Flux
Couleur d'accent
Community Corner: Spec-Driven Development with Holly Schilling
Programmation Web

Community Corner: Spec-Driven Development with Holly Schilling

In this episode, Scott talks Holly Schilling about her work on the php tek 2026 mobile app and spec-driven development. Links: Our Discord – https://discord.gg/aMTxunVx Buy our shirts – https://store.phparch.com/products/community-corner-podcast-t-shirt Holly’s Links: Discord: TheCodeLorax Mastodon: https://tech.lgbt/@TheCodeLorax Blog: https://EventuallyWrong.com Scott’s Links: Website – https://scott.keck-warren.com/ Bluesky – https://bsky.app/profile/scottkeckwarren.bsky.social LinkedIn –…

PHP Architect
Stop Getting Good at Protocols. Get Good at Agent Experience.
IA

Stop Getting Good at Protocols. Get Good at Agent Experience.

In 2025, if you weren’t building with MCP, you weren’t serious about agents. The Model Context Protocol dominated the agent conversation for the better part of the year. Conference talks, roadmaps, hiring plans, all of it revolved around MCP. Then late 2025 into 2026, AI Skills arrived and the backlash was immediate. Engineers declared MCP […]

O'Reilly Radar — AI/ML
Frontier AI Is Now Critical Infrastructure
Cybersécurité Programmation

Frontier AI Is Now Critical Infrastructure

Following its abrupt order on June 12th suspending global access to Claude Fable 5 and Mythos 5, the U.S. government's national security clampdown on Anthropic has escalated. The models, initially taken offline due to safety guardrail "jailbreaks," are now at the center of a total federal blackout that has completely re-defined the landscape of cloud-based AI vendor dependencies. The situation hit a boiling point when a front-page report from ⁠The New York Times revealed that even the National…

Socket
datasette 1.0a35
IA Programmation

datasette 1.0a35

Release: datasette 1.0a35 I'll write more about this one tomorrow, but it's a big release. Three highlights from the release notes: New "Create table" interface in the database actions menu, backed by the /<database>/-/create JSON API. It can define columns, primary keys, custom column types, NOT NULL constraints, literal defaults, expression defaults and single-column foreign keys. (#2787) New "Alter table" table action and /<database>/<table>/-/alter JSON API for changing…

Simon Willison's Weblog
OPFS + Pyodide test harness
IA Programmation

OPFS + Pyodide test harness

Tool: OPFS + Pyodide test harness I've been pondering if Datasette Lite - the Python Datasette application run entirely in the browser using Pyodide and WebAssembly - might be able to edit persistent SQLite files stored on the user's computer. That's what OFPS (Origin Private File System) is for, so I had Claude Code for web build me this playground UI to try it out in different browsers. Tags: browsers, pyodide, datasette-lite

Simon Willison's Weblog
Neovim PHP Development Setup
Programmation Web

Neovim PHP Development Setup

If you’ve ever watched a colleague fly through code in NeoVim and thought “that looks fast but I’d never figure out the config,” the barrier to entry has dropped significantly. LazyVim — a NeoVim distribution that ships with sensible defaults and a plugin manager — gives you a fully functional IDE experience within minutes, with […] The post Neovim PHP Development Setup appeared first on PHP Architect.

PHP Architect
The Code You Didn't Write Is Still Yours to Defend
Cybersécurité Programmation

The Code You Didn't Write Is Still Yours to Defend

Recently I asked an AI assistant to tidy a messy spreadsheet and chart the result. Nothing exotic. To do the work, it spun up a sandbox, pulled a handful of open source packages into that environment, and ran them. I didn't write any code. I didn't ask for any code. Packages I had never seen were fetched and executed on my behalf, and it was over in seconds. That was a software supply chain event. It happened in a workflow that no scanner, no registry proxy, and no review process was watching.…

Socket
Principal Drift
IA

Principal Drift

Over the past year I’ve reviewed enterprise agent architectures at roughly two dozen organizations, including banks, retailers, healthcare systems, and a couple of regulators. The architecture diagrams have been reliably impressive. There are boxes for the MCP gateway, the tool registry, the vector store, the orchestrator, the policy engine, and the observability stack. There are […]

O'Reilly Radar — AI/ML
One Month of Ecosystem Security Engineering
Programmation Web

One Month of Ecosystem Security Engineering

Last month I shared with you that the PHP Foundation secured a grant by Alpha-Omega through the Linux Foundation to help improve the security of the PHP open source ecosystem, and that it is forming a new Ecosystem Security Team. Today I want to update you on the progress so far. After a brief set-up period, I jumped into three main activities: assessing PHP community members' most pressing needs assembling a team of volunteers to help applying the resources granted to scan PHP ecosystem…

The PHP Foundation
Prompt Injection as Role Confusion
IA Programmation

Prompt Injection as Role Confusion

Prompt Injection as Role Confusion First, I absolutely love this: This is a blog-style writeup of the paper. I wish every paper would come with one of these. Academic writing is pretty dry - the impact of a paper can be so much higher if you publish a readable version to accompany the formal one. Charles Ye, Jasmine Cui, and Dylan Hadfield-Menell present some fascinating research into the challenge of having models distinguish their own privileged text (here wrapped in role tags like…

Simon Willison's Weblog
Porting the Moebius 0.2B image inpainting model to run in the browser with Claude Code
IA Programmation

Porting the Moebius 0.2B image inpainting model to run in the browser with Claude Code

This morning on Hacker News I saw Moebius: 0.2B Lightweight Image Inpainting Framework with 10B-Level Performance, describing a small but effective inpainting model - a model where you can mark regions of an image to remove and the model imagines what should fill the space. The released model required PyTorch and NVIDIA CUDA, but since it described itself as 0.2B I decided to try and get it running using WebGPU in a browser. TL;DR: I got it working, and you can try the demo at…

Simon Willison's Weblog
Esc