San Francisco, CA
Joined July 2010
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
Didn’t Google just blog about how they solve this today? cloud.google.com/blog/topics… Secrets are kept entirely out of the agent sandbox. A security proxy injects credentials when needed. The “secure proxy” route to secure agent infra and secrets seems to be a popular pattern.
Is anyone solving how we give secrets/passwords to agents in a way that doesn't expose them to the upstream provider? It seems like codemode could be used to pass the tokens around and you'd only need to approve it for where the token is actually consumed
8
11
1
170
9,487
Replying to @umachingunde
Nope, both were US bound. Gate K was direct flight to SF, which I ended up missing. Got rebooked on the Seattle flight, and had to transfer to Gate M. I have TSA Pre/Global Entry in the U.S., so this is never an issue for domestic flights.
1
82
Replying to @sampullara
Missed my direct flight to SF as the incoming flight was delayed, so Delta rebooked me via Seattle, and had to change gates again.
2
187
Replying to @Sadhak_07
The real challenge is to make sure I cite all my sources correctly. My config has been evolving over months, and I haven’t been meticulous about tracking where most of the ideas I borrowed came from. Making it public without proper attribution doesn’t sit right with me.
1
2
389
Replying to @SeanTAllen
It means I look at every line of code. Often this involves just a perfunctory glance, but I’m more concerned about the general shape of things, as it were, as opposed to obsessing over the minutiae (like variable names).
1
1
9
507
The reason I still review every line of code despite encoding all the software engineering best practices in my agentic workflow, is because sometimes it’s the *exceptions* to these generalized rules that work best. The agent isn’t discerning enough to make these calls (as yet)
I've been reviewing a lot of code written by Opus 5.5, and it still seems to make a lot of bad software engineering decisions. The kind that will accumulate/calcify into unmaintainable software over time. IMO even the agents will struggle to maintain vibecoded software.
15
3
235
10,438
At Paris CDG, Terminal 2E, security check: Gate K: no need to take your electronics out Gate M: take all your electronics out and put it in a tray Me: I wasn’t asked to do it in Gate K Security: Gate K is Gate K, Gate M is Gate M Never seen this in any other airport. 😕
19
59
6,511
Cindy Sridharan retweeted
I came back to Google to work on AI infra. Instead we got pulled in to solving the problem of exploding use of agents across the company. Announcing Agent Compute Engine: bringing planet scale agentic infra to Google services and now to Google Cloud. cloud.google.com/blog/topics…
30
56
10
691
47,113
Well then. I guess I have to read this for real, haven’t I?
1
1
57
Replying to @MarcJBrooker
Speaking of metastable failures, one of the longest open tabs in my browser is this. Yet to read the post, but wonder how much of this methodology overlaps with what you did for Aurora. Only way to find out is to get around to reading the literature. arxiv.org/pdf/2606.00942
1
5
231
I found this unpublished blog post from 6y ago (look at the hand drawn diagram lol). I’d totally forgotten about this, but the key ideas here (embracing non-determinism as a first class citizen via “error kernel” centric design etc) work super well as guidelines for my agents.
3
7
1
159
7,095
Replying to @rae1101x
The change in question came from a refactor. I have a separate “parity test” suite for any and all refactoring, and those have proven very good at preventing bad regressions, both for refactors involving code reorganization, code modifications, and code deletions.
4
454
Replying to @RKV2401
There’s some overlap, but I’ve also been using new ideas for testing code not covered in the testing series, like getting agents to deliberate plant bugs at every layer and see how tests behave, mutation testing etc; which are new (to me) techniques I haven’t covered before.
4
381
Replying to @CharchrisSloan
Integration tests are great, but they don’t replace unit tests; they come later in the process, whereas bugs that can be caught by a good unit test should be. It allows for speedier iteration. As for the guidelines, I’ll try to make my Claude config public, including testing.
1
22
668
We’ll still need end to end tests, and frankly, we’re going to need all the forms of testing I’ve been talking about for a decade. But “unit tests are now slop” doesn’t have to be the foregone conclusion. Unit tests can be very useful even if a human will never again read them.
Updated my testing taxonomy to include formal verification. Some book recs too. Model checking, fuzzing, property based testing, sanitizers and static analysis are some of the most powerful tools one can use in the "pre-production" phase. Also, are "types" a form of testing? 🤔
4
1
56
3,253
5 months and many experiments later, this was totally a case of “skill issue” on my part 😅 Like with code, agents don’t magically write great tests If your unit tests are slop (as mine were), that’s because you don’t have proper testing guidelines for your agents (as I didn’t)
end-to-end testing > unit tests, in the vibecoding era. A massive, almost entirely agent-coded refactor passed all unit and pre-merge tests but broke a critical feature. It was only caught due to my own excessive paranoia making me run end-to-end tests before the prod deploy.
24
9
1
386
19,179
Replying to @treatyoma
Truly, she’s one of the vilest. Just astonishingly and unfailingly awful. She admits she gets a torrent of racist abuse, but engages in it herself. Despicable piece of shit. She and Indian_Bronson, both cut from the same cloth.
1
13
1,353
Replying to @guraya_parneet
I don’t know if I’m the best person to answer this. Build new stuff. There’s still a world of software that’s yet to be built. Start with any tool you use, and see how you can make it better. Ideas are cheap to try out. The more you do, the better you get at picking better ideas.
1
2
113
Replying to @vegardstikbakke
lol, I refuse to pay for this app, so typos shall remain. It’s also how you know I’m rawdogging every tweet myself, rather than get AI to write it (which I learnt is a thing, esp with ultra long tweets some influencers and execs post)
1
10
767
Unfinished coding side projects are now way easier to complete than unfinished blog posts. I’m perfectly OK with AI writing my code, even the docs. But I flinch at the idea of AI writing my blog posts, which feels like an egregious violation of a fundamental ethnical contract.
27
31
3
626
13,158