InfoQ

Terraform Introduces tfpolicy, an HCL-based Policy-as-Code Framework

Sergio De Simone — Fri, 31 Jul 2026 18:00:00 GMT

HashiCorp has introduced tfpolicy, a new HCL-based policy-as-code framework for Terraform, now available in public beta within HCP Terraform. It is designed to simplify and modernize infrastructure governance by integrating policy creation and enforcement directly into Terraform workflows, eliminating the need for separate tools and languages.

By Sergio De Simone

Dropbox Integrates MCP and Dash to Close the Gap Between Security Design and Code Review

Leela Kumili — Fri, 31 Jul 2026 14:36:00 GMT

Dropbox has integrated Model Context Protocol (MCP) with its internal knowledge platform, Dash, to surface security design context during AI assisted code reviews. The system retrieves threat models and security requirements for pull requests, helping reviewers validate implementation against design intent. An InfoQ Q&A explores the architecture and key lessons learned.

By Leela Kumili

Presentation: The Free-Lunch Guide to Idea Circularity

Holly Cummins — Fri, 31 Jul 2026 11:00:00 GMT

Holly Cummins discusses why "nothing is new under the sun" in tech. She maps historical architectural tradeoffs to modern cloud, microservices, and AI hype cycles. She connects financial debt (post-ZIRP) and technical debt to epistemic and sleep debt, showing engineering leaders how to navigate shifts in assumptions, embrace sustainability, and revive proven engineering disciplines.

By Holly Cummins

Article: Virtual Threads After JDK 24: What Changed for Production Java

Sandeep Bharadwaj — Fri, 31 Jul 2026 09:00:00 GMT

JDK 24 removed the monitor-related carrier-thread pinning that stalled Netflix and similar teams on Java 21. What has replaced it on JDK 25 LTS is downstream-resource saturation: The bottleneck moved and now demands explicit bounding in application code. This article maps the failure modes that surface after virtual-thread adoption and gives a practical sequence backed by a public benchmark.

By Sandeep Bharadwaj

Presentation: Parting the Clouds: The Rise of Disaggregated Systems

Murat Demirbas — Thu, 30 Jul 2026 13:50:00 GMT

Murat Demirbas discusses the shift toward disaggregated cloud database architectures driven by cloud economics. He explains how decoupling compute from storage enables elastic scaling, cost efficiency, and fault isolation. He shares how classical Paxos roles foreshadowed disaggregation, while analyzing network tradeoffs, shared-memory evolution, and self-assembling database designs.

By Murat Demirbas

AI-Assisted Software Development: Team Profiles and Capabilities for Putting Research into Action

Ben Linders — Thu, 30 Jul 2026 11:30:00 GMT

AI is an amplifier; strategic focus on the organizational system brings the greatest returns. DORA's 2025 research on AI in software development provides team profiles and success capabilities that can be used to put the research into practice.

By Ben Linders

AWS Lambda's Self-Managed Code Storage Lifts the Account Quota, Not the Function Size Limit

Steef-Jan Wiggers — Thu, 30 Jul 2026 07:57:00 GMT

AWS Lambda can now reference deployment packages directly in customer-owned S3 buckets, removing the per-Region code storage quota and raising the managed default from 75 GB to 300 GB. Per-function package limits are unchanged, and UpdateFunctionCode is still required after replacing an object. Terraform provider support remains an open enhancement request.

By Steef-Jan Wiggers

Microsoft Three-Layer LLM Routing Architecture for AI Agents on AKS

Claudio Masolo — Wed, 29 Jul 2026 12:00:00 GMT

Microsoft has released a reference architecture for routing agent traffic on Azure Kubernetes Service. It breaks down the issue into three key choices: which model answers a call, how the call is managed, and which GPU replica handles it.

By Claudio Masolo

Cloudflare Makes Internal DNS Generally Available

Gianmarco Nalin — Wed, 29 Jul 2026 10:30:00 GMT

Cloudflare has launched its Internal DNS service, providing authoritative and recursive DNS for private networks. This service simplifies DNS management by consolidating private and public DNS operations on a single platform.

By Gianmarco Nalin

Presentation: Getting Rid of LeetCode Interviews in the World of AI

Daniel Doubrovkine — Wed, 29 Jul 2026 10:25:00 GMT

Daniel Doubrovkine explains why traditional LeetCode whiteboard interviews fail to evaluate senior engineering talent. He discusses his own experience bombing basic algorithm tests despite decades of leadership, and shares actionable frameworks for redefining the interview loop. Discover how evaluating human judgment, system design, and hands-on AI collaboration yields far better hiring signals.

By Daniel Doubrovkine

Article: Securing MCP in Production: Defense-in-Depth Beyond the Gateway

Nik Kale — Wed, 29 Jul 2026 09:00:00 GMT

This article presents a defense-in-depth approach for securing Model Context Protocol (MCP) deployments in production. It outlines four architectural control layers: safe execution, management infrastructure, outbound trust, and semantic integrity, arguing that production security requires enforcement beyond the gateway at the earliest trustworthy control points.

By Nik Kale

.NET 11 Preview 6 Modernises MAUI CollectionView and Android Shell

Edin Kapić — Wed, 29 Jul 2026 08:00:00 GMT

Microsoft has released .NET 11 Preview 6 with several architectural and reliability improvements for .NET MAUI. The update brings the next-generation CollectionView implementation to Windows, moves Android Shell toward the handler model, improves Native AOT compatibility, and adds recovery support for interrupted media-picker operations.

By Edin Kapić

GitHub Introduces Default "Cooldown" Policy for Dependabot Version Updates

Sergio De Simone — Tue, 28 Jul 2026 19:00:00 GMT

Instead of immediately opening pull requests when newer dependency versions are released, Dependabot now waits three days before suggesting upgrades, thus increasing the likelihood that malicious releases are identified and removed before they can be integrated.

By Sergio De Simone

Grafana Assistant Expands to More Than 30 Data Sources

Craig Risi — Tue, 28 Jul 2026 12:00:00 GMT

Grafana Labs has expanded the capabilities of Grafana Assistant, enabling its AI-powered observability assistant to query and correlate data across more than 30 different data sources through natural language.

By Craig Risi

Presentation: The Future of Engineering: Mindsets That Matter When Code Isn’t Enough

Ben Greene — Tue, 28 Jul 2026 11:10:00 GMT

Ben Greene discusses how software engineers can adapt and thrive in an era of rapid AI code automation. Drawing on his startup experience, he explains key mindsets like starting simple, maintaining code comprehension, attacking hard problems first, and focusing on customer impact. He shares why human empathy, agency, and practical problem-solving remain irreplaceable when code is automated.

By Ben Greene