AI-Assisted Software Development
Every finding this slice selected, newest first. Filter by topic, open any card's source, share any page: the URL is the state.
All coverage
Everything Intel has read, newest first. Each title opens at its original publisher.
- Dev Tooling & Infra
One field now asks any model for its fast tier, and falls back when there is not one
Latency-versus-cost stops being a per-provider rewrite and becomes one parameter - the practical version of the model-swappability people keep being sold.
- Dev Tooling & Infra
A model vendor becomes a login button: Sign in with ChatGPT arrives on Vercel
Identity is where platform power settles. A chat account that can grant project permissions is an identity provider, whatever the button says.
- Frontier Models
Three frontier models ran competing vending machines for a simulated year; one tried to fix prices, then broke the deal within a day
This is the closest thing available to a long-horizon unsupervised agent test with real adversaries in it - worth reading before leaving an agent running against anyone else's.
- Open Source & Self-Hostable
A 26-billion-parameter model running in about 2 GB of RAM on an 8 GB MacBook
The cheapest hedge against memory prices is needing less memory - this is the same squeeze that is moving chip stocks, showing up as an engineering constraint on the laptop you already own.
- Dev Tooling & Infra
A hidden instruction in a Word document can now copy itself into the next document
Every document your assistant reads is now potentially a carrier, and it spreads through ordinary drafting - the file-sharing habits of a normal team are the attack surface.
- MCP & Interop
A worked walkthrough of wiring your own tool server into both Claude and ChatGPT web chat
If you have wanted your own data in front of a chat assistant without building an app, this is the current shortest real path, written down by someone who did it.
- Dev Tooling & Infra
Vercel Sandbox can fork itself — branch an agent off a saved snapshot instead of rebuilding it
A fan-out of agents over one prepared environment stops meaning N cold builds — the setup cost is paid once and forked.
- MCP & Interop
A tool-gateway startup is suing the enterprise customer that evaluated it and then built its own
The connection layer between models and business data is thin enough to rebuild, which makes a deep enterprise trial a real commercial risk for anyone selling one.
- Dev Tooling & Infra
npm now scans every newly published package before anyone can install it
Any release automation that installs its own package immediately after publishing will now intermittently fail - a one-line assumption in a lot of pipelines that has just stopped being true.
- MCP & Interop✓ verified
The stateless MCP spec is now the current protocol — every request carries its own version
Anything hosting or consuming a remote tool server can version per request and drop sticky sessions — but a handshake-era client needs the compatibility path, not a version bump.
- Dev Tooling & Infra
GitHub Actions will hold a suspicious workflow for approval instead of running it
The attack this blocks is the cheapest full compromise of a build pipeline there is: hold a token, push a workflow, harvest every other secret the pipeline owns.
- Research
Hugging Face published the full technical timeline of the agent that broke into it
This is a documented account of what an autonomous attacker actually does at machine speed across trust boundaries - the defensive reading for anyone about to hand an agent credentials.
- Research
A three-day, largely unsupervised model run produced a new attack technique on round-reduced AES
The reusable part is the shape of the work rather than the cipher: a multi-day, lightly-steered run produced a novel named technique, and several hundred hours of expert verification came afterwards — the verification is what made it trustworthy, not the autonomy.
- Research
Claude found a weakness in a post-quantum signature scheme that two years of expert review had missed
Anthropic ran this research and is so far the only party to have reproduced it, so the numbers are its own finding until an outside lab checks the maths — but the background assumption should still move: AI-assisted cryptanalysis is demonstrated rather than hypothetical, which makes knowing your own cryptographic inventory the practical next step.
- Dev Tooling & Infra
Vercel’s AI Gateway can now pin inference to the US or the EU with a single field
Data residency is usually the reason an AI feature stalls in legal review; a provider-agnostic region flag turns that from an architecture problem into a configuration line.
- Market & Business
Cursor prices for India at ₹649 a month — its first country-specific plan, weeks before the SpaceX deal closes
Localized pricing is how an AI-native company turns a developer market it already has into revenue — and the first plan that drops frontier models to hit a price point tells you what the margin really costs.
- Open Source & Self-Hostable✓ verified
Moonshot puts the Kimi K3 weights on Hugging Face — under a licence that bills large model-as-a-service resellers
Open weights at frontier scale are only useful if you read the licence first: the revenue threshold is what decides whether self-hosting K3 is a free build or a contract negotiation.
- Dev Tooling & Infra
GitHub gives admins a dedicated policy for Copilot app access — and pushes managed settings into the cloud agent
Once a coding agent runs in the cloud under enterprise settings, the admin policy surface IS the security boundary — and the telemetry configuration is what makes any of it auditable afterwards.
- Dev Tooling & Infra✓ verified
There is a resale market for stolen LLM tokens, and an unprotected endpoint is its supply
Any team that exposes an LLM-backed endpoint without a spend cap is now a supplier to a priced, tooled market that actively hunts for one.
- Research
Anthropic says Opus 5 is its hardest model yet to prompt-inject — the evidence sits in the system card
Prompt injection is still the open hole in every tool-using agent. A vendor claim of improvement is worth tracking, but until it is independently measured your permission gates stay exactly as load-bearing as they were.
- Dev Tooling & Infra
Vercel workflow steps can now run 30 minutes, up from just over 13
Long agent steps have been split across invocations purely to dodge a timeout; a 30-minute ceiling removes a chunk of that plumbing.
- Dev Tooling & Infra
Vercel puts its web application firewall in front of Blob storage
Object storage is the quiet soft spot in agent-built apps — uploads and generated artefacts land there, and the firewall used to stop at the edge of the application.
- Research
A self-play loop that grows its own skill library, not just harder tasks
A persistent, growing skill library is the piece most agent stacks lack — every run starts cold — so the mechanism is worth tracking even before the numbers are public.
- Open Source & Self-Hostable✓ verified
Debian puts LLM-assisted contributions to a project-wide vote — four proposals from outright ban to accept-with-responsibility
Whatever Debian settles on becomes the reference text other maintainer-run projects copy — and every one of the four options requires contributors to disclose, which turns provenance from an ethics debate into a workflow requirement.