{"id":6091,"date":"2026-10-18T10:38:02","date_gmt":"2026-10-18T15:38:02","guid":{"rendered":"https:\/\/www.cybersecurityinstitute.com\/blog\/?p=6091"},"modified":"2026-10-18T10:38:02","modified_gmt":"2026-10-18T15:38:02","slug":"devsecops-weekly-october-18-2026","status":"publish","type":"post","link":"https:\/\/www.cybersecurityinstitute.com\/blog\/?p=6091","title":{"rendered":"DevSecOps Weekly \u2014 October 18, 2026"},"content":{"rendered":"<style>\n.single .entry-title,\n.single .entry-header .entry-title,\n.single .post-title,\n.single header.entry-header h1,\n.single h1.entry-title,\n.single .page-title,\n.post-template-default h1.entry-title,\n.post-template-default .entry-header,\narticle .entry-header,\narticle .entry-title { display: none !important; }\n.single .entry-header { margin: 0 !important; padding: 0 !important; }\n.single .entry-content { margin-top: 0 !important; padding-top: 0 !important; }\n<\/style>\n<table role=\"presentation\" class=\"wrapper\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"100%\">\n<tr>\n<td align=\"center\">\n<table role=\"presentation\" class=\"container\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"680\">\n<p>                <!-- Banner --><\/p>\n<tr>\n<td class=\"banner\" style=\"background-color:#082f49;background:linear-gradient(135deg,#082f49 0%,#0c4a6e 50%,#0891b2 100%);padding:36px 32px;color:#ffffff;\">\n<p class=\"date\" style=\"color:#ffffff !important;\">October 18, 2026 &middot; Weekly Edition<\/p>\n<h1 style=\"color:#ffffff !important;\">DevSecOps Weekly<\/h1>\n<p class=\"tagline\" style=\"color:#ffffff !important;\">Only <strong>2 of 25<\/strong> package managers verify every package they install. <strong>PostgreSQL 19<\/strong> slips to November after AI review found more bugs than committers could fix, and a Linux Foundation team of about <strong>200<\/strong> engineers takes on the AI bug-report flood. Anthropic now merges <strong>30,000<\/strong> changes a day and replaced git to cope. The <strong>SRE book<\/strong> gets its second edition. Twenty-five stories.<\/p>\n<\/td>\n<\/tr>\n<p>        <!-- At a glance --><\/p>\n<tr>\n<td class=\"content\">\n<h2>This week at a glance<\/h2>\n<p>The week&rsquo;s theme is <strong>capacity<\/strong>. AI now writes code, and finds bugs in it, faster than people can review, fix and ship. <strong>PostgreSQL 19<\/strong> was due this month; it is now expected around <strong>19 November<\/strong>, with <strong>8 to 10<\/strong> features reverted to next year, after LLM-assisted review turned up long lists of defects late in the cycle. The Linux Foundation&rsquo;s <strong>Akrites<\/strong> team, about <strong>200<\/strong> engineers seconded by members including Anthropic, OpenAI, Google and Microsoft, is working through a backlog of hundreds of thousands of reports, many of them AI-written duplicates. In the kernel, maintainers dropped the <strong>Assisted-by<\/strong> tag (only about 10% of Linux 7.3 commits carried it), while Linus Torvalds shipped a Claude Code-built page-cache fix and reviewers caught a race in it.<\/p>\n<p>The second thread is <strong>code at agent scale<\/strong>. Anthropic says it went from about <strong>2,500<\/strong> merged changes a day in May to more than <strong>30,000<\/strong> in September, and built its own version-control system, Scion, because git and its CI could not keep up. JetBrains finds <strong>48.8%<\/strong> of organisations using AI around CI\/CD but only <strong>8%<\/strong> inside a build or test, and teams report that review is where generated changes pile up. An O&rsquo;Reilly essay sets out how to review when code is cheap: agree the evidence and blast radius before generating anything.<\/p>\n<p>The third thread is <strong>integrity and containment<\/strong>. Trail of Bits tested <strong>25<\/strong> package managers against a compromised repository; only <strong>Go<\/strong> and <strong>vcpkg<\/strong> verified every package. The new <strong>BUILD Foundation<\/strong> puts release attestations for Bazel on its first funding list. AWS open-sourced <strong>Strands Box<\/strong>, a default-deny sandbox for agents, and Anthropic now exports agent traces over OpenTelemetry. On the operations side, Google published the second edition of <strong>Site Reliability Engineering<\/strong>, and Grafana proposes SLOs and error budgets for agent behaviour.<\/p>\n<div class=\"watchlist\">\n<h2>On our watch list<\/h2>\n<ul>\n<li><strong>PostgreSQL 19 general availability around 19 November.<\/strong> RC1 set the date &ldquo;unless issues are found&rdquo;. Watch whether it ships on time, and whether the reverted features, SQL\/PGQ among them, land cleanly in PostgreSQL 20.<\/li>\n<li><strong>Whether other major projects delay releases for the same reason.<\/strong> Postgres is the first flagship project to slip publicly because AI review outran human fixing. Watch for similar notes from other database, language and kernel maintainers.<\/li>\n<li><strong>How quickly Akrites cuts its backlog.<\/strong> About 200 seconded engineers face hundreds of thousands of reports. Watch for published throughput, new members, and whether OSS-CRS tooling reaches ordinary maintainers.<\/li>\n<li><strong>The Assisted-by removal reaching mainline.<\/strong> The documentation change is in docs-next. Watch for it to merge, for checkpatch changes, and for other projects copying the cover-letter approach instead of commit tags.<\/li>\n<li><strong>Package-manager defaults changing after the Trail of Bits study.<\/strong> Only Go verifies signatures by default. Watch npm, NuGet and Pub for stricter defaults, and for signer identities appearing in lockfiles.<\/li>\n<li><strong>BUILD Foundation&rsquo;s first investments.<\/strong> Release attestations in the Bazel Central Registry are on the list. Watch for which ships first and whether more members join beyond the initial six.<\/li>\n<li><strong>Agent-scale source control beyond Anthropic.<\/strong> Anthropic says others will hit its limits within months. Watch for other large engineering organisations describing monorepo, CI and review changes driven by agent merge volume.<\/li>\n<li><strong>Strands Box on Linux.<\/strong> Today it runs on Apple-silicon Macs. Watch for the Linux release, the promised starter-policy CLI, and how the policy-bypass for directly granted files is handled.<\/li>\n<li><strong>OpenTelemetry GenAI conventions stabilising.<\/strong> Claude Platform trace export depends on conventions still marked in development. Watch for a stable release and for other model providers exporting the same spans.<\/li>\n<li><strong>Agent SLOs moving from proposal to product.<\/strong> Grafana describes an approach, not a release. Watch for error budgets on agent quality and cost appearing in observability platforms and in SRE team charters.<\/li>\n<\/ul><\/div>\n<p>            <!-- Topic map --><\/p>\n<div class=\"topic-map\">\n              <img decoding=\"async\" src=\"https:\/\/www.cybersecurityinstitute.com\/blog\/wp-content\/uploads\/2026\/10\/topic-map-devsecops-2026-10-18.png\" alt=\"Topic map of this week's DevSecOps Weekly stories\" loading=\"eager\"><\/p>\n<p class=\"caption\">This week&rsquo;s topic map: maintainer and review capacity at the centre, tied to LLM-assisted code review, PostgreSQL 19, the AI bug-report flood, Akrites and the Linux kernel. Anthropic and CI\/CD at agent scale link that cluster to package integrity (Trail of Bits, lockfiles and signatures, BUILD Foundation, the CRA) on one side, and to reliability practice (the SRE book, SLOs for agents, OpenTelemetry traces, AI SRE agents) and agent identity and sandboxing on the other.<\/p>\n<p>              <!-- INTERACTIVE_MAP_LINK_START --><\/p>\n<p style=\"margin:10px 0 0;text-align:center;\"><a href=\"https:\/\/www.cybersecurityinstitute.com\/blog\/?p=6090\" target=\"_blank\" rel=\"noopener\" style=\"display:inline-block;padding:8px 18px;background-color:#0f172a;color:#ffffff !important;text-decoration:none;border-radius:6px;font-size:13px;font-weight:600;\">View interactive topic map &rarr;<\/a><\/p>\n<p><!-- INTERACTIVE_MAP_LINK_END -->\n            <\/div>\n<p>            <!-- Article index --><\/p>\n<h2>Article index<\/h2>\n<h3>Integrity, isolation and accountability<\/h3>\n<div class=\"cluster-intro\">Most package managers still trust whatever the repository serves. Bazel gets a funded foundation with release attestations on its agenda, the CRA sets the bar for shipping without known vulnerabilities, and agents get kernel-enforced sandboxes and their own identities.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>1. <a href=\"https:\/\/blog.trailofbits.com\/2026\/10\/14\/package-managers-have-an-integrity-problem\/?ref=hexdigest\">Package managers have an integrity problem<\/a><\/td>\n<td class=\"src\">Trail of Bits<br \/><span style=\"font-size:11px;color:#94a3b8;text-transform:none;letter-spacing:0;\">Consultancy research<\/span><\/td>\n<td class=\"dt\">Oct 14, 2026<\/td>\n<\/tr>\n<tr>\n<td>2. <a href=\"https:\/\/www.linuxfoundation.org\/press\/linux-foundation-launches-build-foundation-to-sustain-large-scale-multi-language-build-and-test-systems\">Linux Foundation Launches BUILD Foundation to Sustain Large-Scale, Multi-Language Build and Test Systems<\/a><\/td>\n<td class=\"src\">Linux Foundation<br \/><span style=\"font-size:11px;color:#94a3b8;text-transform:none;letter-spacing:0;\">Press release<\/span><\/td>\n<td class=\"dt\">Oct 14, 2026<\/td>\n<\/tr>\n<tr>\n<td>3. <a href=\"https:\/\/www.infoworld.com\/article\/4232265\/is-your-software-product-ready-for-the-cyber-resilience-act.html\">Is your software product ready for the Cyber Resilience Act?<\/a><\/td>\n<td class=\"src\">InfoWorld<br \/><span style=\"font-size:11px;color:#94a3b8;text-transform:none;letter-spacing:0;\">New Tech Forum contributor (Percona)<\/span><\/td>\n<td class=\"dt\">Oct 12, 2026<\/td>\n<\/tr>\n<tr>\n<td>4. <a href=\"https:\/\/www.helpnetsecurity.com\/2026\/10\/12\/aws-strands-box-open-source-ai-agent-sandbox\/\">Strands Box: Open-source sandbox for AI agents<\/a><\/td>\n<td class=\"src\">Help Net Security<\/td>\n<td class=\"dt\">Oct 12, 2026<\/td>\n<\/tr>\n<tr>\n<td>5. <a href=\"https:\/\/www.infoworld.com\/article\/4232783\/when-an-agent-acts-who-is-accountable.html\">When an agent acts, who is accountable?<\/a><\/td>\n<td class=\"src\">InfoWorld<br \/><span style=\"font-size:11px;color:#94a3b8;text-transform:none;letter-spacing:0;\">New Tech Forum contributor (Thoughtworks)<\/span><\/td>\n<td class=\"dt\">Oct 15, 2026<\/td>\n<\/tr>\n<\/table>\n<h3>AI finds bugs faster than humans can fix them<\/h3>\n<div class=\"cluster-intro\">Postgres pulls features because AI review found more than committers could fix in time, the Linux Foundation stands up a shared team to triage the AI bug-report flood, and the kernel drops its AI-disclosure tag while Torvalds ships Claude-written patches.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>6. <a href=\"https:\/\/www.theregister.com\/databases\/2026\/10\/16\/postgres-19-delayed-after-ai-reviewers-find-more-bugs-than-humans-can-fix\/5303471\">Postgres 19 delayed after AI reviewers find more bugs than humans can fix<\/a><\/td>\n<td class=\"src\">The Register<\/td>\n<td class=\"dt\">Oct 16, 2026<\/td>\n<\/tr>\n<tr>\n<td>7. <a href=\"https:\/\/thenewstack.io\/akrites-ai-vulnerability-reports\/\">&#x27;Everybody with a $20 account is now a researcher&#x27;: How Akrites is tackling the flood of AI bug reports<\/a><\/td>\n<td class=\"src\">The New Stack<\/td>\n<td class=\"dt\">Oct 15, 2026<\/td>\n<\/tr>\n<tr>\n<td>8. <a href=\"https:\/\/thenewstack.io\/torvalds-claude-code-kernel\/\">Linus Torvalds let Claude Code fix the Linux page cache. Then reviewers found a race.<\/a><\/td>\n<td class=\"src\">The New Stack<\/td>\n<td class=\"dt\">Oct 14, 2026<\/td>\n<\/tr>\n<tr>\n<td>9. <a href=\"https:\/\/www.theregister.com\/ai-and-ml\/2026\/10\/14\/linux-kernel-devs-drop-obligatory-confession-of-ai-tool-usage\/5303140\">Linux kernel devs drop obligatory confession of AI tool usage<\/a><\/td>\n<td class=\"src\">The Register<\/td>\n<td class=\"dt\">Oct 14, 2026<\/td>\n<\/tr>\n<\/table>\n<h3>Code at agent scale<\/h3>\n<div class=\"cluster-intro\">Merge volume has outgrown tools built for humans. Anthropic replaced git internally, one developer ported a compiler for $24,000 in tokens, and surveys show review and reliability are where the time goes.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>10. <a href=\"https:\/\/www.theregister.com\/devops\/2026\/10\/13\/anthropic-reinvents-source-control-as-claude-floods-the-world-with-code\/5302943\">Anthropic reinvents source control as Claude floods the world with code<\/a><\/td>\n<td class=\"src\">The Register<\/td>\n<td class=\"dt\">Oct 13, 2026<\/td>\n<\/tr>\n<tr>\n<td>11. <a href=\"https:\/\/www.theregister.com\/devops\/2026\/10\/15\/24000-ai-experiment-ports-typescript-compiler-to-rust\/5303409\">$24,000 AI experiment ports TypeScript compiler to Rust<\/a><\/td>\n<td class=\"src\">The Register<\/td>\n<td class=\"dt\">Oct 15, 2026<\/td>\n<\/tr>\n<tr>\n<td>12. <a href=\"https:\/\/www.helpnetsecurity.com\/2026\/10\/15\/jetbrains-ai-software-delivery-report\/\">AI-generated changes create review bottlenecks in software delivery<\/a><\/td>\n<td class=\"src\">Help Net Security<br \/><span style=\"font-size:11px;color:#94a3b8;text-transform:none;letter-spacing:0;\">Vendor survey (JetBrains)<\/span><\/td>\n<td class=\"dt\">Oct 15, 2026<\/td>\n<\/tr>\n<tr>\n<td>13. <a href=\"https:\/\/leaddev.com\/ai\/ai-code-causes-real-world-production-outages\">AI code causes real world production outages<\/a><\/td>\n<td class=\"src\">LeadDev<br \/><span style=\"font-size:11px;color:#94a3b8;text-transform:none;letter-spacing:0;\">Vendor survey (Undo)<\/span><\/td>\n<td class=\"dt\">Oct 12, 2026<\/td>\n<\/tr>\n<tr>\n<td>14. <a href=\"https:\/\/www.oreilly.com\/radar\/code-review-after-code-gets-cheap\/\">Code Review After Code Gets Cheap<\/a><\/td>\n<td class=\"src\">O&#x27;Reilly Radar<\/td>\n<td class=\"dt\">Oct 16, 2026<\/td>\n<\/tr>\n<tr>\n<td>15. <a href=\"https:\/\/devops.com\/ai-is-automating-code-the-job-is-engineering\">AI Is Automating Code. The Job Is Engineering<\/a><\/td>\n<td class=\"src\">DevOps.com<\/td>\n<td class=\"dt\">Oct 13, 2026<\/td>\n<\/tr>\n<\/table>\n<h3>Platforms and harnesses<\/h3>\n<div class=\"cluster-intro\">How platform teams decide what to build, when a test harness pays for itself, and what running agents in production looks like at Uber.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>16. <a href=\"https:\/\/thenewstack.io\/coding-agents-platform-teams\/\">Coding agents made building easy. Platform teams that build from scratch are 3.5x more likely to lack a strategy.<\/a><\/td>\n<td class=\"src\">The New Stack<br \/><span style=\"font-size:11px;color:#94a3b8;text-transform:none;letter-spacing:0;\">Contributed (Octopus Deploy)<\/span><\/td>\n<td class=\"dt\">Oct 12, 2026<\/td>\n<\/tr>\n<tr>\n<td>17. <a href=\"https:\/\/martinfowler.com\/articles\/are-harnesses-worth-the-cost.html?aid=recgRooBJwTgxCXau\">Are Harnesses Worth the Cost?<\/a><\/td>\n<td class=\"src\">martinfowler.com<br \/><span style=\"font-size:11px;color:#94a3b8;text-transform:none;letter-spacing:0;\">Author&#x27;s own tool used (Specmatic)<\/span><\/td>\n<td class=\"dt\">Oct 13, 2026<\/td>\n<\/tr>\n<tr>\n<td>18. <a href=\"https:\/\/newsletter.pragmaticengineer.com\/p\/ubers-ai-infra-from-the-inside\">Uber&#x27;s AI infra, from the inside<\/a><\/td>\n<td class=\"src\">The Pragmatic Engineer<br \/><span style=\"font-size:11px;color:#94a3b8;text-transform:none;letter-spacing:0;\">Podcast with written takeaways<\/span><\/td>\n<td class=\"dt\">Oct 14, 2026<\/td>\n<\/tr>\n<tr>\n<td>19. <a href=\"https:\/\/stackoverflow.blog\/2026\/10\/08\/production-grade-llms-and-agents-a-field-guide\">Production-grade LLMs and agents: a field guide<\/a><\/td>\n<td class=\"src\">Stack Overflow Blog<br \/><span style=\"font-size:11px;color:#94a3b8;text-transform:none;letter-spacing:0;\">Contributed (The Heap)<\/span><\/td>\n<td class=\"dt\">Oct 8, 2026<\/td>\n<\/tr>\n<\/table>\n<h3>Reliability practice meets agents<\/h3>\n<div class=\"cluster-intro\">The SRE book gets its first rewrite in ten years, SLOs and error budgets move onto agent behaviour, agent traces flow into existing observability stacks, and AI spend becomes something platform teams have to manage.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>20. <a href=\"https:\/\/cloud.google.com\/blog\/products\/devops-sre\/sre-book-second-edition\">10 Years of the SRE book: Announcing the second edition of &quot;Site Reliability Engineering&quot;<\/a><\/td>\n<td class=\"src\">Google Cloud Blog<\/td>\n<td class=\"dt\">Oct 12, 2026<\/td>\n<\/tr>\n<tr>\n<td>21. <a href=\"https:\/\/techcommunity.microsoft.com\/blog\/appsonazureblog\/bring-azure-sre-agent-into-your-developer-workflow-with-the-new-canvas\/4564514\">Bring Azure SRE Agent into your developer workflow with the new canvas<\/a><\/td>\n<td class=\"src\">Microsoft Tech Community<\/td>\n<td class=\"dt\">Oct 14, 2026<\/td>\n<\/tr>\n<tr>\n<td>22. <a href=\"https:\/\/www.infoq.com\/news\/2026\/10\/grafana-slo-ai-agent\/?+ML+&amp;+Data+Engineering\">Grafana Applies SLOs and Error Budgets to AI Agent Behaviour<\/a><\/td>\n<td class=\"src\">InfoQ<\/td>\n<td class=\"dt\">Oct 16, 2026<\/td>\n<\/tr>\n<tr>\n<td>23. <a href=\"https:\/\/devops.com\/how-to-move-ai-sre-agents-from-demo-to-production\">How to Move AI SRE Agents From Demo to Production<\/a><\/td>\n<td class=\"src\">DevOps.com<br \/><span style=\"font-size:11px;color:#94a3b8;text-transform:none;letter-spacing:0;\">Contributed (Komodor)<\/span><\/td>\n<td class=\"dt\">Oct 2, 2026<\/td>\n<\/tr>\n<tr>\n<td>24. <a href=\"https:\/\/devops.com\/claude-platform-now-sends-agent-traces-straight-to-your-observability-stack\">Claude Platform Now Sends Agent Traces Straight to Your Observability Stack<\/a><\/td>\n<td class=\"src\">DevOps.com<\/td>\n<td class=\"dt\">Oct 15, 2026<\/td>\n<\/tr>\n<tr>\n<td>25. <a href=\"https:\/\/siliconangle.com\/2026\/10\/15\/north-cloud-bags-60m-in-funding-to-help-businesses-keep-runaway-cloud-costs-in-check\/\">North.cloud bags $60M in funding to help businesses keep runaway cloud costs in check<\/a><\/td>\n<td class=\"src\">SiliconANGLE<\/td>\n<td class=\"dt\">Oct 15, 2026<\/td>\n<\/tr>\n<\/table>\n<p>            <!-- Detailed write-ups --><\/p>\n<h2>Detailed write-ups<\/h2>\n<div class=\"article\">\n<h4>1. Only two of 25 package managers check every package they install<\/h4>\n<p class=\"meta\">Trail of Bits &middot; October 14, 2026 &middot; Linux Foundation &middot; October 14, 2026<\/p>\n<p>Trail of Bits researcher <strong>Keegan Ryan<\/strong> tested <strong>25<\/strong> popular package managers against one scenario: a compromised repository that injects malicious code into legitimate packages. The result: <strong>&ldquo;Only two verified the integrity of every package they downloaded.&rdquo;<\/strong> Those two were <strong>Go<\/strong> and <strong>vcpkg<\/strong>. Fewer than half used lockfiles that check for tampering by default, and only Go verified signatures by default. Everything else needed extra configuration, lacked the verification code, or did not support signatures at all.<\/p>\n<p>The defaults are the problem. <strong>cpanminus<\/strong> fetched packages over plain HTTP. <strong>Pub<\/strong> logs a hash mismatch and installs the package anyway unless you pass the non-default <code>--enforce-lockfile<\/code>. <strong>NuGet<\/strong> ships with <code>signatureValidationMode<\/code> set to <code>accept<\/code>, which installs packages with invalid signatures. <strong>npm<\/strong> does not check repository signatures during <code>npm install<\/code>; you have to run <code>npm audit signatures<\/code> separately. pnpm tightened its lockfile-overwrite behaviour only in version 11.4, in May. Ryan&rsquo;s proposal is to record signer identities or public keys in lockfiles and back them with a transparency log, so that verifying integrity no longer means pinning every update.<\/p>\n<p>On the same day the Linux Foundation launched the <strong>BUILD Foundation<\/strong> at BazelCon in Amsterdam to fund the Bazel ecosystem. Its initial members are <strong>ASML, Canva, Datadog, EngFlow, Figma and Spotify<\/strong>. Supply-chain security through <strong>release attestations in the Bazel Central Registry<\/strong> is on its first list of investment priorities, alongside paying bazel-contrib maintainers, documentation, training and IDE integration. Linux Foundation CEO <strong>Jim Zemlin<\/strong>: <strong>&ldquo;Bazel has become critical infrastructure for engineering teams around the world.&rdquo;<\/strong> The practical point for DevSecOps teams is to treat the repository as untrusted: turn on the strict lockfile and signature modes your ecosystems already offer, and check whether your internal mirrors re-verify what they cache.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/blog.trailofbits.com\/2026\/10\/14\/package-managers-have-an-integrity-problem\/?ref=hexdigest\">https:\/\/blog.trailofbits.com\/2026\/10\/14\/package-managers-have-an-integrity-problem\/?ref=hexdigest<\/a>, <a href=\"https:\/\/www.linuxfoundation.org\/press\/linux-foundation-launches-build-foundation-to-sustain-large-scale-multi-language-build-and-test-systems\">https:\/\/www.linuxfoundation.org\/press\/linux-foundation-launches-build-foundation-to-sustain-large-scale-multi-language-build-and-test-systems<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>2. Postgres 19 slips because AI review found more than committers could fix<\/h4>\n<p class=\"meta\">The Register &middot; October 16, 2026<\/p>\n<p>PostgreSQL 19 was due in late September or early October. It is now expected around <strong>19 November<\/strong>, and roughly <strong>8 to 10<\/strong> significant features have been reverted to PostgreSQL 20. The most visible casualty is <strong>SQL\/PGQ<\/strong>, the property-graph query syntax added to the SQL standard in 2023. Committer <strong>Peter Eisentraut<\/strong> of EDB says LLM-assisted code review is part of the reason: it raised the effective quality bar after the features had been written and committed.<\/p>\n<p>Some reverted features had architectural defects that could not be fixed quickly during beta. Others collected a long tail of edge-case bugs that, in earlier cycles, would have surfaced over five years of point releases. <strong>&ldquo;With LLM-assisted code review, these kinds of things can get found much faster, and then you&rsquo;re staring at a list of forty defect reports,&rdquo;<\/strong> Eisentraut said. Each fix may be three lines, but each carries a fixed cost, and the team ran out of time. He was clear that vibe coding was not the cause, since most of the features predate it.<\/p>\n<p>Not every committer reads it the same way. Other contributors point to a review backlog, made worse by senior developers spending the spring and summer on security fixes, and count only a minority of the reverts as AI-driven. Both readings agree on the mechanics: review came late and found more than could be fixed before release. For any team adding AI review to an existing pipeline, the lesson is to run it early, before features are committed, and to budget engineer time for triage, not just for the tool.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.theregister.com\/databases\/2026\/10\/16\/postgres-19-delayed-after-ai-reviewers-find-more-bugs-than-humans-can-fix\/5303471\">https:\/\/www.theregister.com\/databases\/2026\/10\/16\/postgres-19-delayed-after-ai-reviewers-find-more-bugs-than-humans-can-fix\/5303471<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>3. Akrites: a shared response team for the AI bug-report flood<\/h4>\n<p class=\"meta\">The New Stack &middot; October 15, 2026<\/p>\n<p>Akrites is a Linux Foundation initiative, announced in June, that acts as a shared security incident response team for open source. It consolidates incoming vulnerability reports, validates them and coordinates fixes with upstream maintainers. Founding members include <strong>Anthropic, OpenAI, Google, Microsoft, AWS, NVIDIA, Cisco, IBM, Red Hat, Citi and JPMorganChase<\/strong>. Members commit up to ten full-time engineers each, and some financial institutions contribute money instead. About <strong>200<\/strong> seconded engineers work on it.<\/p>\n<p>CTO <strong>Christopher Robinson<\/strong>, also chief security architect at the OpenSSF, describes a backlog of <strong>hundreds of thousands<\/strong> of reports. Reviewing one security pull request can take an engineer up to eight hours. AI-generated reports tend to be verbose, inaccurate and to overstate severity, and many duplicate each other because similar models find similar bugs. His summary: <strong>&ldquo;Everybody with a $20 account is now a researcher.&rdquo;<\/strong><\/p>\n<p>Triage runs in stages. AI scores incoming reports and flags duplicates, seconded engineers review what survives, and Akrites hands maintainers test cases, proofs of concept and patches rather than raw findings. A related Linux Foundation project, OSS-CRS, gives maintainers AI tools to investigate and fix. If your organisation runs a bug bounty or a vulnerability disclosure programme, expect the same volume problem, and plan for de-duplication and validation before anything reaches an engineer.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/thenewstack.io\/akrites-ai-vulnerability-reports\/\">https:\/\/thenewstack.io\/akrites-ai-vulnerability-reports\/<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>4. The kernel drops its AI-disclosure tag as Torvalds ships Claude-written patches<\/h4>\n<p class=\"meta\">The New Stack &middot; October 14, 2026 &middot; The Register &middot; October 14, 2026<\/p>\n<p>Linus Torvalds used <strong>Claude Code<\/strong> to build a fix for folio reference-count contention in the Linux page cache. He says the tool wrote the implementation, tests and first documentation under his direction, while he ran the benchmarks. His 10-patch series reported a <strong>23-fold<\/strong> throughput gain on a synthetic benchmark; the revised series took a 64-thread Threadripper from <strong>13.3 million<\/strong> to <strong>304 million<\/strong> reads per second. Reviewers then did their job. <strong>Kiryl Shutsemau<\/strong> found a race in <code>filemap_read_rcu_batch()<\/code>: replacing a folio and then extending the file size could expose data that was never written. The fix went into a revised patch, and Matthew Wilcox and David Hildenbrand are still debating the new page flag.<\/p>\n<p>In the same week, the Maintainers Summit in Prague agreed to deprecate the <strong>Assisted-by<\/strong> tag that contributors were asked to add when an AI tool helped write a patch. Sasha Levin of Nvidia posted the documentation change: only about <strong>10%<\/strong> of the <strong>18,533<\/strong> non-merge commits in Linux 7.3 through rc7 carried the tag, so its absence told reviewers nothing. Disclosure moves to the patch cover letter, AI agents still may not add a <code>Signed-off-by<\/code> line, and the human submitter still answers for every line. Torvalds: <strong>&ldquo;We&rsquo;re not going to make stupid rules that say &lsquo;you can&rsquo;t use tools for X&rsquo;.&rdquo;<\/strong><\/p>\n<p>Taken together, the two stories show where the kernel has landed. It does not try to police the tool. It relies on the reviewer, and the review caught the race. Teams writing their own AI-contribution policies can copy that: require a human sign-off and an explanation of how the change was made, and put the effort into review rather than into labels contributors will not apply. (The New Stack&rsquo;s owner is an investor in Anthropic.)<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/thenewstack.io\/torvalds-claude-code-kernel\/\">https:\/\/thenewstack.io\/torvalds-claude-code-kernel\/<\/a>, <a href=\"https:\/\/www.theregister.com\/ai-and-ml\/2026\/10\/14\/linux-kernel-devs-drop-obligatory-confession-of-ai-tool-usage\/5303140\">https:\/\/www.theregister.com\/ai-and-ml\/2026\/10\/14\/linux-kernel-devs-drop-obligatory-confession-of-ai-tool-usage\/5303140<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>5. Anthropic replaced git because Claude merges 30,000 changes a day<\/h4>\n<p class=\"meta\">The Register &middot; October 13, 2026 &middot; The Register &middot; October 15, 2026<\/p>\n<p>Anthropic says it averaged about <strong>2,500<\/strong> merged code changes a day in May and more than <strong>30,000<\/strong> a day by September. Its main branch is around <strong>100 GB<\/strong>, and CI alone performs on the order of <strong>25 million<\/strong> checkouts a day. In five months a small team built <strong>Scion<\/strong>, a centralised version-control system designed for agents, migrated the monorepo off git, and added a code review surface, code search and a source-control IAM system that can protect individual directories.<\/p>\n<p>Scion assumes clients are always online. The server handles history, blame, merges and rebases, and queries are exposed through an API, so many jobs need no local checkout at all. Anthropic&rsquo;s explanation for the growth: <strong>&ldquo;the latent demand for merging code is practically infinite, and every bottleneck we remove immediately leads to a further increase in the amount of code we produce.&rdquo;<\/strong> It will not open-source Scion, but expects other organisations to hit the same limits within months.<\/p>\n<p>A smaller data point from the same week: developer Theo Browne had agents port the TypeScript compiler, type checker and language server to Rust for about <strong>$24,000<\/strong> in API-equivalent tokens, after an earlier attempt spent more than $400,000 and stalled near 84% compatibility. The port passed the conformance suite at close to 100%. It translated Microsoft&rsquo;s existing Go port rather than the original, bugs included, and Browne says he has not read the code. Both stories point at the same constraint: merge volume and verification capacity, not writing speed. Source control access, review routing and CI capacity are now security and reliability controls, not just developer tooling.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.theregister.com\/devops\/2026\/10\/13\/anthropic-reinvents-source-control-as-claude-floods-the-world-with-code\/5302943\">https:\/\/www.theregister.com\/devops\/2026\/10\/13\/anthropic-reinvents-source-control-as-claude-floods-the-world-with-code\/5302943<\/a>, <a href=\"https:\/\/www.theregister.com\/devops\/2026\/10\/15\/24000-ai-experiment-ports-typescript-compiler-to-rust\/5303409\">https:\/\/www.theregister.com\/devops\/2026\/10\/15\/24000-ai-experiment-ports-typescript-compiler-to-rust\/5303409<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>6. Review is the bottleneck, and the evidence has to come before the code<\/h4>\n<p class=\"meta\">Help Net Security &middot; October 15, 2026 &middot; LeadDev &middot; October 12, 2026 &middot; O&#x27;Reilly Radar &middot; October 16, 2026<\/p>\n<p>JetBrains&rsquo; <strong>State of CI\/CD in 2026<\/strong> finds <strong>48.8%<\/strong> of organisations using AI for at least one CI\/CD task, but only <strong>8%<\/strong> running AI-powered steps inside a build or test. <strong>72.8%<\/strong> run their main CI\/CD system on their own premises or on self-managed cloud, the highest on-premises share in the five years the question has been asked. Teams using AI report that the volume of generated changes slows review and makes reliability harder to judge. TeamCity&rsquo;s <strong>Olga Bedrina<\/strong>: <strong>&ldquo;Most AI use currently happens around the pipeline.&rdquo;<\/strong><\/p>\n<p>LeadDev revisits the Undo survey we covered last week from a different angle: <strong>81%<\/strong> of 300 engineering leaders reported a production incident or outage linked to AI coding tools in the past six months, and <strong>79%<\/strong> say releases are no faster. Undo CTO <strong>Mark Williamson<\/strong>: <strong>&ldquo;There&rsquo;s definitely going to be bugs.&rdquo;<\/strong> Both are vendor surveys, so read them as direction.<\/p>\n<p>Markus Eisele&rsquo;s O&rsquo;Reilly essay is the practical answer. Agree on intended behaviour and expected blast radius before any code is generated, then require evidence for acceptance. Trace each important requirement to implementation and checks, and justify any behaviour nobody asked for. Remember that code and tests can share the same misreading, such as treating &ldquo;above &euro;100&rdquo; as &ldquo;&euro;100 and above&rdquo;, so check tests against agreed boundary examples and confirm they fail when the protection is removed. Scale review depth to risk: <strong>&ldquo;Require direct inspection of the payment path because a mistake can move money twice.&rdquo;<\/strong><\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.helpnetsecurity.com\/2026\/10\/15\/jetbrains-ai-software-delivery-report\/\">https:\/\/www.helpnetsecurity.com\/2026\/10\/15\/jetbrains-ai-software-delivery-report\/<\/a>, <a href=\"https:\/\/leaddev.com\/ai\/ai-code-causes-real-world-production-outages\">https:\/\/leaddev.com\/ai\/ai-code-causes-real-world-production-outages<\/a>, <a href=\"https:\/\/www.oreilly.com\/radar\/code-review-after-code-gets-cheap\/\">https:\/\/www.oreilly.com\/radar\/code-review-after-code-gets-cheap\/<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>7. The SRE book is rewritten, and SLOs move onto agent behaviour<\/h4>\n<p class=\"meta\">Google Cloud Blog &middot; October 12, 2026 &middot; InfoQ &middot; October 16, 2026 &middot; DevOps.com &middot; October 2, 2026<\/p>\n<p>Ten years after the original, Google has published a completely rewritten second edition of <strong>Site Reliability Engineering<\/strong>. New material covers running AI infrastructure (GPU and TPU cluster reliability, monitoring non-deterministic outputs and latency, continuous training and data pipelines) and using generative AI for reliability work such as incident triage, postmortem drafting and natural-language telemetry queries. It also records how practice has matured since 2016: multi-tier <strong>SLOs with burn-rate alerting<\/strong>, OpenTelemetry-based observability, infrastructure as code and internal developer platforms, continuous resilience testing, and FinOps-aligned capacity planning. Organisational models now go beyond a dedicated SRE team to platform-engineering integration and reliability champions embedded in product teams.<\/p>\n<p>Grafana Labs applies the same tools to agents. It proposes SLOs on hallucination, task fulfilment, toxicity and cost, scored by an LLM judge or by deterministic checks where those suffice. One example: <strong>95%<\/strong> of conversations judged fulfilled over 30 days, with the remaining <strong>5%<\/strong> as the error budget. Watching the burn rate catches slow quality drift that failure alerts miss. InfoQ&rsquo;s Craig Risi adds the caveat: <strong>&ldquo;The SLO provides the governance mechanism, but it does not make the underlying quality measurement inherently correct.&rdquo;<\/strong><\/p>\n<p>A contributed DevOps.com guide from a Komodor researcher covers getting AI SRE agents past the demo: run them as shared services that answer alerts at any hour, keep an audit trail from alert to recommendation, track cost per session with budget alerts and circuit breakers, regression-test against past investigations, and never give an agent a human&rsquo;s credentials. Start read-only and widen autonomy with approvals and policy checks. Microsoft&rsquo;s new Azure SRE Agent canvas follows the same pattern, putting the agent&rsquo;s diagnosis next to the developer&rsquo;s own tools for verification rather than acting on it directly.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/cloud.google.com\/blog\/products\/devops-sre\/sre-book-second-edition\">https:\/\/cloud.google.com\/blog\/products\/devops-sre\/sre-book-second-edition<\/a>, <a href=\"https:\/\/www.infoq.com\/news\/2026\/10\/grafana-slo-ai-agent\/?+ML+&amp;+Data+Engineering\">https:\/\/www.infoq.com\/news\/2026\/10\/grafana-slo-ai-agent\/?+ML+&amp;+Data+Engineering<\/a>, <a href=\"https:\/\/devops.com\/how-to-move-ai-sre-agents-from-demo-to-production\">https:\/\/devops.com\/how-to-move-ai-sre-agents-from-demo-to-production<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>8. Containing agents: default-deny sandboxes, agent identities and traces<\/h4>\n<p class=\"meta\">Help Net Security &middot; October 12, 2026 &middot; InfoWorld &middot; October 15, 2026 &middot; DevOps.com &middot; October 15, 2026<\/p>\n<p>AWS released <strong>Strands Box<\/strong>, an open-source sandbox for AI agents, in developer preview for Apple-silicon Macs, with Linux planned. It places the agent in a kernel-enforced sandbox and routes shell commands, Python code, MCP tool calls and network traffic through four checkpoints. Each asks the <strong>Dogwood<\/strong> policy engine for a decision, and Dogwood denies anything no rule allows. Because all four share one event history, a rule can block outbound HTTP after a file from a customer-data directory has been read, whichever tool read it. The network gateway swaps placeholder tokens for real API keys on the way out, so the agent never holds the secrets. AWS&rsquo;s <strong>Marc Brooker<\/strong> says the design must guarantee that <strong>&ldquo;the policy layer is the only way out of the box.&rdquo;<\/strong> One caveat: files granted directly in <code>box.toml<\/code> bypass the policy engine and its history.<\/p>\n<p>Thoughtworks&rsquo; <strong>Shayan Mohanty<\/strong> argues in InfoWorld that accountability has to be built into the system: agents need their own identities with named owners, permission grants and expiry; permissions should change with context; and when agents hand work to sub-agents, the chain from the original authority to each action must stay traceable. <strong>&ldquo;Autonomy can branch. Accountability cannot disappear.&rdquo;<\/strong><\/p>\n<p>Traceability is getting easier to wire up. Anthropic added native trace export to the Claude Platform in public beta on 14 October, covering the Messages API, Managed Agents and the SDKs. It uses OpenTelemetry&rsquo;s GenAI semantic conventions, which are still marked in development, and ships setup guides for 12 backends including Datadog, Grafana Cloud, Honeycomb, New Relic, Splunk and Sentry. Prompt and response content is optional; spans inside Managed Agents sessions do not export it. Futurum&rsquo;s <strong>Mitch Ashley<\/strong>: <strong>&ldquo;Agents are production workloads, and they fail the way production workloads fail.&rdquo;<\/strong><\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.helpnetsecurity.com\/2026\/10\/12\/aws-strands-box-open-source-ai-agent-sandbox\/\">https:\/\/www.helpnetsecurity.com\/2026\/10\/12\/aws-strands-box-open-source-ai-agent-sandbox\/<\/a>, <a href=\"https:\/\/www.infoworld.com\/article\/4232783\/when-an-agent-acts-who-is-accountable.html\">https:\/\/www.infoworld.com\/article\/4232783\/when-an-agent-acts-who-is-accountable.html<\/a>, <a href=\"https:\/\/devops.com\/claude-platform-now-sends-agent-traces-straight-to-your-observability-stack\">https:\/\/devops.com\/claude-platform-now-sends-agent-traces-straight-to-your-observability-stack<\/a><\/p>\n<\/p><\/div>\n<p>            <!-- Calls to action --><\/p>\n<div class=\"watchlist\">\n<h2>Calls to action<\/h2>\n<ul>\n<li><strong>Turn on strict integrity modes in every ecosystem you use.<\/strong> Enforce lockfiles (for example <code>--enforce-lockfile<\/code> in Pub), set NuGet signature validation to require, and add <code>npm audit signatures<\/code> to CI.<\/li>\n<li><strong>Make internal mirrors re-verify what they cache.<\/strong> A proxy that stores whatever upstream served passes a compromised package straight through. Check hashes and signatures on ingest, not just on install.<\/li>\n<li><strong>Move AI code review earlier.<\/strong> Run it before features are committed, not in the last weeks of a release, and budget engineer time to triage its findings.<\/li>\n<li><strong>Set up de-duplication and validation for incoming bug reports.<\/strong> If you run a disclosure programme or bounty, screen AI-generated reports for duplicates and reproducibility before they reach engineers.<\/li>\n<li><strong>Write an AI-contribution policy that relies on review, not labels.<\/strong> Require a human sign-off and a short note on how the change was made; do not depend on tags contributors will skip.<\/li>\n<li><strong>Agree evidence and blast radius before agents write code.<\/strong> For high-risk paths such as payments and auth, require boundary-example tests that fail when the protection is removed, and inspect the code directly.<\/li>\n<li><strong>Give every agent its own identity.<\/strong> No human credentials; a named owner, scoped permissions and an expiry. Start agents read-only and log every action.<\/li>\n<li><strong>Route agent traces into your existing observability stack.<\/strong> Decide now whether prompt and response content is exported, and who can see it.<\/li>\n<\/ul><\/div>\n<\/td>\n<\/tr>\n<p>        <!-- Footer --><\/p>\n<tr>\n<td class=\"footer\">\n<p class=\"brand\">DevSecOps Weekly<\/p>\n<p>A weekly intelligence bulletin from Security Radar LLC.<br \/>\n            Curated by Paul Davis &middot; <a href=\"mailto:paul.davis@security-radar.com\">paul.davis@security-radar.com<\/a><\/p>\n<p>&copy; 2026 Security Radar LLC. All rights reserved.<\/p>\n<p>Article titles and summaries are excerpted for review and commentary; all linked articles remain the copyright of their respective publishers and authors.<\/p>\n<p>*|LIST:ADDRESS|*<\/p>\n<p><a href=\"*|ARCHIVE|*\">View this email in your browser<\/a> &middot; <a href=\"*|UNSUB|*\">Unsubscribe<\/a><\/p>\n<\/td>\n<\/tr>\n<\/table>\n<\/td>\n<\/tr>\n<\/table>\n","protected":false},"excerpt":{"rendered":"<p>October 18, 2026 &middot; Weekly Edition DevSecOps Weekly Only 2 of 25 package managers verify every package they install. PostgreSQL 19 slips to November after AI review found more bugs than committers could fix, and a Linux Foundation team of about 200 engineers takes on the AI bug-report flood. Anthropic&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34,11],"tags":[],"class_list":["post-6091","post","type-post","status-publish","format-standard","hentry","category-secure","category-trends"],"_links":{"self":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/6091","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6091"}],"version-history":[{"count":1,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/6091\/revisions"}],"predecessor-version":[{"id":6107,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/6091\/revisions\/6107"}],"wp:attachment":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6091"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6091"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6091"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}