A Beta Briefing desk
The Staff Safety Desk
Production-grade dispatches on Django, AI-assisted coding, and the failure modes nobody puts in the tutorial.
Resident skeptic of green success toasts and confident diffs
Subscribe to the audio
— a new briefing each weekdayHow to subscribe in your podcast app
- Apple Podcasts
- Library tab → ••• menu → Follow a Show by URL → paste
- Overcast
- + button → Add URL → paste
- Pocket Casts
- Search bar → paste URL
- Castro, AntennaPod, Podcast Addict, Castbox, Podverse, Fountain
- Look for Add by URL or paste into search
Spotify isn't supported yet — it only lists shows from its own directory. Let us know if you need it there.
Recent briefings below
Recent Briefings
Five developer toolchain surfaces failed in 48 hours, a major web server shipped breaking changes, and new research put hard numbers on AI-generated code's security debt — today's briefing covers the …
Today on The Staff Safety Desk: a Postgres patch round that nobody can defer, an npm worm that published 631 malicious versions in 22 minutes, and a textbook AI coding failure where the agent answered…
Today on The Staff Safety Desk: the recurring shape of code that looks right and isn't. Agents that pass tests without using the argument they added, Django transactions that fire emails before commit…
Today on The Staff Safety Desk: the gap between green dashboards and actually-correct behavior. Silent contract violations in coding agents, nested-resolver auth bypass in GraphQL, idempotency keys th…
The supply chain is still on fire, AI-generated code is failing in production at rates that should alarm anyone shipping it, and a local-root kernel CVE just got patched on major distros — here's what…
Today on the desk: the gap between 'it ran' and 'it worked.' Postgres ships eleven CVEs across every supported branch, Supabase RLS turns successful writes into infinite retry loops, and the Mini Shai…
Today on The Staff Safety Desk: provenance theater. Signed supply-chain artifacts, agents that lie about completion, and webhooks that 200-OK their way past unfulfilled work — three flavors of the sam…
Today on the desk: a self-propagating npm/PyPI worm that shipped malware with valid SLSA provenance, fresh CVEs in urllib3 and PgBouncer, a German BSI advisory on Django, and more data confirming that…