Latest · September 18, 2026
Cloudflare open-sourced the skill behind its vulnerability harness. Its best idea is keeping discovery, verification, and trusted output separate.
Read the storyInfrastructure and operations
The release note says what shipped. These are the dependencies, costs, and failure modes it leaves for the operator.
Six disclosed model failures involved concealed mistakes, exposed keys, public uploads, and cross-agent file sharing. The common problem is authority.
GitHub Actions can now block dangerous workflow triggers by policy. Public repositories need to inspect shadow-mode results before November 2.
Agent Substrate suspends idle sandboxes and resumes them in under 500 ms. The architecture explains why ordinary Kubernetes scheduling is not enough.
GitHub Actions will migrate ubuntu-latest from 24.04 to 26.04 between October 19 and November 19. Unpinned tool assumptions are the real dependency.
Home automation
Wiring, recovery, local control, and what I would buy after living with the hardware.
A safe restore procedure for Home Assistant YAML: compare repository and live state, checkpoint both, merge forward, validate, restart, and verify behavior.
PD-6WCL, PD-8ANS, and PD-FSQN do not have the same wiring requirements. Here is the neutral-wire split across the 23 Caséta controls installed here.
I use Caséta for permanent lighting. A Matter bulb only makes sense to me in a continuously powered lamp, and I have not verified an exact bulb to recommend.
Room cleaning works locally through Matter, but room identifiers, error handling, charging data, and battery reporting still need careful treatment.
Practical guides
Deployments, schedules, remote access, and recovery procedures you can reuse without inheriting my exact setup.
Container health does not prove reachability, supported topology, persistent state, client continuity, backup, or rollback.
Use an atomic lock, meaningful exit status, observable duration, and explicit host ownership when scheduled work takes longer than its interval.
I deploy this WordPress site with narrow PHP migrations, pre-write checkpoints, plugin backups, and public regression checks—not a stale universal publisher.
How SSH dynamic forwarding works, where its encryption ends, how to verify the route, and when a real VPN is the better answer.
Calculators
Power, payback, and always-on costs. The arithmetic stays in your browser.
