---
title: "Latest reads"
description: "The engineering internet, summarised so you can actually read it."
---

# Latest reads
> The engineering internet, summarised so you can actually read it.

## Articles

### [The 24 most commonly misunderstood marketing data terms](https://yomu.fyi/post/the-24-most-commonly-misunderstood-marketing-data-terms.md)
- Company: [Databricks](https://yomu.fyi/company/databricks.md)
- Author: Katy Yuan
- Published: Sep 28, 2026
- Type: Explainer

Marketing and data engineering teams often interpret the same data terms differently, leading to campaign rework and misaligned expectations. The guide covers 24 commonly misunderstood terms organized around five practical questions about campaign execution, including where data comes from, who a customer record represents, and what makes an audience ready. For example, ‘customer’ might mean a person to marketing but an entity at a specific grain like account or household to engineering, while ‘real time’ can mean soon enough not to feel broken to marketing but sub-second streaming with always-on architecture to engineering. The post provides paired definitions for each term as conversation starters to surface assumptions and agree on meanings before work begins. It also recommends documenting business definitions in Unity Catalog, connecting agreed meanings to datasets or workflows, and using them for AI agents to produce consistent results.


### [Next.js applications, powered by Vite: introducing Vinext 1.0](https://yomu.fyi/post/next-js-applications-powered-by-vite-introducing-vinext-1-0.md)
- Company: [Cloudflare](https://yomu.fyi/company/cloudflare.md)
- Author: Matt “TK” Taylor
- Published: Sep 28, 2026
- Type: Announcement

Vinext 1.0 graduates from an AI experiment to a production-ready framework that lets Next.js applications run on Vite, supporting both Pages and App Router. It achieves over 99% test compatibility for customer-requested features, excluding cache components, and includes support for pre-rendering, cache warming, and observability with OpenTelemetry and Sentry. Cache warming moves page prerendering from the build machine to Cloudflare’s network by deploying a new Worker version to zero traffic and requesting pages to populate the cache before promotion. The framework supports React Server Components, Server Actions, API routes, middleware, and shared caching functions across both routers, with first-class runtime support for Cloudflare Workers and bindings like image optimization and hyperdrive. Migration requires only two commands, and the project is open source with a nightly Next.js end-to-end test suite and community-driven issue tracking, also supporting output: ‘export’ for fully static sites and background revalidation.


### [Introducing cf: the agentic CLI for the entire Cloudflare API](https://yomu.fyi/post/introducing-cf-the-agentic-cli-for-the-entire-cloudflare-api.md)
- Company: [Cloudflare](https://yomu.fyi/company/cloudflare.md)
- Author: Samuel Macleod
- Published: Sep 28, 2026
- Type: Announcement

Cloudflare introduced cf, a new CLI that provides access to the entire Cloudflare API surface of over 3,000 operations, far exceeding Wrangler’s roughly 280 commands. Cf is designed primarily for AI coding agents, which account for nearly half of Wrangler usage, and defaults to JSON output with condensed formatting to minimize token consumption. The CLI includes a natural language search command, cf cli search, that helps agents discover the right operation without bloating context, and uses TypeScript-based configuration via cloudflare.config.ts for type safety. Cf is generated by Forge, Cloudflare’s internal pipeline that produces CLI commands from OpenAPI schema annotations, enabling consistent and comprehensive API coverage. The open beta is available globally via npm, and cf adopts Vite as its default local development server, with a migration path from Wrangler and maintenance support for 18 months after beta ends.


### [How fast is the web? Explore billions of real-user measurements with BEACON](https://yomu.fyi/post/how-fast-is-the-web-explore-billions-of-real-user-measurements-with-be.md)
- Company: [Cloudflare](https://yomu.fyi/company/cloudflare.md)
- Author: Nic Jansma
- Published: Sep 28, 2026
- Type: Announcement

Cloudflare has released the BEACON dataset, an anonymized collection of billions of real-user performance measurements from 10,000 of the largest websites. The dataset reports Core Web Vitals (LCP, CLS, INP) with full histograms, enabling analysis of any percentile including the long tail. It reveals that WebKit browsers underperform Blink in 46 countries, and that resource-discovery and render-blocking contribute more to slow LCP than download time. Soft navigations in single-page applications load two to three times faster than hard navigations, but landing pages remain heavy. The dataset is publicly available on Google BigQuery and includes differential privacy via the RAPPOR algorithm to protect individual user data.


### [Air Teams: Bring Your Best Agentic Workflows to the Whole Team – and Automate Repeatable Work](https://yomu.fyi/post/air-teams-bring-your-best-agentic-workflows-to-the-whole-team-and-auto.md)
- Company: [Jetbrains](https://yomu.fyi/company/jetbrains.md)
- Author: Vladimir Gromozdin
- Published: Sep 28, 2026
- Type: Announcement

JetBrains introduced Air Teams, a shared workspace for agentic development that extends beyond individual developers to teams and organizations. The system comprises four components: Automations for recurring tasks triggered by events or schedules, shared cloud environments with preconfigured tools and credentials, cloud tasks that run in parallel without tying up local machines, and team projects that centralize members, environments, and credits. Automations include templates for code review, bug fixes, and dependency updates, and they run under a project’s service account so they persist after a creator leaves. Shared environments are defined in a repository’s .air/cloud/startup.sh script and can be snapshotted for reuse, with secrets shared without exposing values. Air Teams is available to business customers, with plans to expand to individual customers later.


### [Upgrading to Red Hat JBoss Web Server 7: Key changes & impacts](https://yomu.fyi/post/upgrading-to-red-hat-jboss-web-server-7-key-changes-impacts.md)
- Company: [Red Hat](https://yomu.fyi/company/red-hat.md)
- Author: Jeff Beck
- Published: Sep 28, 2026
- Type: Explainer

Red Hat JBoss Web Server 7, based on Apache Tomcat 11 and Jakarta EE 11, requires Java 17 as the new minimum and drops support for Java 11. Jakarta EE 11 does not require another import rename but adds a RecordELResolver for records and an OptionalELResolver for optionals. Tomcat 11 changes parameter parsing to throw exceptions on malformed requests, reduces maxParameterCount to 1,000 from 10,000, removes FailedRequestFilter and HTTP/2 push, and retains quotes in cookie values per RFC 6265. The Java SecurityManager is removed, UBI 8 images are discontinued for UBI 9, Prometheus is no longer bundled, and Red Hat recommends container isolation as replacement. Teams must confirm Java 17 readiness, check for SecurityManager usage, update their base image pipeline, and note that Spring Boot 4 on JWS 7 is unsupported.


### [How to rank fraud detection models using custom cost metrics](https://yomu.fyi/post/how-to-rank-fraud-detection-models-using-custom-cost-metrics.md)
- Company: [Red Hat](https://yomu.fyi/company/red-hat.md)
- Author: Isaac Tigges, Neha Malepati
- Published: Sep 28, 2026
- Type: Tutorial

Accuracy is misleading for fraud detection because a model labeling everything legitimate can score 96% while catching zero fraud when fraud is only 4% of transactions. The post runs a hand-built Python grid search across algorithm, hyperparameters, feature set, class weight, and decision threshold, ranking by a custom cost metric balancing fraud savings against a US 6 analyst cost per flag. On a 480-transaction test split from a 2,400-transaction dataset with 4% fraud, the winning logistic regression caught 15 of 19 frauds, saving US 3,578 over a baseline that caught none. The winner’s evidence is passed to a local 1-billion-parameter LLM that drafts analyst notes, keeping the LLM downstream of the decision to avoid hallucination. The same workflow scales to Red Hat OpenShift AI by swapping local components for enterprise services like AutoML with AutoGluon and model serving via vLLM.


### [Run decision models on vLLM and Red Hat AI using DiffusionGemma](https://yomu.fyi/post/run-decision-models-on-vllm-and-red-hat-ai-using-diffusiongemma.md)
- Company: [Red Hat](https://yomu.fyi/company/red-hat.md)
- Author: Lucas Wilkinson, Rob Greenberg
- Published: Sep 28, 2026
- Type: Explainer

A new category of AI model called ‘System One’ makes fast, typed, probabilistic decisions from unstructured input, exemplified by TypeSafe AI’s Jev, which offers guaranteed structure, default probabilities, and low latency (70–500 ms) for high-volume decisions like routing and moderation. Jev is a hosted API without self-hosting options, prompting the vLLM community to adapt DiffusionGemma, an open block-diffusion model, as a self-hostable decision engine. The approach uses a fixed-length canvas seeded with answer templates, a single denoising step, and calibrated logprobs to return decisions with confidence scores, achieving over 300 decisions per second on a Cloud Run deployment. DiffusionGemma is already validated on Red Hat AI, and the structured-read support in vLLM nightly enables teams to run decision models on their own infrastructure. The post provides a recipe using vLLM nightly and a decision server that exposes a Jev-compatible endpoint for prototyping.


### [Introducing Forge: the open source pipeline for generating SDKs, CLIs, docs, and more](https://yomu.fyi/post/introducing-forge-the-open-source-pipeline-for-generating-sdks-clis-do.md)
- Company: [Cloudflare](https://yomu.fyi/company/cloudflare.md)
- Author: Samuel Macleod
- Published: Sep 28, 2026
- Type: Announcement

Cloudflare introduced Forge, an open source, pluggable generation pipeline for producing SDKs, CLIs, documentation, and other API surfaces from API definitions. Forge runs in CI on each team’s API repositories, linting every change and generating preview builds of the CLI, docs, and SDKs with only the changes highlighted, similar to Workers Previews. It supports OpenAPI as input and can chain transformers to produce outputs like Cap’n Web bindings, TanStack Query, or MCP servers, enabling generation of bindings from Workers to other APIs. Forge is designed to reduce coordination overhead across Cloudflare’s hundreds of services and repos, and to enable better API versioning without breaking existing clients or SDKs. It is available under the Apache 2.0 license and can be run for free, privately or publicly, and already generates the output required for the cf CLI.


### [The road to the agentic browser: A Kitesurf update](https://yomu.fyi/post/the-road-to-the-agentic-browser-a-kitesurf-update.md)
- Company: [Cloudflare](https://yomu.fyi/company/cloudflare.md)
- Author: Celso Martinho
- Published: Sep 28, 2026
- Type: Announcement

Kitesurf, Cloudflare’s browser for AI agents built entirely on Workers, has received a major update. It now supports WebMCP, enabling agents to call site functions like searchFlights() instead of simulating clicks, and site owners can enable WebMCP with one switch. The browser passes over 730,000 Web Platform Tests, up 500,000 since launch, and adds support for CSS Layout, CSSOM, custom elements, URL-based module resolution, and improved iframe behavior. Efficiency optimizations reduce DOM traversal overhead, font fetching, and timer work, keeping CPU usage in line with launch benchmarks despite expanded capabilities. Kitesurf also gains full Browser Run API coverage, including Quick Actions from Worker bindings, and a terminal rendering mode using the Kitty protocol or ANSI text, with open-sourcing planned soon.


### [Introducing The Cold Start: pitch your startup live at Cloudflare Connect](https://yomu.fyi/post/introducing-the-cold-start-pitch-your-startup-live-at-cloudflare-conne.md)
- Company: [Cloudflare](https://yomu.fyi/company/cloudflare.md)
- Author: Sunil Pai
- Published: Sep 28, 2026
- Type: Announcement

Cloudflare announces The Cold Start, a live startup competition at Cloudflare Connect in San Francisco on Monday, October 19, 2026. Five early-stage companies with less than $10 million raised will each get five minutes on stage to pitch their vision to judges including Cloudflare co-founders Matthew Prince and Michelle Zatlyn, and CTO Dane Knecht. The winning startup receives $500,000 in Cloudflare credits, a billboard in San Francisco, and an invitation to the VIP speakers dinner. Applications close Friday, October 2, 2026, and Cloudflare will pay travel for the five finalists. The competition is inspired by Cloudflare’s own launch at TechCrunch Disrupt in 2010 and is part of its Cloudflare for Startups program, which offers eligible companies up to $350,000 in credits.


### [EmDash 1.0: the stable CMS with a secure plugin registry](https://yomu.fyi/post/emdash-1-0-the-stable-cms-with-a-secure-plugin-registry.md)
- Company: [Cloudflare](https://yomu.fyi/company/cloudflare.md)
- Author: Noah Pham
- Published: Sep 28, 2026
- Type: Announcement

EmDash 1.0 is a stable, free, and open source content management system built on Astro, offering a production-tested admin for editors and agent-friendly workflows through an API, CLI, and built-in MCP server. Its decentralized plugin registry, built on AT Protocol, lets developers publish plugins without ceding ownership of their identity or releases to a central marketplace, while site owners can discover and install plugins directly. Cloudflare migrated its own blog to EmDash as part of its “Customer Zero” approach, handling millions of pageviews per week and spikes up to 5,000 RPS, which led to features like KV object caching and Hyperdrive database adapter. The project is MIT-licensed with over 175 contributors and translations into 25 languages, and it supports sandboxed plugins for security. EmDash separates the plugin from the catalog, allowing other services to index the same publications without requiring developers to start over.


### [Supporting native Rust in Workers with the new Emscripten target for wasm-bindgen](https://yomu.fyi/post/supporting-native-rust-in-workers-with-the-new-emscripten-target-for-w.md)
- Company: [Cloudflare](https://yomu.fyi/company/cloudflare.md)
- Author: Mitch Foley
- Published: Sep 28, 2026
- Type: Announcement

Cloudflare announced an experimental Emscripten target for wasm-bindgen, enabling native Rust code compiled with wasm-bindgen to run directly on Workers with full platform feature virtualization. This resolves the long-standing incompatibility between Emscripten and wasm-bindgen by having Emscripten drive the build while wasm-bindgen produces portable bindings included in Emscripten’s library system. The integration virtualizes timers, file system operations, and sockets atop Workers’ Node.js APIs, bringing significantly improved library compatibility for many previously unsupported Rust crates after minor patches to libraries like libc and socket2. Tokio async runtime support is achieved through WebAssembly JavaScript Promise Integration, which suspends blocking calls and returns control to the event loop without stalling. In testing, a Rust Minecraft server (Pumpkin) was deployed inside a Durable Object with TCP ingress using real Tokio sockets, persisting world state through Durable Object storage and supporting multiplayer connections.


### [Rider 2026.2.3 Is Released!](https://yomu.fyi/post/rider-2026-2-3-is-released.md)
- Company: [Jetbrains](https://yomu.fyi/company/jetbrains.md)
- Author: Alexander Kurakin
- Published: Sep 28, 2026
- Type: Announcement

Rider 2026.2.3 is released, adding AI performance analysis to the Monitoring tool window and fixing an issue with the AI Agent Setup widget on Windows. The Monitoring tool window collects runtime data every time an application runs, allowing the AI agent to find bottlenecks and link them to code using the Analyze with AI action, which sends a prompt to the agent to begin the investigation. The agent uses the dottrace-analyze skill to show where time was spent, follow hot paths in code, and provide useful performance insights in the chat. This feature requires Windows, dotUltimate or the All Products Pack, and the AI Assistant plugin. The widget fix addresses issue RIDER-143160, where clicking its taskbar icon with display scaling below 175% failed to open the widget, and updates are available from the IDE, Toolbox App, or website.


### [Holo4: powering generalist computer-use agents](https://yomu.fyi/post/holo4-powering-generalist-computer-use-agents.md)
- Company: [Hugging Face](https://yomu.fyi/company/hugging-face.md)
- Author: Tony Wu, Maxime Theillard, Frederic Renard, Vincent Coyette, Emrick Sinitambirivoutin, Avshalom Manevich, Antonio Loison, Antoine Bonnet, Maxime Langevin, Aleix Cambray (H-AI), Léonard Benedetti, Tony Wu, Mats L. Richter, Michael Eickenberg, Sławek Mucha, Matthias Brunel, Daniel Beechey
- Published: Sep 28, 2026
- Type: Announcement

Holo4 is a new series of agentic models designed to interact with software through any available interface: GUIs, code, MCP, and APIs. It comes in two sizes, a 27B dense model and a 35B-A3B Mixture of Experts model, both available on the H Models API. The models were trained through supervised and reinforcement learning on environments and tasks generated by the Agentic Task Factory, which produces verifiable tasks from documentation alone. On the OSWorld 2.0 benchmark, Holo4 27B scores 61.7% against 81.8% for Opus 5.5, achieving competitive performance at a fraction of the cost. The company also released Holotron4 Nano, an updated version of Holotron 3 built on the Nemotron 3 Nano Omni model using the same post-training stack.


### [chDB Durable Layer for agent memory](https://yomu.fyi/post/chdb-durable-layer-for-agent-memory.md)
- Company: [Clickhouse](https://yomu.fyi/company/clickhouse.md)
- Published: Sep 28, 2026
- Type: Announcement

Agent memory built on chDB, an embedded SQL OLAP engine, accumulated state such as project rules, user preferences, and recall traces on a single laptop. Moving that memory to CI, sandboxes, or another laptop broke the local-disk assumption because the MergeTree directory existed on only one disk. Adding a ClickHouse server backend fixed portability but turned every recall into a network round trip. The chDB Durable Layer fills the gap by keeping the local analytical hot path while publishing authoritative state to object storage (S3, GCS, or Azure Blob). Applications write to a local working copy and use flush() to publish writes and checkpoint() to compact the log, avoiding a sidecar or database server. The contract supports Python, Node, Go, and Rust bindings with cross-binding recoverability.


### [A More Reliable Compilation Scheme for Kotlin Multiplatform Modules](https://yomu.fyi/post/a-more-reliable-compilation-scheme-for-kotlin-multiplatform-modules.md)
- Company: [Jetbrains](https://yomu.fyi/company/jetbrains.md)
- Author: Aleksey Zamulla
- Published: Sep 28, 2026
- Type: Announcement

Kotlin Multiplatform’s current compilation scheme can cause IDE and compiler disagreements or unexpected resolution of platform-specific declarations from common source sets. In Kotlin 2.5.0-Beta1, an optional separate compilation approach aligns compiler behavior with IDE analysis, making common code resolve only against metadata KLIB declarations. This also eliminates issues like overload selection differing by target and type inference failures in platform code. Separate compilation is experimental and disabled by default, enabled by adding kotlin.kmp.separateCompilation=true to gradle.properties. Known issues include problems with cinterop commonization and single-target modules; library authors must publish metadata KLIBs for the feature to work correctly.


### [NVIDIA Open Agent Safety Platform: A Reference for Continuous In-Silicon Agent Monitoring](https://yomu.fyi/post/nvidia-open-agent-safety-platform-a-reference-for-continuous-in-silico.md)
- Company: [NVIDIA](https://yomu.fyi/company/nvidia-developer-blog.md)
- Author: Tanya Lenz
- Published: Sep 28, 2026
- Type: Announcement

The post compares early internet security—where browser sandboxing isolated pages—to the current need for trust layers in AI agents, citing incidents where agents escaped evaluation environments and misreported actions. NVIDIA introduces OpenShell, an open-source secure runtime that sandboxes each agent with kernel-level isolation and enforces verifiable policies defined by operators before and during execution. The platform follows five core principles, including out-of-band enforcement, controlling the path to the model as a kill switch, and scaling agent authority with reasoning visibility, to prevent agent drift. For hardware-level protection, NVIDIA Sentry extends monitoring into BlueField DPUs, which sit on the node’s only path to the model, providing continuous out-of-band observability and real-time policy enforcement at line speed. The architecture is optimized for NVIDIA Vera CPU and BlueField DPU systems, enabling fleet-wide agent security with full lineage tracking, and for existing Vera systems, enabling protections is just a software update.


### [Add Runtime Controls to AI Agents with NVIDIA OpenShell](https://yomu.fyi/post/add-runtime-controls-to-ai-agents-with-nvidia-openshell.md)
- Company: [NVIDIA](https://yomu.fyi/company/nvidia-developer-blog.md)
- Author: Alex Watson
- Published: Sep 28, 2026
- Type: Announcement

AI agents with broad access to systems and data can cause failures like modifying production data or exposing secrets. NVIDIA OpenShell 0.1.0 is an open-source runtime that enforces permissions outside the agent workload using sandboxed execution, controlled service access, credential management, and formal policy analysis. It combines a Gateway for lifecycle management, a Supervisor that checks outbound requests against policy, and a Sandbox with kernel-level filesystem and process controls and no network path except through the supervisor. The supervisor inspects HTTP, GraphQL, and MCP traffic to allow reads while blocking writes on the same API, and real credentials are kept outside the agent workload and bound to authorized endpoints. OpenShell supports multi-tenant platforms, formal policy verification that can prove permissions remain within boundaries, and policy advisor for dynamic network changes, and is adopted by Cadence, Slack, and Gecko Robotics for chip design, enterprise automation, and physical AI.


### [How NVIDIA DSX MaxLPS Maximizes AI Factory Throughput and Efficiency](https://yomu.fyi/post/how-nvidia-dsx-maxlps-maximizes-ai-factory-throughput-and-efficiency.md)
- Company: [NVIDIA](https://yomu.fyi/company/nvidia-developer-blog.md)
- Author: Sarah McKenney
- Published: Sep 28, 2026
- Type: Benchmark

AI factories often underutilize power capacity due to static provisioning for peak GPU draw. NVIDIA DSX MaxLPS uses policy-governed dynamic power allocation to reclaim stranded capacity. In a joint evaluation with Nscale using Kimi K2.5 workloads on GB300 NVL72 systems, DSX MaxLPS enabled 37% more GPUs (192 vs 140) within the same 264.4 kW budget. Aggregate throughput increased 49.2% to 1.62 million tokens/s, while per-instance throughput remained unchanged and median latency stayed within 5% of baseline. However, P99 time to first token increased 17%, highlighting the need to evaluate tail latency alongside capacity gains.


[Newer posts](https://yomu.fyi/posts/page/31.md) · [Older posts](https://yomu.fyi/posts/page/33.md)