2026-09-11 · 9 min read
Attestation Proves a Hash. It Does Not Prove What the Hash Is.
Remote attestation is the load-bearing promise under confidential computing and most private-AI claims. A study of 115 real...
Saturday, 12 September 2026
40 pieces · 2 series · 2 builds
On the wire
Cross-Platform Was a Labor-Saving Device. Shopify Just Stopped Needing One.Attestation Proves a Hash. It Does Not Prove What the Hash Is.The KEV Catalog Stopped Being a Patch List. Nobody Told the Dashboards.Point an LLM at Working Code and It Will Find a Bug. There Is Not One.What Is a Sandbox Escape?110 Million Installs a Week. The Funding Model Still Did Not Work.Two Certificate Authority Keys, One Desktop PC, Sixty-One HoursHalf the MCP Registry Does Not StartCross-Platform Was a Labor-Saving Device. Shopify Just Stopped Needing One.Attestation Proves a Hash. It Does Not Prove What the Hash Is.The KEV Catalog Stopped Being a Patch List. Nobody Told the Dashboards.Point an LLM at Working Code and It Will Find a Bug. There Is Not One.What Is a Sandbox Escape?110 Million Installs a Week. The Funding Model Still Did Not Work.Two Certificate Authority Keys, One Desktop PC, Sixty-One HoursHalf the MCP Registry Does Not Start
Lead2026-09-11 · 9 min read
//01 · the lead
Cross-Platform Was a Labor-Saving Device. Shopify Just Stopped Needing One.
Shopify spent six years as React Native's loudest enterprise champion. It is now rebuilding every mobile app in Swift and Kotlin, and the stated reason is not performance. It is that writing the feature twice stopped costing twice.
Start reading →//02 · also landing
Three more worth the time.
2026-09-11 · 10 min read
The KEV Catalog Stopped Being a Patch List. Nobody Told the Dashboards.
CISA replaced the flat everything-in-KEV-same-deadline model with a four-variable risk matrix and started stamping...
2026-09-11 · 8 min read
Point an LLM at Working Code and It Will Find a Bug. There Is Not One.
Across multiple models and repair environments, LLMs claim to find bugs in entirely bug-free programs, damage correct code faster...
//03 · the river
Everything else that landed.
2026-09-11 · 9 min read · Security
What Is a Sandbox Escape?
2026-09-11 · 8 min read · Open Source
110 Million Installs a Week. The Funding Model Still Did Not Work.
2026-09-11 · 7 min read · Security
Two Certificate Authority Keys, One Desktop PC, Sixty-One Hours
2026-09-11 · 8 min read · MCP
Half the MCP Registry Does Not Start
2026-09-11 · 7 min read · Engineering
Rust Is Now Tier-1 at Microsoft. The Interesting Part Is the Backend.
2026-09-11 · 9 min read · AI
RAG or Fine-Tuning: Which One Do You Actually Need?
//04 · by subject
Four desks, four leads.
2026-09-11 · 9 min read
Cross-Platform Was a Labor-Saving Device. Shopify Just Stopped Needing One.
2026-09-11 · 9 min read
Attestation Proves a Hash. It Does Not Prove What the Hash Is.
2026-09-11 · 8 min read
Point an LLM at Working Code and It Will Find a Bug. There Is Not One.
2026-09-11 · 8 min read
Half the MCP Registry Does Not Start
2026-09-11 · 9 min read
RAG or Fine-Tuning: Which One Do You Actually Need?
Systems
19 in Systems →2026-09-11 · 9 min read
Attestation Proves a Hash. It Does Not Prove What the Hash Is.
2026-09-11 · 10 min read
The KEV Catalog Stopped Being a Patch List. Nobody Told the Dashboards.
2026-09-11 · 9 min read
What Is a Sandbox Escape?
2026-09-11 · 8 min read
110 Million Installs a Week. The Funding Model Still Did Not Work.
2026-09-11 · 7 min read
Two Certificate Authority Keys, One Desktop PC, Sixty-One Hours
Agents
16 in Agents →2026-09-11 · 9 min read
Cross-Platform Was a Labor-Saving Device. Shopify Just Stopped Needing One.
2026-09-11 · 8 min read
Point an LLM at Working Code and It Will Find a Bug. There Is Not One.
2026-09-11 · 8 min read
Half the MCP Registry Does Not Start
2026-09-11 · 10 min read
The Network Used to Move Packets. Now It Moves Decisions.
2026-09-11 · 8 min read
Half of Them Built a Ray Tracer
Security
10 in Security →2026-09-11 · 9 min read
Attestation Proves a Hash. It Does Not Prove What the Hash Is.
2026-09-11 · 10 min read
The KEV Catalog Stopped Being a Patch List. Nobody Told the Dashboards.
2026-09-11 · 9 min read
What Is a Sandbox Escape?
2026-09-11 · 7 min read
Two Certificate Authority Keys, One Desktop PC, Sixty-One Hours
2026-09-11 · 10 min read
The Network Used to Move Packets. Now It Moves Decisions.
//05 · the shelf
Read in order, not by date.
The reference shelf →//06 · deeper in