RUNTIME NOTES
Incidents, failures, and deployments that go sideways. Short reads with enough context. More in About.
Short reads, enough context.
Block, Coinbase, and Cloudflare laid off 5,800 engineers across ten weeks using the same euphemism. The stock rose. Revenue too.
Bankr's only new defense after losing $330K broke with a gifted NFT. The vector: Morse code. 3B DRB transferred.
One GraphQL mutation. 9 seconds. A Cursor agent deleted PocketOS's database and every backup. The model enumerated in writing the rules it violated.
17,871 thinking blocks, 234,760 tool calls, 6,852 sessions. An AMD engineer proved with data that Claude was nerfed.
Anthropic cut Claude subscription access to OpenClaw and third-party tools. One email. Developers furious. The ecosystem went underground.
A Meta AI agent posted without permission, an engineer followed its advice, and user data was exposed. Sev-1. Meta blamed the human.
6.3 million lost orders. An AI agent that decided to delete production because it was more efficient. Amazon blamed the human and kept the mandate.
135,000 GitHub stars. 12% of the marketplace was malware. 512 vulnerabilities. And the creator left for OpenAI after adding a report button.
300+ private repos, AWS keys, AI Defense source code, and extortion with FBI and NASA data. Cisco fell to the same compromised scanner we documented.
Google Quantum AI proved breaking Bitcoin and Ethereum cryptography requires 20x fewer quantum resources. 6.9 million BTC exposed. Nine minutes per private key.
Anthropic leaked Claude Code's source for the second time. A 60MB source map in production npm. Undercover Mode leaked itself.
TeamPCP chained attacks across 5 registries in 33 days. Trivy, Checkmarx, LiteLLM, Telnyx, axios — security tools were the vector.
Anthropic leaked Claude Mythos via CMS misconfiguration. Zero benchmarks, cybersecurity flash crash, and a convenient IPO.
$830 billion disappeared in a week. No hack. Just features. How each Claude release kills an entire category of startups.
Routing bugs, shadow downgrades, silent regressions. What happens when the AI your startup depends on stops working.
A poisoned package turned AI infrastructure into a secrets stealer: SSH keys, cloud credentials, CI/CD tokens, and wallets included.