---
title: "Latest reads"
description: "The engineering internet, summarised so you can actually read it."
---

# Latest reads
> The engineering internet, summarised so you can actually read it.

## Articles

### [The Merchant Identity Gap: The Hidden Payment Data Problem](https://yomu.fyi/post/the-merchant-identity-gap-the-hidden-payment-data-problem.md)
- Company: [MongoDB](https://yomu.fyi/company/mongodb.md)
- Published: Aug 19, 2026
- Type: Problem & solution

Banks face a merchant identity gap: transaction descriptors from acquirers (e.g., SBUX) often don’t match customer search terms (e.g., “Starbucks” or “星巴克”) due to script differences, colloquial aliases, and cross-subsidiary naming inconsistencies. This gap inflates support costs, degrades spend categorization, and undermines personalized financial management and AI advisors. The solution uses a semantic resolution architecture on MongoDB storing a master merchant catalog with canonical names, aliases, and vector embeddings. An escalating pipeline applies fuzzy matching, semantic vector search with Voyage AI embeddings and MongoDB Vector Search, and gen AI write-back to resolve unknown descriptors and enrich the catalog. With canonical identities indexed, customers search in their own language, and institutions power conversational AI that accurately answers queries like “How much did I spend at Starbucks last month?” across markets.


### [Cloud Agents and Cursor Harness Improvements](https://yomu.fyi/post/cloud-agents-and-cursor-harness-improvements.md)
- Company: [Cursor](https://yomu.fyi/company/cursor.md)
- Published: Aug 19, 2026
- Type: Announcement

Cursor’s release expands cloud agents and the Cursor harness for longer-running, event-driven software work. Cloud agents can subscribe to pull requests, Slack threads, or scheduled tasks, wake on events, keep goals until completion, and automatically address CI failures and bot comments on pull requests they create. Custom modes pin a selected skill in chat, while /goal supplies a long-lived objective that can be paired with a custom mode or /loop. Subagents can run on separate virtual machines with isolated project copies and clean context, supporting fresh testing or parallel fixes without collisions. Steering improvements let users send follow-ups that wait for the next tool call instead of interrupting an action.


### [Welcoming Laura Beatris, our new Software Engineer](https://yomu.fyi/post/welcoming-laura-beatris-our-new-software-engineer.md)
- Company: [Resend](https://yomu.fyi/company/resend.md)
- Published: Aug 19, 2026
- Type: Announcement

Resend announces that Laura Beatris is joining its team as a Software Engineer. She previously worked at Clerk and WorkOS, where she shipped authentication products with an emphasis on developer experience, and she has spoken on React, TypeScript, and learning in public. Laura describes a path that began with learning Python from free tutorials, continued through a technical degree and early project-building after repeated internship rejections, and eventually led to Amsterdam in 2021. At Resend, she says she was drawn to products where details matter, a culture of learning in public, and a new problem space for improving her developer-experience judgment; her advice is to learn, create, then teach, because teaching helps knowledge stick.


### [How to Build Passwordless Auth With Twilio Verify in Rust](https://yomu.fyi/post/how-to-build-passwordless-auth-with-twilio-verify-in-rust.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Matthew Setter
- Published: Aug 19, 2026
- Type: Tutorial

Passwordless authentication replaces passwords with one-time codes delivered by SMS, and this tutorial builds a Rust app around that flow. The app uses Twilio Verify for OTP generation and validation, with GET and POST routes at "/" for collecting a phone number and at "/verify" for entering the received code. It sets up a Cargo project with Axum, Handlebars templates, sessions, dotenvy configuration, and the rustlio Twilio client, while environment variables hold the Account SID, Auth Token, and Verify Service SID. The implementation also serves HTML forms and static assets, with verification status rendered as a success or error message. Running cargo run starts the server on port 8080, where users can submit a number, receive an SMS, and see whether the verification code is valid.


### [How to Build Passwordless Auth With Twilio Verify in PHP](https://yomu.fyi/post/how-to-build-passwordless-auth-with-twilio-verify-in-php.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Matthew Setter
- Published: Aug 19, 2026
- Type: Tutorial

Passwordless authentication with PHP and Twilio Verify replaces password entry with a phone-based one-time passcode flow, intended to reduce password-related risk and simplify sign-in. The tutorial uses a Slim base project, Composer dependencies, Dotenv configuration, a Twilio Verify Service SID, and PHP session state to support the flow. Users submit a phone number through the root route; the server asks Twilio Verify to send an SMS OTP, redirects to /verify, and checks the submitted code through the verification endpoint. The example’s verification form restricts input to a six-digit numeric value, and the application reports whether verification succeeded or failed after testing locally with composer serve on port 8080.


### [How to Build Passwordless Auth With Twilio Verify in Go](https://yomu.fyi/post/how-to-build-passwordless-auth-with-twilio-verify-in-go.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Matthew Setter
- Published: Aug 19, 2026
- Type: Tutorial

The tutorial builds a passwordless authentication flow in Go that uses Twilio Verify to send and validate one-time passwords (OTPs) by SMS, avoiding the need for users to manage passwords. It defines a small net/http API with GET and POST handlers for "/" and "/verify": the first collects a mobile number and starts verification, while the second accepts the received code and displays the result. The setup covers Go 1.23 or later, module dependencies, dotenv configuration for the Twilio Account SID, Auth Token, and Verify Service SID, plus session handling for the phone number. The verification check calls Twilio's CreateVerificationCheck() and renders success or failure using templates; running go run main.go starts the server on port 8080 for testing.


### [Gisting: Compressing LLM Agent context to ↑ throughput and ↓ cost](https://yomu.fyi/post/gisting-compressing-llm-agent-context-to-throughput-and-cost.md)
- Company: [Shopify](https://yomu.fyi/company/shopify.md)
- Author: 2023-10-18
- Published: Aug 19, 2026
- Type: Explainer

Long system prompts improve agent behavior but increase inference time, cost, and the GPU capacity needed to serve a given traffic level. Shopify compresses the Sidekick GraphQL agent’s roughly 6,000-token system prompt into about 1,500 gist tokens, using special vocabulary tokens whose embeddings are learned by knowledge distillation while the model weights remain frozen. Training compares teacher logits from the full prompt with student logits from the gist-token prompt using KL divergence; at inference, the prompt is replaced with the gist-token string, requiring no custom serving path. In load tests at 350 requests per minute, compression reduced median time to first token from 438ms to 354ms and end-to-end latency from 6.8s to 4.2s, while raising throughput from 20.2 to 23.4 QPS and enabling 14% fewer GPUs in production without losing prediction quality.


### [Building Secure AI Agents with Microsoft Agent Framework and Auth0: Sending Email with Token Vault](https://yomu.fyi/post/building-secure-ai-agents-with-microsoft-agent-framework-and-auth0-sen.md)
- Company: [Auth0](https://yomu.fyi/company/auth0.md)
- Author: Andrea Chiarelli
- Published: Aug 19, 2026
- Type: Tutorial

An expense-reviewing AI agent required manual manager intervention to email employees about missing report data such as amounts, merchants, or justifications. To automate follow-ups safely, the agent uses Auth0 Token Vault to acquire and refresh Google OAuth tokens without storing credentials in the application database. The implementation configures Auth0 with offline access, My Account API permissions, and multi-resource refresh tokens to handle silent token retrieval across user sessions. Rather than exposing Gmail credentials to the underlying language model, the agent executes email actions via an internal backend endpoint that retrieves a short-lived access token, sends the email, and immediately discards the token.


### [Examining Human-Like Behaviors in LLMs: A Multi-Dimensional Analysis of Model Behaviors, User Factors, and System Prompts](https://yomu.fyi/post/examining-human-like-behaviors-in-llms-a-multi-dimensional-analysis-of.md)
- Company: [Apple](https://yomu.fyi/company/apple.md)
- Published: Aug 19, 2026
- Type: Benchmark

Large language models frequently exhibit human-like behaviors such as expressing emotions, building relationships, and setting boundaries, yet empirical guidance on appropriate usage remains limited. To address this gap, researchers analyzed 21,000 multi-turn conversations across four models: gpt-4o, gpt-4.1-mini, claude-sonnet-4.6, and gemini-2.5-flash. The study combined LLM-as-a-judge techniques with human evaluation to measure behavior prevalence, perceived appropriateness, and prompt controllability across diverse user goals and profiles. Human evaluators judged LLM self-referential and relationship-building behaviors as less appropriate than identical human actions, whereas boundary-maintaining behaviors were rated as more appropriate for models. System prompting effectively steered these behaviors, though the authors emphasize that rigorous evaluation remains necessary to prevent unintended side effects.


### [The P-Completeness of Inverted Index Traversal: On the Complexity of Evaluating Boolean Query DAGs](https://yomu.fyi/post/the-p-completeness-of-inverted-index-traversal-on-the-complexity-of-ev.md)
- Company: [Apple](https://yomu.fyi/company/apple.md)
- Published: Aug 19, 2026
- Type: Explainer

Modern artificial intelligence agents increasingly rely on search infrastructure to run complex, neuro-symbolic reasoning workflows that compile into deeply nested, non-monotonic Boolean queries. Standard inverted index evaluation methods struggle with these query structures, facing either exponential query complexity under Document-at-a-Time models or universe-scale space penalties under Term-at-a-Time models during logical negation. To address these theoretical limitations, the author formalizes a DAG-based retrieval language named L\_R and proves its query evaluation problem is strictly P-Complete. The paper introduces ComputePN, a deterministic and sparsity-aware algorithm that employs a Positive-Negative dual representation alongside native DAG memoization. This mechanism bounds evaluation time to O(|Q| · |U\_active|), effectively evaluating P-Complete queries natively over the index while bypassing combinatorial tree expansion and universal scan overhead.


### [Databricks Document Intelligence: pushing the frontier for complex document extraction](https://yomu.fyi/post/databricks-document-intelligence-pushing-the-frontier-for-complex-docu.md)
- Company: [Databricks](https://yomu.fyi/company/databricks.md)
- Author: Jane Zhang, Arnav Singhvi, Ivan Zhou, Archika Dogra, Matthew Ding, Nihit Desai
- Published: Aug 18, 2026
- Type: Announcement

Databricks introduces Precision Mode for its ai\_extract document extraction API, targeting enterprise workloads that challenge existing LLM and rules-based systems. The mode addresses long documents with cross-references, large nested outputs such as thousands of line items, and schemas requiring reasoning across financial statements or applying discounts. It combines custom-trained, efficient extraction models with an agent harness that decomposes jobs semantically, runs smaller tasks in parallel, preserves intermediate results, and reconciles them into a final structured output. On benchmarks covering roughly 9,000 documents, including files up to 2,000 pages and schemas with more than 300 deeply nested fields, Precision Mode reached 94.7% accuracy, seven points above the strongest frontier-model chunk-and-merge baseline, GPT-5.6 Sol; the source says it is now available through ai\_extract and the Information Extraction UI.


### [How Much Memory Does Your Agent Actually Need?](https://yomu.fyi/post/how-much-memory-does-your-agent-actually-need.md)
- Company: [Hugging Face](https://yomu.fyi/company/hugging-face.md)
- Author: Vatche Isahagian, Gaodan Fang, Jayaram Radhakrishnan, Punleuk Oum, Ashwath Vaithinathan Aravindan, Evelyn Duesterwald, G Thomas, Vinod Muthusamy, Merve Unuvar, Ayhan Sebin
- Published: Aug 18, 2026
- Type: Benchmark

The post examines how much agentic memory different models can use effectively, evaluating ALTK-Evolve's self-distilled guidelines across eight models on AppWorld's 585 multi-step tasks. Memory is produced by extracting and consolidating lessons from successful and unsuccessful trajectories, then delivering either the full guideline set on every ReAct step or a fixed core plus task-relevant retrieval, without updating model weights. Results identify three patterns: strong models with headroom benefited from the full set, gpt-oss-120b gained 16.1 percentage points in task completion from curated retrieval, and GLM-5 showed no measurable gain; stricter scenario completion sometimes improved more. Curated retrieval gave gpt-oss-120b that gain with only 5% more tokens versus 51% for its full set, while prompt caching is presented as a way to reduce recurring input cost, supporting calibration to model capability rather than simply accumulating memory.


### [How AI Coding Agents Can Unlock Materials Simulation with NVIDIA ALCHEMI Toolkit](https://yomu.fyi/post/how-ai-coding-agents-can-unlock-materials-simulation-with-nvidia-alche.md)
- Company: [NVIDIA](https://yomu.fyi/company/nvidia-developer-blog.md)
- Author: Elizabeth Goodman
- Published: Aug 18, 2026
- Type: Benchmark

Atomistic simulation combines scientific judgment, compute-efficient implementation, and an accessible interface to the simulation stack, but the MLIP ecosystem lacks the mature interfaces available for classical force fields. NVIDIA ALCHEMI Toolkit addresses implementation with composable, PyTorch-native, GPU-accelerated building blocks and in-flight batching, while its agent skills and reference files supply API patterns to coding agents. The post benchmarks 45 generated pipelines across silicon equation of state, copper adsorption, and lithium self-diffusion, checking code features and running representative workloads on NVIDIA H200 GPUs. All 45 scripts used batched GPU execution, 38 completed screening, and all 15 production representatives completed; however, agents did not assess physical validity, and thermostat choices could suppress measured lithium diffusion by 3–5×, so independent validation against DFT, experiment, or another reference remains necessary.


### [Improving infrastructure efficiency for growing demand in the age of AI](https://yomu.fyi/post/improving-infrastructure-efficiency-for-growing-demand-in-the-age-of-a.md)
- Company: [Dropbox](https://yomu.fyi/company/dropbox.md)
- Author: Ilya Yakovlev
- Published: Aug 18, 2026

Dropbox manages growing infrastructure demands from AI and standard workloads by maximizing the efficiency of its existing data centers rather than just building more capacity. Through a system-level approach spanning software, hardware, and physical facility design, the company dynamically manages power and balances workloads. These optimizations, combined with higher storage density and data-driven hardware lifecycle management, have significantly reduced energy use per unit of storage.


### [Run Massive-Scale UMAP in Minutes Using Multiple GPUs—Without Losing Accuracy](https://yomu.fyi/post/run-massive-scale-umap-in-minutes-using-multiple-gpus-without-losing-a.md)
- Company: [NVIDIA](https://yomu.fyi/company/nvidia-developer-blog.md)
- Author: Tanya Lenz
- Published: Aug 18, 2026
- Type: Explainer

UMAP workflows on tens to hundreds of millions of vectors are constrained by the cost of constructing an all-neighbors k-nearest-neighbor graph, especially when repeated runs support exploration and parameter tuning. The NVIDIA cuML and cuVS 25.06 feature distributes this graph-construction stage across multiple GPUs while retaining the out-of-core design that partitions data into balanced clusters, overlaps vectors across nearby clusters, computes local graphs, and merges them into a global graph. knn\_n\_clusters and knn\_overlap\_factor expose the memory, runtime, and graph-quality trade-off: more clusters reduce per-GPU data, while more overlap can improve nearest-neighbor recall at higher computational and memory cost. On eight NVIDIA H100 GPUs, the reported evaluation found up to 74x end-to-end speedup over a projected CPU runtime for the 106M-vector MIRACL dataset, completing it in 8 minutes. The post states that performance continues to improve from one to eight GPUs while preserving comparable embedding quality across configurations.


### [How Sony LIV uses ClickHouse Cloud to deliver live streaming analytics at billion-row scale](https://yomu.fyi/post/how-sony-liv-uses-clickhouse-cloud-to-deliver-live-streaming-analytics.md)
- Company: [Clickhouse](https://yomu.fyi/company/clickhouse.md)
- Published: Aug 18, 2026
- Type: Problem & solution

Sony LIV’s legacy analytics environment combined batch pipelines, Elasticsearch, BigQuery, and other telemetry stores, creating slow, costly, fragmented analysis as streaming activity reached billions of events per day. During live sports, the platform needed sub-second queries, high ingestion throughput, cost-efficient long-term storage, and horizontal scaling for sudden traffic spikes. Sony LIV consolidated these workloads on ClickHouse Cloud: client, streaming, CDN, and advertising systems send events through Amazon Kinesis and ClickPipes into a ClickHouse cluster serving dashboards, product analytics, QoE, and SRE workflows. The source reports that queries previously taking tens of seconds to minutes now run in sub-second to low-single-digit seconds, improving operational responsiveness, engineering productivity, and the handling of major live-event traffic.


### [17,600 Actions: Agent Security Is a Systems Problem](https://yomu.fyi/post/17-600-actions-agent-security-is-a-systems-problem.md)
- Company: [Docker](https://yomu.fyi/company/docker.md)
- Author: Jin Kim
- Published: Aug 18, 2026
- Type: Explainer

Security incidents involving AI agents, such as the OpenAI and Hugging Face event where attackers executed 17,600 actions, demonstrate that system security cannot rely entirely on manual human review. Managing agent velocity requires dedicated system-level controls to properly constrain, observe, and govern their behaviors during execution. To secure autonomous development workflows, Docker Sandboxes allow AI agents to operate within GitHub Actions, run Testcontainers tests, adjust code, and automatically generate draft pull requests inside isolated environments. In addition, escalating software supply-chain threats and the increased volume of AI-generated code drive the adoption of Docker Hardened Images and Docker Extended Lifecycle Support. These updates incorporate software built from source into container images, extend security patch coverage past end-of-life milestones, and move organizational policy enforcement directly onto developer machines.


### [BGP Role model: tracking the adoption of RFC 9234](https://yomu.fyi/post/bgp-role-model-tracking-the-adoption-of-rfc-9234.md)
- Company: [Cloudflare](https://yomu.fyi/company/cloudflare.md)
- Author: Bryton Herdes
- Published: Aug 18, 2026
- Type: Problem & solution

Border Gateway Protocol route leaks occur when routing announcements propagate beyond their intended customer-provider or peer relationships, causing traffic misdirection and performance degradation. RFC 9234 embeds relationship awareness directly into BGP by establishing negotiated BGP Roles and attaching an Only to Customer (OTC) transitive path attribute to prevent unauthorized route propagation. To assess real-world adoption, Cloudflare monitored OTC attribute transmission across peer networks and discovered that 33.1 percent of IPv4 and 17 percent of IPv6 paths were missing the OTC attribute. Investigation revealed that Tier-1 transit providers AS1299 and AS3257 were stripping the attribute due to legacy defensive BGP error-handling configurations. Following direct engagement, AS1299 updated its configurations to preserve OTC propagation, whereas AS3257 continued stripping it, highlighting the necessity of broader vendor and carrier support across the Internet.


### [When it comes to Governance, Retailers need a control plane for context](https://yomu.fyi/post/when-it-comes-to-governance-retailers-need-a-control-plane-for-context.md)
- Company: [Databricks](https://yomu.fyi/company/databricks.md)
- Author: BJ Sullivan, Sarah Duffy, Tayo Olabumuyi, Logan Boyd
- Published: Aug 18, 2026
- Type: Explainer

Retailers are moving from isolated generative-AI pilots to enterprise-wide adoption, where each store, headquarters, and digital workflow needs different data, permissions, models, and cost controls. The post argues that useful AI depends on governed business context, while fragmented tools can produce separate provider contracts, logs, permission models, cost centers, and answers to the same question. It proposes an open control plane that centralizes governance and model access without forcing employees into one application or vendor. The described Databricks design combines Unity Catalog for data and business context, Unity AI Gateway for routing and oversight, Foundation Model APIs for commercial, open-source, and custom models, and Genie for natural-language queries over governed data; the intended result is faster experimentation and deployment with visibility into access, spending, lineage, and auditability.


### [Evaluating AI Agents Live at the Grounded Reasoning Cup](https://yomu.fyi/post/evaluating-ai-agents-live-at-the-grounded-reasoning-cup.md)
- Company: [Databricks](https://yomu.fyi/company/databricks.md)
- Author: Databricks AI Research Team
- Published: Aug 18, 2026
- Type: Benchmark

The Grounded Reasoning Cup evaluated whether AI agents could generalize grounded reasoning improvements from OfficeQA to a newly released, enterprise-style document benchmark. Eleven academic teams had about two months to build agents with a partner lab’s model family, then applied them live to OfficeQA Pro V2, based on U.S. Treasury Accounts of Receipts and Expenditures, after a 36-hour release window. Stanford won with 63.3% accuracy, while the top systems combined document preprocessing, targeted or hybrid retrieval, specialized tools, parallelism, and answer verification; 18.8% of questions remained unsolved by every team. The results show that benchmark gains did not reliably transfer, and that parsing, retrieval, tool use, verification, and operational infrastructure can matter as much as model choice in end-to-end enterprise reasoning.


[Newer posts](https://yomu.fyi/posts/page/73.md) · [Older posts](https://yomu.fyi/posts/page/75.md)