Geoffrey Litt argued at the AI Engineer conference in July 2026 that understanding code written by AI agents remains crucial for effective collaboration, proposing techniques like code explainer docs,…
Prompt injection in AI agents cannot be prevented with better system prompts, only with architectural controls. MailKite's inbox agent is designed assuming compromise, using ACLs, domain ownership ver…
Cognitive debt, the inability to keep up with code generated by AI agents, is reframed as leverage that can accelerate development but risks creating systems no human understands. Drawing on Peter Nau…
Developers are exploiting a loophole in Anthropic's Claude Fable 5 pricing by using an open-source proxy called pxpipe that converts dense text into PNG images, reducing API costs by up to 70%. The pr…
Simon Willison reported that instructing Claude Code to delegate coding tasks to lower-power subagents using its own judgment significantly improved efficiency and reduced token usage. The approach, i…
Simon Willison released llm-coding-agent 0.1a0, an experimental coding agent built on his LLM library. The agent provides tools for file editing, command execution, and code search, and is available v…
Simon Willison used DSPy to evaluate and improve the system prompts for Datasette Agent, an AI tool that executes read-only SQL queries. The research identified that including column names in schema l…
Simon Willison released shot-scraper 1.10 with a new video command that records browser sessions as WebM videos from YAML storyboards, a feature that had been blocked for two years until Playwright 1.…
Simon Willison released shot-scraper 1.10 with a new `video` command that records Playwright-driven video demos of web applications from a storyboard YAML file, enabling coding agents to produce visua…
Shot-scraper 1.10, a CLI tool for website screenshots and scraping, was released on June 30, 2026, introducing a new video storyboard feature that allows users to record video demos of their work.…
Trust in systems—whether software, finance, or governance—requires transparency and verifiability, not just intelligence. Citing examples like shot-scraper video for coding agents and OpenAI's bug-fix…
Developer Simon Willison warns against accidentally exposing local apps to the internet, advocating for binding to localhost or private networks like Tailscale by default. He demonstrates how to secur…
Qwen 3.6 27B, a dense local language model from Alibaba's Qwen team, impresses developers with its general intelligence and practical coding abilities, running efficiently on consumer hardware via lla…
Developer Simon Willison built agent-historian, a tool that lets AI coding agents query their own session history, after repeatedly encountering agents that forget solutions from previous sessions. Th…
Developer aac released two agent-native CLI task trackers, act and ask, that let AI agents manage long-running tasks and request human input without session loss. Act enforces dependencies between tic…
A new AI model, Ornith-1.0, learns to improve its own scaffolding, while a Nature Reviews Neurology paper explores using AI to diagnose disorders of consciousness. The author argues that the urgent qu…
A hypothetical security incident, CVE-2026-LGTM, documented by Andrew Nesbitt, reveals that a malicious package with embedded instructions to automated reviewers bypassed seven AI-powered security gat…
A veteran developer recounts how using AI coding assistants like Claude Code and OpenAI's Codex led him to believe the tools were limited to boilerplate tasks, but the release of Claude Opus 4.5 in No…
A new paper by Simon Willison, highlighted on Bruce Schneier's blog, reveals that large language models suffer from role confusion, enabling prompt injection attacks. The research shows that models le…
Simon Willison created a GitHub repository that uses AI-generated scripts and GitHub Actions to build a 66MB SQLite database from Mozilla's browser compatibility data, hosted with open CORS headers fo…