开发者工具

Plugin4Shell exposes a supply-chain gap: a pinned SHA records the expected version, but installers must also verify the actual HEAD after checkout.

Vercel Labs json-render defines components, actions, and data bindings before generating schema-constrained JSON that can be checked and replayed.

LangGraph human-approval schemas, Deep Agents safeguards for parallel writes to the same file, and tighter OAuth boundaries in the MCP Ruby SDK.

OpenAI Agents SDK runtime-boundary fixes, stage-aware memory retrieval in AdaRepair-Mem, and static configuration checks with Agent Lint.

Android Bench 2.0 keeps pass rate as a hard gate and adds completion rate to diagnose progress and unfinished acceptance requirements.

A study of 519 overseas job listings, 28 roles at major Chinese firms, and 6 projects examines FDE responsibilities, growth, costs, and scalability.

OpenCloak replaces names, emails, and other personal data with stable stand-ins locally, then restores them when the model responds.

AI agent engineering readings for September 18 to 19, 2026, with key findings, engineering implications, suggested sections, and primary sources.

Splash combines model packages, kernels, memory planning, and compatible local APIs into a model-specific inference stack for coding agents.

How Foreman separates a coding agent from supervision, using runtime evidence, Jev judgments, and deterministic policy to continue, verify, stop, or escalate.

Use Kitaru Replay, Evaluator, and Regression Suite to preserve production failures as repeatable agent tests, with tool policies and CI gates.

Skills Manager distributes a local skill library to Claude Code, Codex, Cursor, and Gemini CLI while managing version and configuration consistency.