Secret scanning now blocks Anthropic keys at push: closing the AI key gap
GitHub now blocks Anthropic API keys at push by default and is previewing AI-based secret detection. What changed, what is still preview, and what to do.
5 min read
Blog category
AI and development
Researched articles on AI coding tools, agents, MCP, LLM cost, governance and security, and engineering practice.
Sol, Sonnet 5.5 or Haiku 5.5: a practical coding model map
Three coding-relevant models landed within ten days. Rather than picking one default, map task types to model tiers and check vendor benchmarks with care.
Anthropic's Max and Team API credits: how they change agent experiments
Claude Max and Team plans now include monthly Claude Platform credits for building agents. What they cover, what they exclude, and what finance should track.
5 min read
Frontier coding models and cyber safeguards: public vs defender access
Gemini 4 Argon, Claude Sonnet 5.5 and GPT-6.1 Sol ship with cyber restrictions, and defender access is a separate track. How to tell which tier your team has.
5 min read
NVIDIA OpenShell and the case for agent controls outside the harness
NVIDIA's open-source OpenShell enforces agent policy outside the model and harness. What version 0.1.0 does, what is only a reference design, and what to copy.
5 min read
Copilot CLI now finds local Ollama models: what stays on the machine
GitHub Copilot CLI can discover models from a local Ollama instance. A local model is not offline mode, and telemetry and remote providers still need settings.
Claude Sonnet 5.5: faster mid-tier coding without a list-price rise
Sonnet 5.5 kept Sonnet 5's $2 and $10 token prices, then had its cache-read price halved. What that does to coding costs, and where Opus 5.5 still leads.
5 min read
Using the OWASP Top 10 for Agentic Applications as an engineering checklist
How to turn the ten OWASP agentic AI risks, from goal hijack to rogue agents, into concrete backlog items for a coding-agent rollout this quarter.
6 min read
Codex made GPT-6.1 Sol the default: what teams should change
Codex 0.161.0 switched its default model to GPT-6.1 Sol and made Daybreak cyber routing opt-in. What changed, what it costs, and what to pin in CI and config.
5 min read
Protocol pivoting: when MCP trust leaks into another agent protocol
Research on protocol pivoting shows how an injected instruction can cross from MCP into agent-to-agent delegation. Why per-protocol fixes miss it.
Gemini 4 Argon is generally available: price, limits and the 1 December change
Gemini 4 Argon launched on 13 October 2026 at an introductory API price that doubles on 1 December. What it costs, what Google claims, and what to plan for.
6 min read
SWE-Bench Pro Verified: when coding agents were reading the answers
SWE-Bench Pro Verified closes gold-patch leakage channels and refines 102 tasks. Some model scores fall sharply once agents can no longer fetch the solution.
4 min read
Browse by tag
- #Security (55)
- #Agents (41)
- #AI coding tools (38)
- #LLM costs (23)
- #MCP (16)
- #Evaluation (14)
- #Observability (12)
- #Compliance (11)
- #Enterprise (9)
- #Platform engineering (9)
- #Data privacy (8)
- #DevOps (7)
- #Model routing (7)
- #Open-weight models (7)
- #Research (7)
- #Tutorials (6)
- #Code review (4)
- #Developer productivity (4)
- #Guardrails (4)
- #Networking (4)
- #OpenTelemetry (4)
- #Budgets (3)
- #Prompt engineering (3)
- #Self-hosting (3)
- #MCP gateway (2)
- #Release notes (2)
- #Skills (1)
- #Testing (1)