OpenCode says a breach affected about 1.4% of Console users and exposed stored provider API keys. If you saved a provider key there, rotate it and check its usage and billing; details of the incident are still developing.
Read source◆ Braid Daily · 2026-10-18
OpenCode Console breach exposes stored provider keys
Rotate keys saved in OpenCode Console. Plus workshops on agent verification and authorization, and new AI infrastructure figures.
The lead
1How agents prove their work
3WorkOS: verify the outcome before marking a task complete
AI Engineer · 1h1m
Nick Nisi and Zach Prosser demonstrate tasks with explicit completion criteria and checks against external records. Their workshop uses GitHub API confirmations and browser automation to distinguish completed work from an agent's self-report.
Read sourceLangfuse connects production traces to repeatable evaluations
AI Engineer · 53m32s
The workshop follows a five-stage loop: tracing, monitoring, representative datasets, controlled experiments, and evaluation. It shows how to compare prompt or model changes against recorded behavior, even when conventional service metrics remain green.
Read sourceSphinx quizzes developers on AI-written code
Show HN
Sphinx adds a hook that quizzes you on AI-written code before you ship it, checking your understanding of the change.
Read sourceAgent permissions and the people around them
2Authorize each tool call against the agent's mission
AI Engineer · 43m25s
A panel examines runtime authorization built around a persistent objective, deterministic policy limits, and a supervising agent. It addresses how enterprises can grant contextual permissions without requiring approval for every action.
Read sourceAnthropic reports a less junior workforce and more meetings
Anthropic
Anthropic describes changes in its own workforce composition and how employees spend their time. A smaller junior cohort raises a longer-term concern about how new engineers gain the experience needed for senior roles.
Read sourceNew figures on AI infrastructure financing
3CoreWeave bond yield tops 15%; Oracle debt trades below par
New York Times via Techmeme
Following Friday's coverage of AI financing pressure, the New York Times reports a CoreWeave bond yield above 15%. Some Oracle debt is trading at 80–90 cents on the dollar, according to the same paywalled report.
Read sourceCollateral changes the debt comparison
Jeff Davies · X
Jeff Davies distinguishes CoreWeave's unsecured borrowing from debt secured by GPUs, which he says prices lower. That distinction limits comparisons based on a single bond yield.
Read sourceBernstein puts credible US data-center plans at about 35%
Financial Times via Techmeme
The Financial Times cites RegLayer's count of at least 47 large US data-center projects delayed, withdrawn, or blocked this year. It also reports Bernstein's estimate that about 35% of the planned pipeline is credible; the original is paywalled.
Read sourceSearch tools and models closer to the user
3DeepSeek prices search and fetch at $0.75 per 1,000 requests
DeepSeek API documentation
After yesterday's model release, DeepSeek has a separate tooling update: its search and fetch API costs $0.75 per 1,000 successful requests.
Read sourceRTX Spark Windows laptops ship with up to 128GB unified memory
NVIDIA Blog
NVIDIA says RTX Spark laptops are now available starting at $2,399, with configurations offering up to 128GB of unified memory. They bring Blackwell RTX graphics and NVIDIA's AI platform to portable Windows PCs.
Read sourceWorld Bank urges locally adapted AI that can run on phones
The Guardian
The World Bank is urging developing countries to build small models adapted to local needs and capable of running on phones with limited connectivity. The proposal makes device and network constraints part of the development strategy.
Read sourceCompanion episode