Find published dossiers by topic, company, product or technology.

Showing 101–120 of 123 dossiers

TRACE gives AI agents a portable, hardware-attested runtime evidence format

TRACE targets a gap between audit promises and what an AI agent actually did at runtime. Its v0.2 developer preview can bind model, policy, data and tool-use claims to confidential-computing attestation, but it is still pre-ratification and explicitly not ready to treat as a production compliance guarantee.

Supabase makes MCP access centrally governed through enterprise SSO

Supabase has implemented MCP Enterprise-Managed Authorization using identity-provider assertions, short-lived tokens and existing Supabase role boundaries. It gives organizations a central on/off switch for approved AI clients while keeping access scoped to the individual employee rather than sharing a powerful organization token.

Cloudflare Workers now enables Node.js compatibility by default for new compatibility dates

Cloudflare has inverted a long-standing Workers assumption: Node.js compatibility is now on by default for current compatibility dates. That reduces setup friction for many npm packages, but it also means developers need to understand compatibility-date boundaries, partial APIs and explicit opt-out flags.

AWS is acquiring DuckLabs while DuckDB stays under independent foundation stewardship

The DuckLabs deal separates company ownership from project governance: AWS gets the team behind DuckDB, while the DuckDB Foundation keeps stewardship and the MIT license stays in place. Builders should watch whether that separation remains meaningful as AWS integrates the Duck Stack into its analytics services.

Supabase fixes broken client trace propagation and now preserves trace IDs even for unsampled requests

supabase-js 2.112.3 materially improves the tracing rollout BTN covered earlier: unsampled requests now still carry traceparent for backend log correlation, tracing misconfiguration produces warnings, and browser Edge Function calls need current CORS headers to admit W3C trace context.

VS Code is moving coding agents into a standalone host with shared AHP sessions

Microsoft is rearchitecting VS Code around a dedicated Agent Host rather than treating each coding agent as an editor-bound extension. AHP gives different harnesses one shared session model, but the rollout is still active and VS Code 1.132 removed the administrator policy that had centrally disabled the Agent Host.

ChatGPT Atlas can still surface blocked URLs unless publishers use noindex

Blocking OAI-SearchBot is not a complete removal signal for ChatGPT Atlas. OpenAI says a disallowed page can still appear as a link and title when the URL is learned elsewhere and judged relevant; publishers that want to suppress that result need a crawlable noindex directive, while GPTBot remains the separate training control.

AWS Lambda can now reference deployment packages directly from your S3 bucket

AWS has added a `REFERENCE` mode for Lambda deployment packages. It eliminates duplicate managed copies, raises the default managed-storage quota to 300GB, and gives teams direct control over encryption, lifecycle and audit policy—but a deleted or inaccessible source object can now make a function inactive.