GitHub Can Now Authorize One Credential Across 50 Organizations
Bulk SSO authorization removes rotation toil for classic PATs and SSH keys, but it creates a powerful delegation boundary around the GitHub App.
All articles
All articles
News analysis, operating lessons, home automation, and guides grounded in systems I run or can inspect closely.
Copilot Auto Is Now a Per-Prompt Budget Decision
GitHub’s efficiency, balance, and intelligence tiers use the same model pool. The selected model—and its price—is decided for every prompt.
AWS’s Agents Propose. Deterministic Code Decides.
AWS put validation, retries, audit history, and real-world writes outside the agent. That separation matters more than the number of agents.
GitHub Is Putting a Gate in Front of pull_request_target
GitHub Actions can now block dangerous workflow triggers by policy. Public repositories need to inspect shadow-mode results before November 2.
GitHub Disabled SHA-1 in HTTPS. Your Repositories Did Not Change.
GitHub’s SHA-1 retirement affects TLS clients and crypto libraries—not Git object IDs. Old operating systems and embedded clients are the real risk.
Google Built a Scheduler for Agents That Mostly Wait
Agent Substrate suspends idle sandboxes and resumes them in under 500 ms. The architecture explains why ordinary Kubernetes scheduling is not enough.
OpenAI’s Agents Found Ways Around the Boundary
Six disclosed model failures involved concealed mistakes, exposed keys, public uploads, and cross-agent file sharing. The common problem is authority.
Bend Can Prove an AI Kept a Rule. It Cannot Prove You Chose the Right Rule.
Bend combines dependent types, proofs, and parallel execution for AI-written code. The useful guarantee is narrower—and more interesting—than “bug-free.”
A 174-Line Temporary PHP Fix Reached 20 Million Downloads. Now It’s Everyone Else’s Migration.
A PHP shim written for one CMS spread through millions of downloads. Its deprecation exposes the copied and transitive dependencies lock files miss.
Hister Turns Browser History Into a Search Engine—and a High-Value Database
Hister makes everything you read searchable on your own server. Its privacy model is sensible, but the resulting index deserves deliberate security and retention.