InfoQ

Microsoft Moves AI Governance From Policy to Runtime Enforcement

Leela Kumili — Mon, 24 Aug 2026 13:49:00 GMT

Microsoft has outlined an AI governance architecture spanning nine governance domains and four functions: policy, control, visibility, and proof. The approach connects policies with runtime enforcement, continuous evaluation, observability, identity, security, and audit evidence to help organizations verify governance requirements as AI applications and agents operate in production.

By Leela Kumili

Article: Rightsizing Platform Engineering: Building the Platform Your Organization Actually Needs

John Keates — Mon, 24 Aug 2026 11:00:00 GMT

Shift-left and DevOps have impacted how we flow changes from inception to production, but at the cost of increased cognitive load and duplication of effort across testing, security, and maintenance. This article explores the real-world challenges of rightsizing developer platforms and finding a cultural match for engineering teams who use them to reduce cognitive load and deliver change faster.

By John Keates

Podcast: The Human Edge: Why Brownfield Codebases Need Mob Programming, Not Just AI Vibes

Asgaut Mjølne Söderbom, Ola Hast — Mon, 24 Aug 2026 11:00:00 GMT

Asgaut Mjølne Söderbom and Ola Hast discuss the evolution of their software engineering practices past continuous deployment and pair engineering. The conversation continues where it left off in the previous episode and focuses on the experiments in adopting Claude Code and the reasons why they consider it good for everything else, but not coding.

By Asgaut Mjølne Söderbom, Ola Hast

Presentation: Prompt to Prod: Engineering an Autonomous SDLC at Scale

Andrew Swerdlow — Mon, 24 Aug 2026 11:00:00 GMT

Andrew Swerdlow shares how Roblox scales autonomous software development from prompt to production. He discusses building robust security sandboxes, extracting institutional knowledge via code review exemplars, updating engineering infrastructure, and redefining productivity metrics around feature velocity and long-running AI turns to achieve trusted, automated deployment at scale.

By Andrew Swerdlow

JDK 27 and JDK 28: What We Know So Far

Michael Redlich — Mon, 24 Aug 2026 02:30:00 GMT

JDK 27, the second non-LTS release since JDK 25, has reached its first release candidate phase featuring a final set of nine new features, in the form of JEPs, that can be separated into four categories: Core Java Library, HotSpot, Security Library and Java Language Specification. We examine JDK 27 and predict what features have, or could be, targeted for JDK 28.

By Michael Redlich

Cloudflare OS: Cloudflare's Open-Source Corporate AI Platform Built on a Capability-Based Model

Bruno Couriol — Sun, 23 Aug 2026 22:50:00 GMT

Cloudflare recently open-sourced Cloudflare OS. It allows enterprise teams to output work artifacts grounded in enterprise knowledge, know-how, and provisioned connectors, automate repetitive workflows with optimized token cost (with AI assistance only where needed), and build personal, shareable, customizable work software that caters to specific, complex use cases within a secure sandboxed model

By Bruno Couriol

Google's HEIR Aims to Make Homomorphic-Encrypted Inference a One-Click Capability

Sergio De Simone — Sun, 23 Aug 2026 18:00:00 GMT

Google is introducing HEIR (Homomorphic Encryption Intermediate Representation), an open-source compiler and development toolchain designed to make encrypted computation easier to deploy. In particular, HEIR can compile pre-trained AI models built for conventional, unencrypted inputs so they can instead operate on encrypted data.

By Sergio De Simone

OVHcloud Raises Prices as AI Memory Demand Reprices Non-AI Infrastructure

Steef-Jan Wiggers — Sun, 23 Aug 2026 08:43:00 GMT

OVHcloud will raise prices from September, with 2026-edition gaming servers up 87 percent and other recent servers 40 to 59 percent. Founder Octave Klaba says memory cost six times more in June than a year earlier, as RAM suppliers shifted capacity toward high-bandwidth memory for AI. AWS, buying years ahead, has repriced one reserved GPU product.

By Steef-Jan Wiggers

DRAM Controller Register Manipulation Breaks CPU Memory Isolation

Olimpiu Pop — Sun, 23 Aug 2026 04:04:00 GMT

Security researcher Christopher Domas developed skitter-creek-bath-salts, an open-source hardware security tool that disrupts CPU privilege boundaries by manipulating memory controller translation registers. This allows unprivileged software to access protected memory regions, revealing a vulnerability in modern processor architectures that could affect cloud and confidential computing security.

By Olimpiu Pop

Cloudflare Announces Kitesurf, a Browser Engine for Agents

Renato Losio — Sat, 22 Aug 2026 15:01:00 GMT

Cloudflare recently introduced Kitesurf, a lightweight browser built for automated workloads. Kitesurf runs browser components in isolated WebAssembly/Rust environments on Cloudflare Workers and supports the Chrome DevTools Protocol, allowing tools such as Playwright and Puppeteer to drive it with lower resource overhead than a full Chromium browser.

By Renato Losio

Presentation: SafeChat: Building AI-Powered Safety Systems at Scale in a Real-Time Marketplace

Bruna Pereira — Sat, 22 Aug 2026 11:00:00 GMT

Bruna Pereira explains how DoorDash built a content-agnostic AI moderation platform. She covers replacing costly LLM-only pipelines with a hybrid pattern: using fast internal models to filter obvious cases, LLM multi-axis scoring for nuanced decisions, and no-code workflows with backtesting. Discover how this architectural pattern cut safety incidents while scaling to millions of daily messages.

By Bruna Pereira

AI Code Review at Scale: LinkedIn's Multi-Agent Approach

Sergio De Simone — Sat, 22 Aug 2026 09:00:00 GMT

At LinkedIn's scale, relying solely on human reviewers or simply putting an off-the-shelf AI reviewer in front of GitHub is not an effective way to manage PRs. To address this, LinkedIn engineers built a multi-agent AI code review platform that understands the organization's coding context, treats code review as production infrastructure, and minimizes hallucinations and low-signal feedback.

By Sergio De Simone

AWS Releases Aws-Bench to Evaluate Agents on Cloud Tasks

Gianmarco Nalin — Sat, 22 Aug 2026 08:00:00 GMT

AWS has released aws-bench, an open-source benchmark for evaluating AI agents on real AWS tasks such as misconfigurations and infrastructure provisioning. Unlike traditional benchmarks, it uses real resources in disposable AWS accounts, scoring agent performance through automated verifiers.

By Gianmarco Nalin

VoidZero Releases Vite+ Beta: a Unified Web Toolchain behind a Single Command

Daniel Curtis — Sat, 22 Aug 2026 06:32:00 GMT

VoidZero has launched the beta of Vite+, a unified web development toolchain. It combines runtime, package management, and essential frontend tools under a single command. Vite+ supports various projects and is open source. The platform enhances workflow through features such as hot-reloading, format checking, and testing. The team emphasizes community feedback for future updates.

By Daniel Curtis

Cloudflare Cuts Astro GitHub Issues by 85% with AI Agents

Leela Kumili — Fri, 21 Aug 2026 14:09:00 GMT

Cloudflare, Astro, AI agents, GitHub Actions, issue triage, agentic AI, software architecture, open source, developer tools, AI automation, automated testing, human in the loop, agent workflows, GitHub, software engineering, AI software development, bug triage, continuous integration, developer productivity, autonomous agents, AI coding, Cloudflare Workers, Flue, triagebot

By Leela Kumili