Building better agents ๐, TanStack AI ๐ค, inside a Switch 2 jailbreak ๐ฎ
TLDR
TLDR Dev 2026-10-23
[Webinar] How to stop rewriting your agent's code (Sponsor)
Right now, you're your agent's context engine. You write the rules files, maintain the skills, and paste in the Slack thread it missed.
But hand-curated context goes stale. And when sources conflict, you still end up babysitting your agent.
Join us live on Oct 28 (FREE) to see:
Right now, you're your agent's context engine. You write the rules files, maintain the skills, and paste in the Slack thread it missed.
But hand-curated context goes stale. And when sources conflict, you still end up babysitting your agent.
Join us live on Oct 28 (FREE) to see:
- The 8 levels of AI maturity and where teams get stuck
- How leading teams use a context engine to curate context automatically
- Live demo: token savings on the same coding task, plus use cases beyond code generation
๐งโ๐ป
Articles & Tutorials
Building agents: When to fold subagents into your main agent loop (18 minute read)
Folding routers, planners, and domain specialists into a single agent loop can reduce lossy handoffs, cost, and latency when skills and tool search load context on demand. Anthropic describes migration patterns and evaluations for deciding which boundaries to remove. Separate agents still help with independent parallel work, verification, permission boundaries, and measurable context overload.
Folding routers, planners, and domain specialists into a single agent loop can reduce lossy handoffs, cost, and latency when skills and tool search load context on demand. Anthropic describes migration patterns and evaluations for deciding which boundaries to remove. Separate agents still help with independent parallel work, verification, permission boundaries, and measurable context overload.
Anthropic builds its own source control system (12 minute read)
Anthropic replaced Git in its monorepo with Scion as daily merges grew from about 2,500 to more than 30,000 and CI reached 25 million checkouts a day. Its Rust client and server store changesets in Spanner and blobs in Google Cloud Storage, with a separate review system replacing GitHub's workflow.
Anthropic replaced Git in its monorepo with Scion as daily merges grew from about 2,500 to more than 30,000 and CI reached 25 million checkouts a day. Its Rust client and server store changesets in Spanner and blobs in Google Cloud Storage, with a separate review system replacing GitHub's workflow.
We Built an AI Agent to Investigate Production Issues (10 minute read)
Stream's incident agent gathers logs, metrics, database results, and code references, then has a fresh session challenge its conclusions before posting findings. Read-only tools, isolated credentials, restricted networking, and output filters enforce its limits outside the prompt. Engineers approve every fix, while 22 evaluation cases test real incidents and past mistakes.
Stream's incident agent gathers logs, metrics, database results, and code references, then has a fresh session challenge its conclusions before posting findings. Read-only tools, isolated credentials, restricted networking, and output filters enforce its limits outside the prompt. Engineers approve every fix, while 22 evaluation cases test real incidents and past mistakes.
๐ง
Opinions & Advice
Is Your Organization Messing Up AI Adoption? (11 minute read)
AI adoption needs changes to incentives, working practices, and support alongside software licenses. Staff need role-specific training, time to experiment, and a reason to share in productivity gains without fearing punishment for mistakes. Shadow AI can reveal gaps in official tools that blanket restrictions only push out of sight.
AI adoption needs changes to incentives, working practices, and support alongside software licenses. Staff need role-specific training, time to experiment, and a reason to share in productivity gains without fearing punishment for mistakes. Shadow AI can reveal gaps in official tools that blanket restrictions only push out of sight.
Docker is weird (3 minute read)
Building a container runtime exposes Docker as a collection of Linux mechanisms, including namespaces, cgroups, and filesystem isolation around ordinary processes. This walkthrough explains why Go's multithreaded runtime complicates container setup and why rootless networking often requires extra work in userspace.
Building a container runtime exposes Docker as a collection of Linux mechanisms, including namespaces, cgroups, and filesystem isolation around ordinary processes. This walkthrough explains why Go's multithreaded runtime complicates container setup and why rootless networking often requires extra work in userspace.
Speeding up code review with small-change (5 minute read)
Imprint is testing a faster review path for narrowly scoped changes as rising PR volume pushes median review time from 33 to 77 minutes. Eligibility depends on a CI-controlled check covering change size, service experience, scope, and automated review findings, with shared libraries and sensitive paths excluded. Errors are treated as failures to improve in the verification system.
Imprint is testing a faster review path for narrowly scoped changes as rising PR volume pushes median review time from 33 to 77 minutes. Eligibility depends on a CI-controlled check covering change size, service experience, scope, and automated review findings, with shared libraries and sensitive paths excluded. Errors are treated as failures to improve in the verification system.
๐
Launches & Tools
Domains, hosting, and email. Built into your workflow. (Sponsor)
Deploy Node.js apps through GoDaddy's APIs or the gddy CLI. Then use the APIs to register domains, configure DNS, and set up professional email in one connected workflow.
Deploy Node.js apps through GoDaddy's APIs or the gddy CLI. Then use the APIs to register domains, configure DNS, and set up professional email in one connected workflow.
Access developer pricing on eligible domain registrations.
โ Explore the APIs
โ See domain pricing
TanStack AI 1.0: Still Your AI, Still Your Way (10 minute read)
TanStack AI brings 76 packages to stable APIs for chat, tools, media, MCP, persistence, and sandboxes while preserving provider and framework choice. Upgrade all client and server packages together and replace APIs deprecated in 0.x. The newly introduced agent harness remains experimental.
TanStack AI brings 76 packages to stable APIs for chat, tools, media, MCP, persistence, and sandboxes while preserving provider and framework choice. Upgrade all client and server packages together and replace APIs deprecated in 0.x. The newly introduced agent harness remains experimental.
Jailbreaking the Switch 2 (10 minute read)
ns2jb is a software-only, tethered jailbreak demonstrated on Switch 2 firmware 23.0.1. It enables native code execution for homebrew and game modifications.
ns2jb is a software-only, tethered jailbreak demonstrated on Switch 2 firmware 23.0.1. It enables native code execution for homebrew and game modifications.
NVIDIA OpenShell (GitHub Repo)
OpenShell runs agents in policy-controlled sandboxes with kernel-enforced file and network limits, credential injection, and formal checks on proposed access changes.
OpenShell runs agents in policy-controlled sandboxes with kernel-enforced file and network limits, credential injection, and formal checks on proposed access changes.
๐
Miscellaneous
LLMs are making formal software verification feasible at a much larger scale (15 minute read)
Claude produced machine-checked proofs for 239 fuzz-test entry points across 123 open-source libraries, turning existing tests into specifications over compiled RISC-V code. The guarantees cover inputs below 64 MB under a single-threaded Linux model with fixed memory limits, so they establish specific security properties rather than complete program correctness.
Claude produced machine-checked proofs for 239 fuzz-test entry points across 123 open-source libraries, turning existing tests into specifications over compiled RISC-V code. The guarantees cover inputs below 64 MB under a single-threaded Linux model with fixed memory limits, so they establish specific security properties rather than complete program correctness.
How we cut GitLab Duo Code Review's cost by 98% (11 minute read)
AI21 combined a switch to DeepSeek V4 Flash with context compaction to cut GitLab Duo Code Review's estimated token cost from $0.589 to $0.0135 per pull request on a public benchmark, with F1 rising from 46.4% to 47.2%. Compaction made oversized reviews fit the deployment's context window, removing expensive fallbacks to Sonnet.
AI21 combined a switch to DeepSeek V4 Flash with context compaction to cut GitLab Duo Code Review's estimated token cost from $0.589 to $0.0135 per pull request on a public benchmark, with F1 rising from 46.4% to 47.2%. Compaction made oversized reviews fit the deployment's context window, removing expensive fallbacks to Sonnet.
What the heck is the Public Suffix List? (21 minute read)
The Public Suffix List records the boundaries browsers and password managers need to distinguish independently controlled sites on shared domains. Its rules prevent cookies and saved credentials from crossing tenant boundaries, but growing demand leaves volunteers reviewing increasingly complex submissions. The article explains why DNS has not replaced the list and why using it for unrelated controls can create problems.
The Public Suffix List records the boundaries browsers and password managers need to distinguish independently controlled sites on shared domains. Its rules prevent cookies and saved credentials from crossing tenant boundaries, but growing demand leaves volunteers reviewing increasingly complex submissions. The article explains why DNS has not replaced the list and why using it for unrelated controls can create problems.
โก
Quick Links
Nearly 40% of AI-generated code never ships to production (Sponsor)
Developers estimated that only 61% of AI-generated code is released to production in a new survey. Read the report
Developers estimated that only 61% of AI-generated code is released to production in a new survey. Read the report
State of HTML 2026 (Website)
The State of HTML survey tracks awareness and use of native browser features.
The State of HTML survey tracks awareness and use of native browser features.
Pure UI in the Agentic Era (6 minute read)
Making a screen's relevant state explicit lets people and agents inspect combinations of roles, plans, billing states, and feature flags before merging a change.
Making a screen's relevant state explicit lets people and agents inspect combinations of roles, plans, billing states, and feature flags before merging a change.
Introducing 1Password for Agents (7 minute read)
1Password lets users approve sign-ins for supported agents and fills credentials into destination sites without exposing passwords to the model.
1Password lets users approve sign-ins for supported agents and fills credentials into destination sites without exposing passwords to the model.
TypeUI Micro Interactions (Website)
TypeUI offers 113 interactive examples for buttons, forms, modals, navigation, and other UI patterns.
TypeUI offers 113 interactive examples for buttons, forms, modals, navigation, and other UI patterns.
Love TLDR? Tell your friends and get rewards!
Share your referral link below with friends to get free TLDR swag!
Want to advertise in TLDR? ๐ฐ
If your company is interested in reaching an audience of web developers and engineering decision makers, you may want to advertise with us.
Want to work at TLDR? ๐ผ
Apply here, create your own role or send a friend's resume to [email protected] and get $1k if we hire them! TLDR is one of Inc.'s Best Bootstrapped businesses of 2025.
If you have any comments or feedback, just respond to this email!
Thanks for reading,
Priyam Mohanty, Jenny Xu
Thanks for reading,
Priyam Mohanty, Jenny Xu