Two critical advisories landed a week before Next.js 15's support window closed. A written patch policy turns the next one into a routine upgrade instead of a scramble.
Uber and Microsoft both capped per-engineer AI spending in 2026 after burning through annual budgets in months. A smaller number doesn't stop one run from looping for hours. An execution pattern borrowed from site reliability engineering does.
Shai-Hulud showed the pattern. Here's the concrete playbook for keeping a self-replicating worm out of your dependency tree.
Tool definitions load into context before an agent does anything. Code execution and progressive disclosure are how teams are getting that budget back.
Middle management is flattening industry-wide. What survives of engineering management is splitting into two tracks that need almost opposite skills.
Prompts drift. A versioned spec is how teams are catching it before it ships.
A framework for deciding how many agents one engineer can actually run at once.
The native compiler is 8-12x faster. The programmatic API isn't ready yet, and that's where teams get burned.
A framework for staff engineers directing several agents at once, not just reviewing what one of them wrote.
A framework for growing junior engineers now that AI has automated most of the entry-level workload.