---
title: "Latest reads"
description: "The engineering internet, summarised so you can actually read it."
---

# Latest reads
> The engineering internet, summarised so you can actually read it.

## Articles

### [Deploy Oracle Database step by step on Amazon EVS with FSx for ONTAP](https://yomu.fyi/post/deploy-oracle-database-step-by-step-on-amazon-evs-with-fsx-for-ontap.md)
- Company: [AWS](https://yomu.fyi/company/aws.md)
- Author: Satish Bhoi
- Published: Oct 2, 2026
- Type: Tutorial

This post provides step-by-step procedures to deploy Oracle Database on Amazon Elastic VMware Service (Amazon EVS) with Amazon FSx for NetApp ONTAP as NFS datastore storage. It covers provisioning storage volumes, mounting NFS datastores, installing Oracle 19c, and configuring SnapMirror replication for cross-region disaster recovery. The deployment uses FSx for ONTAP volumes pinned to SSD tier and presents them as VMDKs on NFS datastores, with Oracle accessing them as local XFS filesystems. Four migration paths are detailed for moving on-premises Oracle workloads, including SnapMirror-based replication for existing ONTAP environments and RMAN backup/restore for non-ONTAP storage. Day-2 operations such as snapshot backup, point-in-time recovery, and database cloning via SnapCenter FlexClone are also covered.


### [Architect highly available Oracle Database on Amazon EVS and FSx for ONTAP](https://yomu.fyi/post/architect-highly-available-oracle-database-on-amazon-evs-and-fsx-for-o.md)
- Company: [AWS](https://yomu.fyi/company/aws.md)
- Author: Satish Bhoi
- Published: Oct 2, 2026
- Type: Tutorial

Enterprises with existing VMware Cloud Foundation investments can migrate Oracle databases to AWS using Amazon Elastic VMware Service (EVS) and Amazon FSx for NetApp ONTAP without rearchitecting applications or retraining operations teams. The architecture splits storage between vSAN for low-latency transient workloads and FSx for ONTAP NFS datastores for Oracle data files and redo logs, delivering sub-millisecond latency and up to 80,000 IOPS. Cross-region disaster recovery uses SnapMirror to asynchronously replicate FSx for ONTAP volumes, with pre-provisioned standby Oracle VMs that mount replicas only after failover to avoid Oracle double licensing. Recommended EC2 bare metal instance types include i7i.metal-24xl for per-core compute speed and i7i.metal-48xl for vertical scaling, both supporting VCF 9.1. Migration options include VMware HCX for live migration, SnapMirror for ONTAP-to-ONTAP transfer, and RMAN for universal database movement.


### [Deploy open source Regional availability tools in your VPC](https://yomu.fyi/post/deploy-open-source-regional-availability-tools-in-your-vpc.md)
- Company: [AWS](https://yomu.fyi/company/aws.md)
- Author: Stefan Janjic
- Published: Oct 2, 2026
- Type: Tutorial

Teams building multi-Region architectures on AWS need to know which services are available per Region, but want that data deployed inside their VPC under their governance. This post introduces Capability Insights for AWS, a self-hosted dashboard that auto-refreshes Regional availability data every 24 hours, and Workload Analysis, which scans CloudTrail and CloudFormation to filter services to only those your account uses. Capability Insights deploys a static website backed by API Gateway, Lambda, and EventBridge within your VPC, pulling data from the centralized AWS Capabilities by Region S3 bucket. Workload Analysis reduces the scope from over 200 services to typically 20-30, attributing each resource type to the specific CloudFormation stacks that deploy it and showing property configurations in use. The dashboard provides a targeted view of service availability, API operations, and CloudFormation resource types per Region, enabling focused gap analysis for Regional expansion planning and helping identify service-availability gaps.


### [Supabase Select 2026 Recap](https://yomu.fyi/post/supabase-select-2026-recap.md)
- Company: [Supabase](https://yomu.fyi/company/supabase.md)
- Author: oli\_rice, inian, jonny
- Published: Oct 2, 2026
- Type: Announcement

Supabase announced a code-first approach at its Select 2026 event, enabling developers to store schema and configuration in code so coding agents can set up and modify projects end to end. Local Supabase now runs as native processes without Docker, allowing multiple instances per directory and compatibility with sandboxes like Claude Code. A new MCP server lets application users connect their own agents, authenticating through existing Auth flows and enforcing row-level security on every tool call. Operational tools include Health Check Advisors for error rates, Database Connections for session management, Explorer notebooks for unified SQL and log queries, and query\_logs for agent monitoring. Scaling features encompass Multigres for multi-node Postgres high availability, OrioleDB to avoid table bloat and VACUUM, Supabase Pipelines for near real-time data streaming to analytics platforms, and dbarena for transparent benchmarks.


### [Scale without limits: Multigres, OrioleDB, and dbarena](https://yomu.fyi/post/scale-without-limits-multigres-orioledb-and-dbarena.md)
- Company: [Supabase](https://yomu.fyi/company/supabase.md)
- Author: joe\_sciarrino, alexander\_korotkov, daniel\_mitterdorfer, aditya\_maruvada
- Published: Oct 2, 2026
- Type: Announcement

At Supabase Select, Supabase announced Multigres for high availability and connection pooling, OrioleDB for high performance storage, and dbarena for transparent benchmarking. Multigres is an open source operating system for Postgres that adds scalable connection pooling and automated multi-node failover using a consensus protocol built on synchronous replication, preventing data loss during failover. OrioleDB replaces Postgres’s heap storage with an undo log-based engine that eliminates bloat, VACUUM overhead, and transaction ID wraparound by using 64-bit transaction IDs, delivering up to 1.8x higher throughput in TPC-C-derived benchmarks. dbarena.com is an open benchmarks site that publishes reproducible performance and cost comparisons across managed Postgres providers including Supabase, Amazon RDS, and Google Cloud SQL, with full methodology and raw data. These tools aim to remove scaling limitations at every layer of Postgres, with all improvements being open source and available to the community.


### [Operate with confidence](https://yomu.fyi/post/operate-with-confidence.md)
- Company: [Supabase](https://yomu.fyi/company/supabase.md)
- Author: steven\_eubank, joshenlim, cemal\_kilic, riccardo\_busetti, joe\_sciarrino
- Published: Oct 2, 2026
- Type: Announcement

At Supabase Select, Supabase announced tools that let coding agents find production problems, test fixes, and report back, with controls for access and permission. A new MCP tool gives agents raw SQL access to project logs, advisor checks now include health signals for error rates across Data API, Auth, Storage, and Edge Functions, and the database connections view shows sessions, long queries, idle-in-transaction, blocked, and lock holders. Notebooks combine saved database or log queries with markdown notes, can be created in the dashboard via the Assistant, pulled locally with supabase notebooks pull, and pushed with supabase notebooks push, and are found in the new Explorer rolling out through October 12. Updated Skills provide a living document of common health, security, performance, and resource signals for agents to watch for and how to monitor them. Supabase Pipelines, available on paid plans, allow replicating data to BigQuery, ClickHouse, DuckLake, or Snowflake.


### [Build anything: Supabase from code, and an MCP server for your app](https://yomu.fyi/post/build-anything-supabase-from-code-and-an-mcp-server-for-your-app.md)
- Company: [Supabase](https://yomu.fyi/company/supabase.md)
- Author: wenbo, laktek, jgoux, avallete, rand\_arete, katerina\_skroumpelou
- Published: Oct 2, 2026
- Type: Announcement

Supabase announced tools at Supabase Select that let coding agents manage backend configuration and deployment from code, eliminating the need for dashboard-only changes. Declarative Schemas 2.0 allows agents to edit SQL files as the source of truth, with pg-delta generating migrations, while config.toml holds settings like auth providers that can be pulled back from the dashboard. Local development now runs as native processes without Docker, supporting multiple instances per directory and working in environments like Claude Code’s sandbox, currently in alpha off by default. Supabase Compute provides long-running services in any language alongside the database, with configurable memory and CPU, public or private HTTP endpoints, and deployment via CLI or Management API. The new MCP server lets user agents interact with an app as the signed-in user, respecting existing RLS policies, built on @supabase/server and Supabase Middleware, with a headless app template available.


### [Anthropic invests $100 million to train 10,000 engineers and tackle the enterprise AI talent gap](https://yomu.fyi/post/anthropic-invests-100-million-to-train-10-000-engineers-and-tackle-the.md)
- Company: [Anthropic](https://yomu.fyi/company/anthropic.md)
- Author: Anthropic
- Published: Oct 2, 2026
- Type: Announcement

Anthropic launched Claude Frontier Academy with a $100 million commitment to train 10,000 Frontier Deployed Engineers by the end of 2027. The program addresses the talent gap in enterprise AI implementation, where skilled engineers are scarce. The Frontier Deployed Engineer Residency follows a medical model: engineers learn from practitioners, work on simulated enterprise deployments covering use case selection, security review, and handover, and are assessed on a graded practical before earning credentials. First cohorts include engineers from Accenture, Bain, Capgemini, Commonwealth Bank of Australia, Deloitte, McKinsey, Morgan Stanley, and Novo Nordisk, with cohorts running in San Francisco, New York, and London. The program starts with a multi-day in-person session with Anthropic engineers and licensed instructors and continues with a 12-week residency where engineers lead a real Claude use case at their organization, supported by Anthropic engineers, with the first FDE badges expected in early 2027.


### [Streamline: custom video pipelines with Cloudflare Stream and Workers](https://yomu.fyi/post/streamline-custom-video-pipelines-with-cloudflare-stream-and-workers.md)
- Company: [Cloudflare](https://yomu.fyi/company/cloudflare.md)
- Author: Taylor Smith
- Published: Oct 2, 2026
- Type: Announcement

Cloudflare released Streamline, a developer playground that demonstrates how to build custom video pipelines using its Developer Platform. Streamline combines Workers, Containers, and Durable Objects to create long-running media processing sessions that can render dynamic annotations or burn in subtitles on livestreams and hosted videos. The architecture consists of a Media Engine running in a Container, controlled by a Worker application that handles orchestration and preview via Durable Objects. The Media Engine uses FFmpeg for processing and supports inputs from RTMPS, HLS, or webcam, with output to Cloudflare Stream or WebSocket preview. Streamline is open source, with repositories for the media engine and an example application, and a public playground is available for testing.


### [Supabase is acquiring Turso](https://yomu.fyi/post/supabase-is-acquiring-turso.md)
- Company: [Supabase](https://yomu.fyi/company/supabase.md)
- Author: paul\_copplestone
- Published: Oct 2, 2026
- Type: Announcement

Supabase is acquiring Turso to evolve database infrastructure for the massive scale of AI agent-created databases. Supabase already launches over one million databases per week and expects demand to outpace capacity as agents build more software. Turso rebuilt SQLite in Rust, creating a cloud platform where a single server manages millions of databases, loading them on demand and suspending them when idle, avoiding dedicated machines for small workloads. This architecture suits agent workloads needing cheap, on-demand databases, while Postgres remains the path for scaling to production; Turso will continue operating independently with a clear path into Supabase’s ecosystem, and for existing users nothing changes. Glauber Costa will lead the agentic infrastructure effort, and the combined mission is to store the world’s data as agents create more of it.


### [Open-sourcing AstaBrief, the fast report-generation model in Asta](https://yomu.fyi/post/open-sourcing-astabrief-the-fast-report-generation-model-in-asta.md)
- Company: [Hugging Face](https://yomu.fyi/company/hugging-face.md)
- Author: Kyle Wiggers
- Published: Oct 2, 2026
- Type: Announcement

AstaBrief is an open-weights 8B-parameter model developed by Ai2 for generating cited scientific reports from a research question and literature excerpts, designed for evidence-grounded outputs. It was trained from Qwen3-8B using supervised fine-tuning on 47K filtered real user queries and direct preference optimization, focusing on data quality. Unlike Asta’s Thinking mode, which uses a multi-step pipeline, AstaBrief writes the full report in a single pass to reduce generation time. In Asta’s Fast mode, it averages 51.1 seconds per report versus 178.5 seconds for Thinking mode, roughly 3.5× faster, while competitive on answer and citation quality. The model and training data are open-sourced on Hugging Face, enabling institutions to deploy behind their own firewall and supporting future open scientific models.


### [Introducing Web Search API via AI Gateway](https://yomu.fyi/post/introducing-web-search-api-via-ai-gateway.md)
- Company: [Cloudflare](https://yomu.fyi/company/cloudflare.md)
- Author: Gabriel Massadas
- Published: Oct 2, 2026
- Type: Announcement

Cloudflare launched a Web Search API via AI Gateway, partnering with Ceramic.ai, Exa, and Linkup, to provide grounded intelligence by letting AI agents search the web instead of guessing URLs that return 404 errors. The API injects live, structured snippets into inference pipelines, giving models access to information beyond their training cutoff, such as new Birthday Week releases, and grounding agent responses with real-time data. Developers can integrate via AI Gateway credits, a direct REST endpoint with curl, or Workers bindings with one line of code. Partners commit to Cloudflare’s verified bot standards, including identifying crawlers, respecting robots.txt, and providing source links for transparency. Web search calls are logged in AI Gateway observability, billed at list pricing without markup, support Bring-Your-Own-Key and Zero Data Retention, with native server tools coming soon.


### [Benchmarking AI decision models against traditional guardrails](https://yomu.fyi/post/benchmarking-ai-decision-models-against-traditional-guardrails.md)
- Company: [Red Hat](https://yomu.fyi/company/red-hat.md)
- Author: Dr. Rob Geada, Dr. Mac Misiura, Shelton Cyril
- Published: Oct 2, 2026
- Type: Benchmark

Enterprise generative AI applications require guardrails that balance flexibility with reliability. Decision models such as TypeSafe AI’s Jev produce fixed decisions with guaranteed schema and type safety, operating faster and cheaper than LLM-as-a-judge approaches. The Red Hat AI Safety team benchmarked nine guardrails across four methodologies for prompt injection and content safety tasks: pre-trained CPU-scale classifiers like Red Hat’s DeBERTa-v3 and Granite Guardian HAP-125m, older zero-shot models like BART-large-mnli, modern LLM-as-a-judge safety models including Shieldstral and Nemotron-3.5, and Jev-style decision models including Laya and DiffusionGemma. Each guardrail was evaluated using stock and custom risk policies, with Jev and DiffusionGemma using zero-shot questions. The results highlight trade-offs: Jev provides zero-shot flexibility and low latency, but purpose-built classifiers often match its speed and cost while delivering superior task-specific performance, and LLM-as-a-judge models can be tuned for higher accuracy.


### [Kube AuthKit: Unified Kubernetes and OpenShift auth in Python](https://yomu.fyi/post/kube-authkit-unified-kubernetes-and-openshift-auth-in-python.md)
- Company: [Red Hat](https://yomu.fyi/company/red-hat.md)
- Author: Saad Zaher
- Published: Oct 2, 2026
- Type: Problem & solution

Kube AuthKit is a lightweight Python library that unifies Kubernetes and OpenShift authentication behind a single API, eliminating conditional code paths across local, pod, notebook, and CI/CD environments. It supports four strategies—kubeconfig, in-cluster, OIDC, and OpenShift OAuth—auto-detected by an AuthFactory that probes environment variables and in-cluster markers in a defined order. The library handles token lifecycle transparently, with in-memory storage by default and optional OS keyring persistence for local development to avoid repeated logins. It provides two OIDC flows: device code for headless environments and authorization code with PKCE for interactive applications, both with automatic token refresh. Kube AuthKit returns a standard Kubernetes Python client ApiClient, ensuring full compatibility with the official library, and is actively maintained by the Open Data Hub community for OpenShift AI environments.


### [Smarter GPU sharing: How Red Hat build of Kueue works with dynamic resource allocation](https://yomu.fyi/post/smarter-gpu-sharing-how-red-hat-build-of-kueue-works-with-dynamic-reso.md)
- Company: [Red Hat](https://yomu.fyi/company/red-hat.md)
- Author: Pannaga Rao Bhoja Ramamanohara
- Published: Oct 2, 2026
- Type: Explainer

The Kubernetes device plugin model treats GPUs as anonymous integers, making fair sharing impossible because a full 80 GB GPU and a 5 GB partition both consume ‘1’ from the same quota. Dynamic resource allocation (DRA), generally available in Kubernetes 1.34, replaces this by having drivers advertise real device attributes like memory and compute capability, but DRA alone does not address quota management or preemption. Red Hat build of Kueue 1.4 on Red Hat OpenShift integrates with DRA to enforce quota, borrowing, and preemption for both whole GPUs and partitionable devices using device-count or counter-based memory accounting. For partitionable GPUs, Kueue reads counter data from DRA drivers and charges GPU memory against ClusterQueue quota instead of device count, enabling accurate fair sharing between training and inference workloads. Future developments include extended resources for simpler adoption without ResourceClaimTemplates, consumable capacity for dynamic time-slicing, and scheduler-library integration to verify scheduling feasibility.


### [8 major updates to Cloudflare Observability](https://yomu.fyi/post/8-major-updates-to-cloudflare-observability.md)
- Company: [Cloudflare](https://yomu.fyi/company/cloudflare.md)
- Author: Sahidya Devadoss
- Published: Oct 2, 2026
- Type: Announcement

Cloudflare announced eight major updates unifying logs, traces, analytics, alerts, dashboards, and data export into one observability platform with simplified pricing. The new Logs home combines Workers Observability and Log Explorer, letting users query datasets like HTTP events, firewall events, Workers, and R2 using SQL or filters. Cloudflare Traces, now in open beta, provides request-level visibility across security rules, transformations, caching, routing, Workers, and origin, with OpenTelemetry export and W3C trace context propagation. A unified SQL API lets humans and agents query telemetry across Cloudflare products, and custom alerts can be set on any dataset using threshold, anomaly, or SLO conditions. Pricing shifts to a volume-based model for ingested and stored logs and traces, effective December 1, 2026, with free tier at 0.5 GB ingestion per day and paid plans starting at 50 GB ingestion per billing cycle.


### [Introducing Cloudflare Traces: follow requests through our entire platform](https://yomu.fyi/post/introducing-cloudflare-traces-follow-requests-through-our-entire-platf.md)
- Company: [Cloudflare](https://yomu.fyi/company/cloudflare.md)
- Author: Daniel Walsh
- Published: Oct 2, 2026
- Type: Announcement

Cloudflare Traces, in open beta, extends tracing beyond Workers to the full request path, capturing spans for security, transformations, cache, routing, Workers, and origin handling in one timeline. Users set a baseline sampling rate and use Trace Rules to override it for specific traffic, enabling targeted debugging without increasing volume across the domain. The feature accepts and forwards W3C traceparent headers for distributed tracing and exports spans via OTLP to any compatible backend, with no instrumentation required. It reveals why a request was blocked, which rule acted, whether the URL was rewritten, and where time was spent between cache, origin, and the application. Pricing, effective December 1, 2026, is based on ingestion and retention: free tier 0.5 GB daily with 7-day retention, paid plans 50 GB ingestion and up to 365-day retention.


### [Updates on our pledge to make Cloudflare features accessible to everyone](https://yomu.fyi/post/updates-on-our-pledge-to-make-cloudflare-features-accessible-to-everyo.md)
- Company: [Cloudflare](https://yomu.fyi/company/cloudflare.md)
- Author: Chase Catelli
- Published: Oct 2, 2026
- Type: Announcement

Cloudflare CTO Dane Knecht pledged a year ago to make every Cloudflare feature available to all customers, not just Enterprise. The company has since expanded Logpush and Logpush Transformers, which use SQL to filter, redact, and reformat logs, to Free, Pro, and Business plans. Custom Dashboards for personalized metrics are now available to all customers. Role-Based Access Control (RBAC) has been extended to nearly all products, including resource-level roles for Workers, and a New Account button lets users create additional accounts directly. Organizations, which group accounts for unified analytics and shared configurations, are in beta for Enterprise and will reach free accounts in early 2027, and platform limits have also been raised, including Workers subrequests from 50 to 100 and Durable Objects idle time from 70–140 seconds to 15 minutes with active outbound connections.


### [Announcing Cloudflare OHTTP Gateway – expanding access to Cloudflare’s privacy-preserving infrastructure](https://yomu.fyi/post/announcing-cloudflare-ohttp-gateway-expanding-access-to-cloudflare-s-p.md)
- Company: [Cloudflare](https://yomu.fyi/company/cloudflare.md)
- Author: Akshat Mahajan
- Published: Oct 2, 2026
- Type: Announcement

Cloudflare announced the closed beta of its OHTTP Gateway, a managed service that decapsulates encrypted OHTTP requests for application servers while preserving client privacy and expanding access to privacy-preserving infrastructure. OHTTP is an IETF standard that uses two independent hops—a relay and a gateway—to hide client IP addresses and TLS fingerprints from app servers, ensuring no single party sees both client identifiers and request contents. The new Gateway is designed for customers whose app servers are already behind Cloudflare, allowing them to use a third-party relay while Cloudflare handles the cryptographic work, for example with Apple’s LiveCallerID. Cloudflare also renamed its existing Privacy Gateway product to Cloudflare OHTTP Relay to better distinguish the two product options. The Gateway runs on Cloudflare’s global edge network to minimize latency, and developers can implement OHTTP clients using sample libraries while joining a waitlist for the paid add-on.


### [Follow the thread: a new dashboard to investigate account abuse](https://yomu.fyi/post/follow-the-thread-a-new-dashboard-to-investigate-account-abuse.md)
- Company: [Cloudflare](https://yomu.fyi/company/cloudflare.md)
- Author: Nicole Justus
- Published: Oct 2, 2026
- Type: Announcement

Cloudflare’s new Account Abuse Protection dashboard helps fraud teams investigate account abuse by moving beyond stateless identity checks to a stateful trust model. The dashboard uses cryptographically hashed identifiers, called Hashed User IDs, created from customer-provided identifiers like email or username, to anchor account activity across login and signup events. It provides an account population overview with metrics like total events, unique IPs, and devices to spot anomalies such as leaked credential matches or unusual login failure rates, then allows analysts to filter and drill into individual accounts. Each account view shows historical behavioral, network, and device signals, enabling teams to reconstruct events and decide on responses like WAF rules. The dashboard also introduces two new roles—Account Abuse Protection and Account Abuse Protection PII—to enforce least privilege for dashboard access and PII exposure.


[Newer posts](https://yomu.fyi/posts/page/24.md) · [Older posts](https://yomu.fyi/posts/page/26.md)