SShortSingh.

Programming

0
ProgrammingDEV Community ·

Developer Builds AI Incident Response Tool That Learns from Past Outages

A developer has built MemoryOps, an AI-powered incident response platform designed for DevOps and SRE teams, to address the problem of large language models generating fabricated citations during live outages. The tool uses a persistent memory layer called Hindsight to store structured learnings from resolved incidents, ensuring recommendations are grounded in verified past events rather than invented references. When an engineer investigates a new incident, the system recalls semantically similar past cases from Hindsight and combines them with current symptoms before querying the Groq Cloud LLM for recommendations. Incident learnings are only saved to memory after a human engineer formally resolves the incident, keeping the system's knowledge base free of unverified AI guesses. The platform is built with a React 19 frontend, a FastAPI and SQLite backend, and is designed so that human engineers retain full control over all actions.

0
ProgrammingDEV Community ·

OpenAI Launches GPT-6 Sol and Luna With 50% API Price Cut Ahead of DevDay 2026

OpenAI released two new models, GPT-6 Sol and GPT-6 Luna, on September 22, 2026, positioning them as cost-optimized alternatives to its frontier model GPT-6 Astra, which had launched earlier on September 3. Sol is priced at $2 per million input tokens while Luna costs just $0.10 per million, with cached input discounts reaching 90% off. Both models are available via ChatGPT Work, Codex, and the OpenAI API, and are designed to handle production-scale agentic workloads at significantly lower cost than competing models. OpenAI's DevDay 2026 is set to follow on September 29 at Fort Mason in San Francisco, where over a dozen new product announcements are expected. CEO Sam Altman teased the event with a cryptic four-word post, suggesting the focus will be on platform infrastructure rather than model capabilities alone.

0
ProgrammingDEV Community ·

Developer Builds AI Incident Response Agent That Avoids Overconfident Fixes

A developer has built an open-source AI incident response tool called RecallOps, designed to assist engineers during on-call outages by referencing past incidents stored in memory. The agent uses Hindsight, an open-source memory system, paired with OpenAI's GPT-OSS-120B model served via Groq at a low temperature setting to prioritize accuracy over creativity. A core design principle is that retrieved past incidents are treated as evidence for comparison, not as ready-made solutions, preventing the model from blindly recommending fixes that may not match the current root cause. The prompt explicitly instructs the model to identify similarities and differences between past and present incidents before suggesting any action, and to flag uncertainty when evidence is insufficient. This approach was built to guard against a specific failure mode where similar-looking symptoms lead to wrong fixes that can escalate a minor outage into a larger one.

0
ProgrammingDEV Community ·

Developer Builds Personal AI Running Coach by Feeding It Full Training History

A software developer found that using ChatGPT with individual workout screenshots was ineffective because isolated data points lack the context needed for meaningful coaching advice. To solve this, he built a personal web portal called running-portal that syncs workout data from Mi Fitness, stores historical runs, and automatically assembles structured prompts for an AI model after each session. The portal feeds the AI a formatted context block containing the current run's metrics alongside recent workout history, enabling trend-based analysis rather than one-off observations. The project relies on an open-source sync module, Mi-Fitness-Sync, which handles Xiaomi's private API and data parsing. Because the integration depends on undocumented internal APIs, the developer treats the tool as a personal utility rather than a publicly deployable service.

0
ProgrammingDEV Community ·

Cisco Firewall Management Center Flaws Exploited in Wild, One Scores Perfect 10

Cisco Talos disclosed on 9 September 2026 that two vulnerabilities in the web interface of Cisco Secure Firewall Management Center were being actively exploited by three separate threat clusters. The more critical flaw, CVE-2026-20079, carries a maximum CVSS score of 10.0 and allows a pre-authentication bypass, enabling attackers to execute scripts and gain root access via a crafted HTTP request. A second vulnerability, CVE-2026-20316, scores a relatively low 5.3 but was chained with the first flaw to serve as initial access in at least one ransomware attack. Although CVE-2026-20079 was patched in March 2026, Cisco updated its advisory in September after learning in August that exploitation had occurred in the wild. Because FMC serves as the central console for managing entire Cisco firewall fleets, a compromised instance can allow attackers to alter firewall rules, erase logs, and push malicious configurations across all managed devices.

0
ProgrammingDEV Community ·

How to Build AI Features Before Your Preferred Model Is Available

When a highly anticipated AI model is announced but not yet publicly available, developers face a dilemma: wait and stall, or build on a lesser model and refactor later. A practical approach treats the model as a swappable dependency, abstracting all model-specific logic into a single function so that switching models requires only a configuration change. Developers are advised to build a standardised test set of real, edge-case inputs to objectively evaluate any new model against the current one upon release. Per-model feature flags allow gradual traffic rollouts, reducing the risk of a full commitment before performance is confirmed. Transparent UI communication is also stressed — interfaces should clearly indicate which model is actually being used rather than implying unreleased capabilities are already live.

0
ProgrammingDEV Community ·

Developer Completes First Hackathon, Plans to Continue Building UrbanPulseNYC Project

Developer Joseph Canova participated in his first hackathon, completing a project called UrbanPulseNYC. The event was shared on DEV Community on September 29 under hackathon and developer challenge tags. Canova expressed enthusiasm for continuing to develop the project beyond the competition. He also acknowledged the support he received from others during the experience.

0
ProgrammingDEV Community ·

Why AI Financial Agents Need Forensic Traceability Beyond Basic Logging

When an AI agent executes a financial decision, standard logs of prompts and API calls often fail to capture the full context of what the agent actually knew at the time. Forensic traceability goes further by reconstructing the evidence, authorization state, policy versions, tool interactions, and risk evaluations that surrounded the original decision. A key architectural recommendation is assigning a durable decision ID to each consequential workflow, distinct from a trace ID, so evidence across multiple systems and retries can be linked to one logical business action. Immutable references to retrieved documents, policy versions, and account states — including content hashes and timestamps — help distinguish what existed at decision time from what exists today. This level of traceability is especially critical in financial systems, where post-incident investigations may require a precise replay of the information and controls that participated in a given action.

0
ProgrammingDEV Community ·

CIDS Reverse Proxy Goes Live, Enabling Core Security Telemetry Collection

The CIDS (CyberMoranda Intrusion Detection System) project has reached a significant development milestone with its Reverse Proxy now operational. The Reverse Proxy serves as the primary entry point for all incoming client requests within the CIDS architecture. It is designed to collect request context and security telemetry, forming the foundation of the system's threat detection capabilities. In the current setup, traffic flows from the client through the CIDS Reverse Proxy before reaching the backend. This advancement supports CIDS's broader goals of observing, understanding, detecting, and defending against cyber threats.

0
ProgrammingDEV Community ·

Full-Duplex Voice AI: Why Interruption Handling Reshapes the Entire Pipeline

Unlike traditional turn-based voice assistants, full-duplex systems allow both the user and the AI to speak simultaneously, requiring the assistant to stop instantly when interrupted. Achieving this demands careful engineering: playback and microphone streams must be kept separate, echo cancellation must be precise, and any pending response should be discarded the moment a user speaks. Turn detection relies on a small dedicated model running over the audio stream, tuned on real recordings rather than scripted demos, to accurately sense when a speaker has paused versus finished. Latency budgeting is critical, with each stage — turn detection, retrieval, first token, and synthesis — needing explicit time allocations to keep responses feeling responsive. Developers are advised to test interruptions at the first word, mid-sentence, and during tool calls, and to use browser-based playgrounds to evaluate model behaviour before committing to a transport layer.

0
ProgrammingDEV Community ·

10 Hands-On IoT Projects Students Can Build Using ESP32 and Arduino

A curated list of 10 IoT project ideas has been outlined for students looking to gain practical experience with connected hardware in 2026. The projects range from smart home automation and soil moisture monitoring to smart parking systems, weather stations, and classroom environment trackers. Each project is designed around affordable microcontrollers like the ESP32 or Arduino, paired with sensors and cloud platforms such as KiwisIoT, Blynk, ThingSpeak, and ThingsBoard. The platforms handle device management, data collection, dashboards, and alerts, reducing the complexity of building an IoT backend from scratch. The guide positions these projects as educational tools that help students understand how sensors, connectivity, and cloud automation work together in real-world applications.

0
ProgrammingDEV Community ·

Why Small AI Models Often Beat Large Ones for Simple Classification Tasks

Many production AI calls involve narrow decisions—spam detection, ticket routing, content moderation, or scoring—rather than open-ended conversation. Using large chat-completion models for these tasks tends to be slow, costly, and difficult to test reliably. Structured decision endpoints that return fixed outputs, such as a label from a predefined list or a numeric score, make calls easier to validate using confusion matrices rather than broad accuracy metrics. Developers are advised to build small labelled datasets before deployment, pin model versions, and set decision thresholds based on the actual cost of each error type. Automating reversible actions first and retaining human review for high-stakes outcomes—such as bans or charges—helps teams scale AI-driven decisions safely.

0
ProgrammingDEV Community ·

Developer Builds AI Incident Response Agent That Learns From Past Security Events

A developer has created an AI-powered cybersecurity incident response agent that retains memory of past investigations to improve future ones. Built using Python, Streamlit, Groq AI, and a memory tool called Hindsight, the project was submitted as a hackathon entry. When a new incident is reported, the system retrieves relevant historical cases and feeds them as context to the AI model alongside current incident details. This allows analysts to benefit from prior resolutions — such as a previously identified misconfigured firewall — rather than starting each investigation from scratch. The project highlights a growing interest in giving AI security tools persistent, contextual memory to make incident response more efficient.

0
ProgrammingDEV Community ·

Same $50 Refund, Three Agent Runs, Three Different Verdicts — Only One Is Correct

A synthetic test case demonstrates a critical flaw in AI agent evaluation: three separate agent runs all produce the correct $50 refund total for the same order, yet only one run actually follows the required contract. The first trace is valid, the second fails because a payment was issued before authorization and was paid twice despite the net amount being correct, and the third is unscorable due to insufficient evidence in the log. The author argues that graders which report only the final dollar amount miss procedural violations, such as acting before authorization or issuing and reversing a duplicate payment. The core recommendation is to score each contract condition separately — authorization order, correct targeting, single effect, safe retry, and log completeness — rather than averaging them into one pass/fail score. Collapsing missing-evidence runs into passing verdicts quietly inflates pass rates and masks failures that could have real consequences in production systems.

0
ProgrammingDEV Community ·

Wpipe offers embedded Python pipeline orchestration without infrastructure overhead

Wpipe is an open-source Python library designed to run data and processing pipelines without requiring dedicated orchestration servers, external databases, or cloud APIs. Unlike platforms such as Prefect, wpipe operates as a fully self-contained, zero-config engine embedded directly within application code. It uses a local SQLite WAL database for atomic state persistence, eliminating network latency and external dependencies. The library supports transactional checkpointing, making it suited for edge computing and tactical data engineering use cases. Wpipe is available on GitHub and PyPI for developers seeking lightweight pipeline control in pure Python.

0
ProgrammingDEV Community ·

Wpipe Offers Embedded Python Pipeline Orchestration With No Server Required

Wpipe is an open-source Python library designed to run data and processing pipelines without the need for dedicated orchestration servers, external databases, or cloud APIs. Unlike tools such as Prefect, wpipe operates as a self-contained, importable module that stores all state and execution tracking in a local SQLite file using WAL mode. The library supports atomic checkpointing, meaning pipelines can resume from the last successful step even after unexpected hardware failures or power loss. It is particularly suited for edge computing environments, IoT devices, Raspberry Pi deployments, and CI/CD pipelines where network connectivity and system resources may be limited. Wpipe is available on both GitHub and PyPI for developers seeking lightweight, infrastructure-free workflow orchestration.

0
ProgrammingDEV Community ·

Living City Platform Uses AI Memory Layer to Give Hyderabad a Urban Intelligence System

A developer has built 'Living City,' an AI-powered urban intelligence platform focused on Hyderabad that goes beyond traditional real-time dashboards. The platform's core innovation is a persistent memory layer called Hindsight, which stores meaningful past city events — such as how heavy rain led to waterlogging and transit delays — rather than raw data. When a new urban event occurs, the AI queries Hindsight to retrieve relevant past experiences and uses them as context for its current analysis. This creates a continuous intelligence loop described as Observe, Remember, Recall, Reason, Learn, and Remember again. The goal is to shift city monitoring from simply reporting what is happening now to understanding it in light of what has happened before.

0
ProgrammingDEV Community ·

18-Year-Old Developer Builds Cookie-Free Funnel Analytics Tool Cloudline

Om Yaduvanshi, an 18-year-old applied AI developer, has built Cloudline, a cookieless alternative to Google Analytics that tracks user funnels without storing cookies or IP addresses. The tool uses a single script tag under 2 KB and records only page, referrer, screen size, and time for each pageview. Instead of following individual users across sessions, Cloudline stacks anonymous counts — pageviews and button clicks — in a developer-defined sequence to reveal where visitors drop off. The approach carries one acknowledged limitation: it assumes users who clicked a button were among those who viewed the preceding page, which may not always hold true. Cloudline is currently free for early users while the product remains in active development.

0
ProgrammingDEV Community ·

Terraform Can Detect Infrastructure Drift, But Fixing It Safely Remains Unsolved

Modern infrastructure tools like Terraform, kubectl, and Argo CD reliably detect configuration drift by comparing intended state with actual state, but the industry has yet to solve what comes next. The core challenge is that a diff cannot distinguish an accidental change from a deliberate emergency hotfix made by an engineer at 3am to prevent an outage. Remediation itself carries high risk, as re-applying Terraform plans against drifted infrastructure can destroy and recreate critical production resources like databases and load balancers. Compounding the problem, failed partial applies create noisy plan outputs that engineers learn to ignore, and drift findings pile up in dashboards with no clear ownership or triage process. Teams are left choosing between three imperfect responses: reverting to source-of-truth at the risk of breaking live fixes, updating the code to match reality and silently encoding undocumented changes, or simply ignoring the finding altogether.

0
ProgrammingDEV Community ·

Linux 7.4 to Replace Compile-Time SLUB_TINY with Runtime Boot Option

Linux 7.4 is set to introduce a slab_tiny boot parameter that replaces the compile-time CONFIG_SLUB_TINY setting, allowing a single kernel image to serve both low-memory and full-sized systems. The change, posted by slab maintainer Vlastimil Babka on September 23, eliminates the need for separate kernel builds for small-memory embedded boards. A related allocator patch by Hao Li delivers a 24% throughput improvement on mmap microbenchmarks by optimizing per-CPU cache refill logic. Security researchers also found that inotify leaks keystroke and authentication-prompt timing data, with a partial fix already merged into the longterm kernel series. Meanwhile, Linux 7.3 is at release candidate 5 with a final release projected for mid-October, and the 7.1 series has reached end-of-life.

← NewerPage 822 of 3171Older →