Loading…
Browse by type
Announcement reads
Announcement posts on Yomu, summarised newest first.
- 1,514 posts
- 20 companies
The Good Stuff
Paid picks we use ourselves. Links carry a referral code — a subscription through one earns us a commission at no extra cost to you.
Announcement posts
Origin Code Hosting
Cursor is rolling out Origin, an early-beta code-hosting service for all paid plans, except enterprise organizations whose admins opt out, with repositories, pull requests, code browsing, and GitHub synchronization. Origin-hosted repositories treat Origin as the source of truth: users push through the CLI, while GitHub is not involved; GitHub-synced repositories instead keep GitHub authoritative and mirror changes to Origin in real time. Each repository includes pull-request timelines, commits, checks, file diffs, comments, reviews, and merging, with synced pull requests updating between Cursor and GitHub within seconds. Cursor also places agents alongside code and PRs, allowing them to answer questions, make changes, update pull requests, or push branches, while Vercel, Depot, and Buildkite integrations add preview deployments and CI options.
Auth0 Learning: The New Skill-Building Platform for Developers
Following the February 2025 launch of Okta Learning, user feedback revealed that mixing Auth0 materials into the shared catalog created friction, buried relevant content, and obscured certification progression. In response, Auth0 launched Auth0 Learning, a dedicated platform tailored specifically to developer workflows. The restructured catalog focuses on three distinct product domains: Auth0 as an identity provider, Auth0 for AI Agents (A4AA), and Auth0 Fine-Grained Authorization (FGA). To reduce onboarding friction, developers can access and interact with free, on-demand courses without creating an account or logging in. Users who choose to authenticate gain access to redesigned learning paths that track individual progress and award shareable digital skill badges upon completion.
Introducing Husker Share, the University of Nebraska-Lincoln’s latest program with Uber
The University of Nebraska-Lincoln (UNL) has partnered with Uber to launch Husker Share, a campus-exclusive shared-rides program for students, faculty, and staff. Powered by Uber’s Closed Loop Share feature, the program matches verified UNL riders traveling in the same direction, supports sharing with up to two other riders, and limits each booking to one person. Eligible riders can save up to 20% on standard UberX fares, while the first 10,000 people to enroll receive $5 off their first trip. Enrollment requires an Uber account, the Uber app, and UNL credential verification; once approved, the option appears in the app, with trips required to start and end inside the designated service zone.
Announcing support for ClickStack in the ClickHouse Terraform provider
The ClickHouse Terraform provider now supports managing ClickStack resources for both self-hosted deployments and ClickHouse Cloud. Dashboards, alerts, sources, saved searches, connections, and webhooks can be kept in version control, reviewed, and applied with the standard terraform plan and terraform apply workflow, helping keep configurations aligned across environments. ClickStack is implemented as a dedicated service module in the existing ClickHouse/clickhouse provider, using Cloud organization credentials plus a service ID for Managed ClickStack, or an endpoint and personal API access key for self-hosted deployments. The work also extends the API contract with named schemas, consistent integer fields, structured validation errors, and dashboard JSON validation during planning when the validation endpoint is available. Support is beta from provider version 3.25, with import and generated-configuration workflows for existing resources; if validation is unavailable, planning warns and validation is deferred to apply.
How Cloudflare detects MCP traffic and helps secure it
Traditional security boundaries assume human speed and judgment, but AI agents execute nondeterministic actions rapidly and can invoke unapproved Model Context Protocol servers through standard HTTPS traffic. To mitigate this shadow traffic, Cloudflare One introduces detection and inspection capabilities across clients, network boundaries, and MCP servers. Cloudflare Gateway leverages protocol-level headers and JSON-RPC inspection to identify direct MCP connections, verify managed paths, and enforce access through approved MCP Server Portals. Furthermore, Cloudflare Agents SDK v0.20.0 implements the stateless 2026-07-28 MCP specification while providing fallback handshakes for legacy servers. Organizations can combine Gateway traffic source rules with server middleware like WriteGuard to block unauthorized tool invocations before execution.
Secure all your internal vibe-coded applications — in one click
AI-assisted development enables employees to build applications rapidly, but unmanaged deployments can accidentally expose internal company data to the public Internet. Cloudflare introduced direct Cloudflare Access integration for Cloudflare Workers, allowing organizations to enforce authentication policies directly at the account or individual Worker level rather than per hostname. When enabled, incoming requests are authenticated before reaching application code across custom domains, routes, workers.dev subdomains, and preview environments. Developers can access authenticated identity data such as emails and groups directly via the Worker context object without manually validating JSON Web Tokens. This capability was implemented on Cloudflare's Rust-based FL2 proxy, which separated Worker routing from Worker execution so routing runs safely prior to Access policy enforcement.
Close the Database Blind Spot with MongoDB Atlas Observability
MongoDB Atlas introduces OpenTelemetry Metrics Sink, a push-based stream that delivers high-fidelity Atlas metrics to OpenTelemetry-compatible platforms, enabling database telemetry to flow alongside application and infrastructure metrics. This closes the gap where database telemetry was often disconnected from application and infrastructure monitoring, forcing operators to jump between dashboards. The push-based delivery eliminates the complexity of pull-based collection, custom exporters, and polling infrastructure, reducing operational overhead and avoiding API rate limits. It supports configuration via the Atlas UI or Terraform, works with custom OTel endpoints, Dynatrace, and New Relic, and is available for dedicated M10+ clusters; a test metric is emitted on creation or update to verify it is working. Combined with Atlas Log Integration and upcoming Events Integration, teams gain unified visibility into database health alongside other signals, accelerating incident response and root cause analysis.
Firetiger joins Cursor
Cursor announced that the Firetiger team is joining the company, bringing together coding agents with agents focused on software after it reaches production. Founded in 2024 by Rustam Lalkaka and Achille Roussel, Firetiger builds agents that monitor rollouts, catch regressions, investigate incidents, and pass findings back to coding agents. The stated motivation is to reduce operational toil and connect code generation with production feedback, so an agent can ship a change, observe its behavior, and respond when something goes wrong. Firetiger’s work is expected to appear across Cursor as the companies develop long-running, autonomous, context-aware agents for teams, alongside Cursor Origin and the forthcoming Change Monitors, which will watch deployed changes and flag problems as they appear.
Smart Routing in Unity AI Gateway: Match frontier quality with 30%+ lower cost per task
Unity AI Gateway’s Smart Routing, now in Beta, addresses the cost and choice overload of assigning coding tasks to increasingly diverse models and harnesses. It uses task-aware routing: a small, low-latency model classifies the initial task description and metadata, then a policy selects a cheaper, medium, or frontier model; Omnigent can also choose the coding harness and route sub-agents. The design keeps consecutive turns on one model to preserve cache-hit rates, while escalating complex work and delegating simpler tasks to lower-cost options. On internal coding workloads, Smart Routing achieved 35% savings and outperformed any single model at 65% of Opus 5’s cost; public benchmarks reported matched Opus 5 performance with 56% savings. The team identifies mid-session reassessment, real-session evaluation, and affordable switching as continuing challenges.
Announcing Evals and Releases: Evaluate Fin before, during, and after you go live
Fin’s new Evals and Releases provide an evaluation and rollout system for testing changes before launch, controlling deployment, and assessing live conversations, alongside Monitors. Evals group multi-turn Simulations built from real conversations around a theme, then score them pass/fail using deterministic checks and an LLM judge against criteria such as required responses, Procedures, or data connector calls. Releases let teams edit content, Procedures, and Guidance away from live Fin, run Evals on proposed changes, collaborate, and publish to everyone, ramp traffic, A/B test, or roll back. Monitors evaluates every live conversation and can turn failures into new Simulations for subsequent testing. The combined workflow addresses probabilistic behavior, regression risk, and drift as support content and policies change, while Operator can draft changes, tests, and Releases for review and approval.
What’s new in the ClickHouse Grafana plugin
ClickHouse’s Grafana plugin has shipped a set of changes aimed at making common observability tasks—finding log lines, narrowing to services, and detecting deployments—faster without requiring SQL. Version 4.20 adds single-table configuration and compact query mode, where users search logs, apply type-aware filters, review query history, and see or edit generated ClickHouse SQL. Investigation can proceed by clicking through collapsible OpenTelemetry Resource, Scope, and Log attributes, filtering values or selected message text, while dashboards can discover Map keys and values across tables. The release also includes interactive Logs Explorer, Traces Explorer, and per-service OpenTelemetry dashboards, plus guided variable and annotation editors that generate editable SQL for distinct values and change markers such as deployments and rollbacks. Additional changes cover schema-introspection caching, trace-ID lookup, Grafana 13 compatibility, SQL validation, backend OpenTelemetry instrumentation, and forwarding Grafana identity to ClickHouse; compact mode initially remains limited to single-table data sources.
ClickStack and Hud bring runtime intelligence to AI-powered development
ClickHouse and Hud announce an integration that combines ClickStack’s service-level observability with Hud’s function-level runtime forensics for AI-assisted software development. As coding agents generate more code, the post identifies the central challenge as assessing production risk, detecting regressions, and giving engineers enough context to fix them. Teams connect the ClickStack and Hud MCP servers to a single coding agent, while shared trace IDs correlate OpenTelemetry traces and logs with Hud’s function-level metrics and forensic data; Hud’s Runtime Code Sensor requires no manual instrumentation and runs with low overhead in production. The resulting workflows support pre-deployment risk assessment against production behavior, release monitoring, auto-triage and auto-fix, and rollback or code-level remediation when issues arise.
Cloud agents start 3x faster with builds
Cursor introduces builds for Cloud Agents, continuously prepared copies of development environments that replace just-in-time machine boot, repository cloning, dependency installation, and install-script execution. Builds run by default every hour; successful builds become the starting point for future agents, which fork warm live machines rather than restoring environments from disk. The post reports 10x faster internal environment boot times and 3x faster time to first token, while customers cite quick starts and uninterrupted automated runs when builds fail. If a dependency bump or Docker build breaks installation, the failed build stays inactive and sessions continue from the last successful version while debugging proceeds. The Cloud Agents dashboard exposes build status, logs, captured commit SHAs, and run-to-build links, while a git-state threshold and Cursor Cloud MCP support oversight; setup requires moving preparable work into install and reserving fresh services for start.
Cursor earns AIUC-1 certification for agent security and reliability
Cursor announces that it has earned AIUC-1 certification after an independent review of its organizational controls and agent behavior. AIUC-1 combines an organizational-controls audit with adversarial product testing, translating the NIST AI Risk Management Framework, MITRE ATLAS, and OWASP’s agentic threat taxonomy into requirements for live AI systems. Schellman reviewed documented controls and AI governance practices, while evaluators tested IDE and cloud agents in a representative enterprise configuration across several thousand scenarios and two rounds. Testing covered rules, hooks, Auto-review, model-level safeguards, secrets protection, secure code generation, MCP security, identity and permissions, and potentially destructive actions. Cursor says its safeguards held in benign and adversarial conditions, with certification requiring quarterly testing and an annual full audit as AIUC-1 evolves.
MongoDB for the Agentic Era: Built for Developers and AI Agents
MongoDB has launched the Atlas Managed MCP Server, a fully hosted service that lets AI coding tools connect to Atlas data without manual infrastructure setup. The server uses OAuth 2.1 to replace shared service accounts with individual user delegation, so agents act with the developer’s own permissions and every action is auditable. Developers can connect via one-click OAuth consent in tools like Claude Code, Codex, Cursor, Grok Build, and Devin AI, with no connection strings or credentials to manage. Admins can enforce read-only mode, configure token lifetimes, and revoke access from the Atlas UI or Admin API. The announcement also includes Atlas App Connections, native connectors for frontier AI tools, and an integration with Vercel v0, aiming to close the gap between prototype and production.
Closing the Gap Between Agentic Promise and Impact with Industry Leading Retrieval
McKinsey projects AI agents will generate $2.9 trillion annually; a WRITER survey finds 97% of executives have deployed agents, yet only 29% see significant ROI due to data accuracy issues. MongoDB announced capabilities embedding benchmark-leading retrieval directly into its operational database, closing the gap between agentic promise and impact. Automated Embedding in MongoDB Atlas powered by Voyage AI, now GA, uses the top-ranked Voyage 4 model family for accurate retrieval without separate pipelines, as demonstrated by MedINT. The Atlas Embedding and Reranking API and voyage-code-4 model, designed for agentic coding retrieval, extend accurate retrieval to any stack and coding agent workloads at low cost. $vectorSearch in Atlas Stream Processing enables agents to retrieve accurate data in motion, and a joint MongoDB-Temporal reference architecture provides a forkable starting point for durable execution on live data.
Cloud Agents Start 3x Faster with Builds
Cursor’s Cloud Agents now use Builds, ready-to-use copies of a development environment prepared in the background. These environments include cloned repositories, installed dependencies, and completed install commands, allowing agents to start without repeating setup each session. Cursor refreshes environments regularly, keeps warm copies, and activates only successful builds; internally, environments boot 10x faster and time to first token is 3x faster. If a commit or dependency update breaks a build, the last successful build remains active, while users receive a notification and can debug in the background. Builds can be inspected in the Cloud Agents dashboard, where logs, commit SHAs, statuses, and agent run associations are available, with tools for agents to inspect or manage them.
Introducing Credentio: Open Source C++ Library for C2PA Content Credentials from Google
Google introduces Credentio, an open-source C++ library for local validation of C2PA Content Credentials, initially supporting specification versions 2.2 and 2.4. The library is the code used by nearly 40 conformant C2PA-enabled Google products to process tens of billions of generated images, videos, audio files, and documents across many formats. Its API keeps validation inside the developer’s application, avoiding media transmission while providing immediate verdicts, privacy, and zero bandwidth overhead; it is also designed to maintain a small memory footprint for assets ranging from images to multi-gigabyte videos. Credentio parses manifests, assertions, digital signatures, and claims, accepts official or custom trust lists, and reports verification statuses and integrity errors, while planned work includes generating and embedding Content Credentials.
Introducing OlmoEarth embeddings: Custom embedding exports from OlmoEarth Studio for downstream analysis
OlmoEarth Studio now supports custom computation and export of embedding vectors, compact representations of Earth-observation data generated by open-source OlmoEarth foundation models. Users can select an area, a one-to-twelve-month time span, an encoder variant, spatial resolution, and Sentinel-2 L2A or Sentinel-1 RTC imagery, then receive a Cloud-Optimized GeoTIFF with one int8 band per embedding dimension. The post demonstrates similarity search, few-shot segmentation, change detection, and PCA-based exploration; a logistic regression trained on 60 labeled pixels produced a weighted F1 of 0.84 for three land-cover classes in Ca Mau, Vietnam. Embeddings provide a fast, shareable starting point, while supervised fine-tuning can improve performance for applications needing task-specific results; cloud cover, atmospheric artifacts, and missing observations can affect quality.
How We’re Building Scam Alert on WhatsApp With End-to-End Encryption and Verifiability Guarantees
WhatsApp presents an early technical overview of Scam Alert, an optional feature that uses an on-device machine learning model to identify potential scam messages from non-contacts while keeping message content on the device. The warning appears only to the user, who can block, report, continue, or mark a chat trusted; reporting and sharing require explicit user action. To measure performance, the system sends locally aggregated warning and user action counts through confidential federated analytics using Trusted Execution Environments and differential privacy, rather than transmitting raw signals. Model versions are recorded on a public transparency ledger, while published weights, client-side logs, and an expanded Bug Bounty program support independent inspection of delivery and behavior.
Top topics
- Architecture834
- Performance816
- LLMs660
- Machine Learning622
- Open Source563
- AI Agents553
- AI470
- Developer Experience448
Weekly digest
The best engineering reads, once a week.