Telegram bots offer near-instant responses and low setup costs of $200–500, whereas websites provide SEO visibility, product catalog support, and greater consumer credibility. The author notes that 93% of consumers research a business online before purchasing, making a website essential for long-term trust and organic traffic. The recommended strategy combines a website for search visibility, a Telegram bot for lead conversion, and a Telegram channel for ongoing customer engagement.

0
ProgrammingDEV Community ·

Why Real-Device Mobile Testing Catches What Desktop Emulation Misses

Testing websites on actual Android and iPhone devices reveals performance and usability issues that desktop browser emulation routinely overlooks, according to a mobile testing workflow guide published on DEV Community. Engineers distinguish between the moment a page first appears visually and the moment it becomes genuinely usable, since buttons, navigation, and content can lag well behind the initial render. Network conditions are treated as a critical variable, with slow or fluctuating 4G connections often exposing layout shifts, delayed responses, and duplicate actions triggered by impatient re-taps. Small-screen navigation is evaluated separately, checking whether menus are discoverable, touch targets are large enough, and fixed UI elements do not obscure content. The workflow treats Android Chrome and iPhone Safari as distinct environments, noting that the two browsers can behave differently even when loading the same URL.

0
ProgrammingDEV Community ·

DNS Records Demystified: How A, MX, TXT and Other Types Power the Internet

DNS records are the actual data returned during domain name resolution, determining where websites are hosted, where emails are delivered, and how services are authenticated. Seven core record types — A, AAAA, CNAME, MX, TXT, NS, and SRV — underpin the vast majority of modern websites, applications, and cloud infrastructure. Misconfigured DNS records are a leading cause of internet outages, capable of taking websites offline, blocking emails, and breaking SSL certificate issuance. An A record, the most basic type, maps a hostname to an IPv4 address and is essential for directing browser traffic to the correct server. Understanding these record types is considered critical for anyone involved in launching, migrating, or troubleshooting internet-facing systems.

0
ProgrammingDEV Community ·

Nvidia Launches NeMo Switchyard to Cut AI Agent Costs via Intelligent Model Routing

Nvidia has released NeMo Switchyard, an open-source routing SDK designed to automatically direct tasks within AI agent workflows to the most cost-appropriate model. Alongside it, the company launched Nemotron 3.5 Lightning, a 30-billion-parameter open mixture-of-experts model with only 3 billion active parameters. Switchyard aims to solve a common problem in agent development: routing simpler steps to cheaper models while reserving expensive frontier models for tasks that genuinely require advanced reasoning. Nvidia claims the system can reduce costs to roughly one-third of using Claude Opus 4.8 alone, with partner Ramp reporting 58% cost savings and 33% faster runtime on internal benchmarks. These figures come from vendor and partner testing, and the system's real-world reliability will depend heavily on how well quality is evaluated alongside cost and latency.

0
ProgrammingDEV Community ·

Permissive robots.txt does not grant rights to republish scraped content

A developer audited ten websites their scraper had been collecting data from since July, applying a strict rule: only sources with explicit written licences permitting commercial reuse would qualify. Of the ten sites reviewed, only two passed — including Troy Hunt's blog, which carries a Creative Commons Attribution 4.0 licence — while eight were rejected for lacking any reuse permissions. The author notes that robots.txt only governs whether a bot may fetch a page, not whether the fetched content may be republished, and treats silence on licensing as a no. One site, Julia Evans', was excluded not on licensing grounds but on stated intent, after its robots.txt displayed a clear ASCII-art message asking AI systems to stay away. The author acknowledges that the scraper had been running for a month against non-permissive sources, and that no harm occurred only because the retrieval layer had not yet been built — describing that outcome as luck rather than a proper safeguard.

0
ProgrammingDEV Community ·

AMD partners with science ministry to build open-weight AI ecosystem

AMD announced a partnership with an unspecified government science ministry to develop an open-weight artificial intelligence ecosystem, as reported by MSN on August 11, 2026. The collaboration leverages AMD's existing open-model portfolio, including OLMo and Instella, which are trained on Instinct MI300X GPUs and freely available on Hugging Face with no commercial license restrictions. AMD's open-source software stack ROCm serves as the technical foundation offered to public and private partners as an alternative to Nvidia's proprietary CUDA platform. Governments increasingly view open AI weights as a matter of technological sovereignty, since relying on closed models ties national infrastructure to private commercial decisions. Financial terms, the specific country involved, and a project timeline were not disclosed at the time of publication.

0
ProgrammingDEV Community ·

Coinbase-Backed x402 Protocol Lets AI Agents Pay for APIs Using Stablecoins

The x402 protocol is an open, HTTP-native payment standard developed by Coinbase and now governed by the x402 Foundation, designed to enable software to pay for APIs automatically using stablecoins like USDC. It revives the long-dormant HTTP 402 Payment Required status code, embedding payments directly into standard HTTP request-response cycles rather than relying on separate billing flows. The protocol is particularly aimed at autonomous AI agents, which cannot manage traditional account signups, API keys, or subscription renewals on their own. In the x402 flow, a client requests a resource, receives payment terms from the server, submits a signed payment proof, and gains access once a facilitator verifies the transaction. The standard is open and not locked to any Coinbase product, making it applicable to a broad range of machine-to-machine and decentralized finance use cases.

0
ProgrammingDEV Community ·

How a 155 KiB row silently broke writes in CockroachDB despite healthy infrastructure

A collaborative education platform experienced write failures on a production worksheet despite all system metrics appearing normal, with healthy pods, low CPU, and no database crashes. The root cause traced back to CockroachDB's MVCC architecture, which retains every historical version of a row under a timestamped key rather than overwriting data in place. The app was storing entire CRDT document snapshots as a single BYTEA column on every save, causing one document's storage range to balloon to 1 GiB. This triggered a backpressure error when CockroachDB could not find a valid split key for the oversized range, silently blocking further writes. Two unrelated issues — a CPU spike and flapping readiness probes — masked the real error, which was buried at low volume in the logs the entire time.

0
ProgrammingDEV Community ·

Building WhatsApp Appointment Booking: Key Technical Pitfalls Developers Must Know

A developer at Cal.com has shared a detailed account of the technical challenges encountered while building an appointment booking system inside WhatsApp using the Business API. One major issue was that WhatsApp Flows, which provide native form inputs within chat, fail to render on WhatsApp Desktop and Web, yet the API returns no error when messages are sent to desktop users. To handle this, the team built a parallel text-based booking flow as a fallback, triggered when users respond with specific keywords. Double-submission bugs were addressed by replacing read-then-write logic with an atomic database claim, ensuring only one booking request can succeed in a race condition. Additionally, concurrent message handling required Redis-based conversation locks to prevent state overwrites and broken deduplication.

0
ProgrammingDEV Community ·

Open Source Workflow Engine Runs on $3 Hosting With No Build Step

A developer has released Workflow Chain Engine, an open-source automation tool built in PHP that runs on a single SQLite file and requires no build step or dependency installation. The lightweight engine lets users design API-driven workflows visually in a browser, supporting branching logic, loops, conditionals, and scheduled or webhook-triggered runs. Unlike cloud-based automation platforms, it is designed to be fully self-hosted on cheap shared hosting, a VPS, or Docker, keeping API credentials and run history entirely under the user's control. The project ships with its editor library included, meaning it loads no external resources and can operate in isolation on the host server. It is MIT licensed and targets small businesses and developers handling routine automation tasks such as CRM updates, order fulfillment calls, or daily report generation.

← NewerPage 20 of 1147Older →