Security
NVD to CNAs: Why Distributed CVE Assignment Breaks Triage
CVEs are no longer stable units of work. Federated CNA assignment produces conflicting CVSS scores and self-divergence, pushing reconciliation to SBOM and triage pipelines.
The Groundy archive · Page 13 of 34
All articles
Browse Groundy's complete archive of 798 articles on AI, developer tools and infrastructure. Page 13 of 34.
The archive
289–312 of 798 articles · Newest first
- Security
CVE-to-CWE Mapping With BERT: Multi-Label vs Multi-Class Error Tradeoffs
A 2026 arXiv paper shows multi-class and multi-label BERT both map CVEs to CWEs, but the taxonomy, not the encoder, shapes the misclassifications that security tools inherit.
- Agents & Frameworks
AgentTether Repairs LLM Agent Failures with a Runtime Graph
AgentTether models agent runs as a directed graph, detects drift, and steers execution back without retraining. On tau-bench Banking it repaired most failures and cut tokens.
- Infrastructure & Runtime
Triton Kernels Pass Tests but Run Slow: The GPU Kernel Eval Gap
A July 2026 preprint shows Triton and TileLang kernels can pass correctness checks yet run hundreds of times slower than library baselines, moving validation cost to adopters.
- Agents & Frameworks
Can Multi-Agent LLM Negotiation Protocols Trust Their Own Samplers?
Reasoning modes improve LLM negotiators as solvers but not as samplers, so multi-agent talks look inventive yet never agree; builders check moves against protocol rules.
Developer ToolsRunning Gradio Without a Backend: How Gradio-Lite Changes ML Demos
Gradio-Lite runs the Gradio Python runtime in the browser through Pyodide, cutting hosting costs but shifting startup delay, download size, and memory limits to visitors.
- Infrastructure & Runtime
Vercel Edge Config: What Global Feature Flags Actually Cost at the Edge
Vercel Edge Config reads feature flags in under 15ms, but its 10-second global write window means flipped flags can still route traffic to disabled regions.
- Infrastructure & Runtime
Serverless GPU Inference on GCP: What the Cold Starts Actually Cost
Cloud Run GPU's 19-second cold start for Gemma 3 4B means scale-to-zero beats dedicated GPUs only for spiky, batch workloads below roughly 40 to 50 percent utilization.
- Developer Tools
Cloudflare OAuth for All: What Third-Party SaaS Integration at the Edge Means
Cloudflare opened self-managed OAuth to all customers in June 2026, moving API authorization to the edge. Apps get delegated access, but consent records add a new lock-in.
- Infrastructure & Runtime
Vercel In-Function Concurrency: What It Changes for Stateful Node.js
Vercel's in-function concurrency lets one instance run multiple Node.js or Python requests, cutting idle billing and cold starts but forcing handling of shared state, leaks.
- Infrastructure & Runtime
Running LLMs on AMD GPUs With ROCm: What Actually Works
HuggingFace's Optimum-AMD recipe and ROCm 7.2.4's vLLM fixes make the MI300X a serviceable inference target, but newer attention kernels and training still trail CUDA.
- Agents & Frameworks
Why Your AI Travel Agent Would Book a Bullfight
A new travel-agent benchmark finds frontier models book animal-exploitation options below chance when the welfare preference is implicit. Fix the action space, not the prompt.
- Developer Tools
Coding Agents Hallucinate Internal APIs: Execution Memory Beats RAG Context
MEMCoder's execution memory lifts private-library pass@1 by 18.41 points over RAG by learning from runtime feedback, shifting bottleneck from retrieval to sandboxed execution.
- Industry & Business
Meta's Layoff Admission Weakens the Case for AI Headcount Cuts
Zuckerberg said Meta's AI agent development has not accelerated as expected, weeks after 8,000 layoffs. CIOs lose their flagship case study for AI-driven headcount cuts.
- Industry & Business
Kimi K3 Confirmed for July After K2.7 Lost 11 of 12 Benchmark Cells
Kimi K3 shipped five weeks after K2.7 Code. The rapid reset shows why routing teams need rolling evaluations, price controls and version-agnostic contracts.
- Agents & Frameworks
Can Multi-Agent RAG Run Air-Gapped? A Forensics System Shows How
CHARLIE runs multi-agent RAG on-premise for forensic evidence, removing cloud LLM calls but shifting the bottleneck to GPU capacity, structured memory, and audit logging.
- Industry & Business
Meituan Open-Sources LongCat-2.0, a 1.6T Model Trained on 50,000 Chinese GPUs
Meituan says LongCat-2.0 is a 1.6-trillion-parameter MoE trained on 50,000 domestic chips. If true, export controls may not confine frontier model training to national labs.
- Models & Research
When Do Time Series Foundation Models Pay Off? The Break-Even Threshold
A July 2026 arXiv break-even study finds pretrained time series foundation models win unconditionally on half of 30 datasets, but lose to ARIMA or XGBoost on a fifth at any.
- Agents & Frameworks
Can You Prove an Agentic Trading Pipeline Has No Look-Ahead Bias?
A July 2026 preprint reframes look-ahead bias as temporal non-interference, letting a type checker prove a pipeline leak-free before it runs rather than finding leaks after.
- Agents & Frameworks
How Far Ahead Can a Coding Agent Plan? The Horizon Bottleneck
A July 2026 preprint says coding agents plan edits roughly 25 steps ahead before their latent program model collapses, so context length and pass@k may mismeasure failures.
- Infrastructure & Runtime
Cloudflare Meerkat: What Globally Distributed Consensus Costs at the Edge
Cloudflare's Meerkat runs QuePaxa consensus at the edge, so every write waits on a cross-region quorum. The write-latency tax suits control-plane state, not transactions.
- Infrastructure & Runtime
Vercel CDN Now Honors External Origin Cache-Control: Audit Your Headers
Since April 6, 2026, new Vercel projects honor Cache-Control from external origins by default, so operators must audit rewrite headers or risk stale, unintended responses.
- Industry & Business
Prompt Refinement vs Reflective Dialogue: Which Builds Better AI Coders?
A July 2026 study found Socratic tutoring outperformed prompt refinement for independent LLM use among students, suggesting engineering teams may underinvest in evaluation.
- Infrastructure & Runtime
AI Found Real Bugs in Cloudflare's Circl Crypto Library
zkSecurity's AI agent found seven real bugs in Cloudflare's CIRCL crypto library, all fixed upstream, showing AI-assisted review is now a baseline layer for crypto code.
