Sep 14, 2026

We let an AI agent execute Bash and lived to talk about it — Sarah Sanders, PostHog

Sarah Sanders, a context engineer at PostHog, discusses the security implications of building an agentic CLI tool, "The Wizard," which automates developer workflows. She highlights the inherent risks of agents capable of executing commands, labeling it a "malware starter pack," and details how PostHog evolved its security posture from basic allow lists to a sophisticated "defense in depth." Key insights include the principle that "attacks compose, code review doesn't," the discovery of internal supply chain vulnerabilities through the "Context Mill," and the development of "The Warlock," a deterministic scanner using YARA rules. Sanders emphasizes the critical distinction between deterministic enforcement and probabilistic judgment, explaining how an LLM-powered "Triage" layer acts as an adviser (failing closed) rather than a bouncer, preserving the integrity of their security model.

Sep 14, 2026

Greg Brockman Says AGI Has Arrived

OpenAI President Greg Brockman discusses the advent of the "AGI era" with models like Astra, highlighting the transformative power of AI agents capable of computer use and autonomous task execution. He delves into critical safety and security challenges, emphasizing the "defender's window" for proactive cybersecurity, and explores AI's evolving impact on employment, global sentiment, and the future of proactive AI assistants.

Sep 14, 2026

How Developers Secure AI-Generated Code: 5 Security Best Practices

Discover five essential principles for implementing shift-left security in AI-assisted software development. Jeff Crume explains how to secure AI-generated code by focusing on outcome validation, integrating security early, scrutinizing dependencies, validating intent, and maintaining continuous security practices for more trustworthy AI-powered workflows.

Sep 13, 2026

Essential Skills for Becoming an AI Engineer: RAG, AI Agents, & More

Cedric Clyburn outlines the essential skills for AI engineering, distinguishing it from ML research. He details a three-tier skill stack covering foundational programming (Python, Git, APIs), AI-specific techniques (embeddings, RAG, AI agents), and deployment strategies (containerization, observability). The discussion emphasizes judgment over code generation and highlights key use cases like RAG systems and agent-based solutions.

Sep 12, 2026

Navier-Stokes and AI generated work: If You Can't Explain It, Did You Really Do It?

Ben Lorica and Evangelos Simoudis discuss the profound impact of AI on knowledge work, examining the Navier-Stokes controversy as a case study for IP protection and the need for human validation of AI-generated output. They explore the Chinese concept of "involution" and its implications for global productivity and Western knowledge workers, contrast US and Chinese approaches to AI risk, and reflect on 9/11's role in accelerating the big data revolution.

Sep 11, 2026

Building ambitious software — Jonathan Kelley, Dioxus Labs & Cognition

Jonathan Kelley, founder of Dioxus Labs, shares insights from building a cross-platform Rust app framework for five years. He details Dioxus's evolution, its core technologies like Blitz and Subsecond, and the transformative impact of AI coding agents. Kelley explains how AI excels at handling Rust's complexity, automating mundane tasks, and serving as patient specialists for knowledge-intensive problems, yet falls short in writing effective tests. He concludes that while AI makes code cheap, quality remains paramount, shifting the engineer's focus to architecture and strategic system design.