Morning.dev

DEV Community • 2026-07-31 00:50

PIVOT Explained — From Paper to Working Code in 10 Minutes

You enabled sparse attention. Your model still chokes at 128K tokens. The indexer is why — and PIVOT fixes it without touching your weights. TL;DR Sparse attention's indexer scores all L tokens per query → still O(L²) PIVOT groups nearby queries (which select ~90% overlapping top-k tokens), runs one proxy scan per group → O(L²/g) Result: 4× indexer speedup, 1.6× end-to-end latency red...

0 0

4m read

DEV Community • 2026-07-31 00:48

The $26 Billion Leak: Why Frameworks Are Making Your Codebase Rot (and How Hexagonal Isolation Fixes It)

According to a 2024 vFunction survey, over 50% of companies watch more than a quarter of their entire IT budget vanish into technical debt. This isn't happening because developers are bad at writing code. It's happening because our architectural boundaries are eroding. We're letting business rules bleed into database models, and HTTP controllers bleed into core logic. The primary culprit? Modern...

0 0

7m read

DEV Community • 2026-07-31 00:38

When a Successful Payment Still Couldn't Schedule a Zoom Meeting

This is a submission for DEV's Summer Bug Smash: Smash Stories powered by Sentry. A payment webhook sounds simple until a successful payment doesn't actually result in the service the customer paid for. That was one of the more interesting bugs I encountered while building The Listening Ear, an appointment and online consultation platform. The requirement was straightforward: A customer pays ...

0 0

8m read

DEV Community • 2026-07-31 00:34

Restaurant Health Inspection Data by City: APIs and Traps

Most large US cities publish restaurant inspections through the same Socrata Open Data API. That uniformity is a trap. The transport is identical; the column names, the score polarity, the row granularity, and the update cadence are not. This guide lists seven municipal datasets and the specific failure modes I hit while querying every one of them live on 2026-07-20. Every number, column name, an...

0 0

11m read

Reviving the Tessel 2 - The Boards in the Drawer

Posts on LINQ to Fail • 2026-07-31 00:30

Reviving the Tessel 2 - The Boards in the Drawer

When I first joined Microsoft, I was doing a lot with JavaScript and hacking around a bit with IoT. Because of this, one of my colleagues sent me a box of Tessel 2 boards and sensors they had lying around. I had never heard of Tessel before, but I was intrigued by the idea of a microcontroller that could be programmed in JavaScript (I’d dabbled a bit with that using NodeMCU in the past). I d...

0 0

5m read

🚤OS July 2026 Recap: From Being Intimidated by GitHub Actions to Building My Own CI Workflows

DEV Community • 2026-07-31 00:29

🚤OS July 2026 Recap: From Being Intimidated by GitHub Actions to Building My Own CI Workflows

When I first started contributing to open source, GitHub Actions felt like a black box. Seeing a failed workflow on my pull requests was intimidating because I didn't really understand what was happening behind the scenes. Well, this month, I decided to change that. What I Worked On I implemented GitHub Actions across three of my project repos. My main focus was: Adding Markdownl...

0 0

1m read

DEV Community • 2026-07-31 00:25

Image verification, one layer below admission

Every admission webhook you rely on has an escape hatch. Nothing scandalous about that, it is just how Kubernetes wires them up. A CNCF post on July 30 pitches a way out: move signature and attestation checking out of the API server and into the container runtime itself, via a Node Resource Interface plugin. The pitch, in one paragraph. The Supply Chain NRI Plugin hooks CreateContainer events on ...

0 0

2m read

DEV Community • 2026-07-31 00:24

CISA KEV catalog: a working sysadmin's guide to actually using it

Most enterprise teams know the CISA Known Exploited Vulnerabilities catalog the same way they know the weather: a headline scrolls past ("CISA adds three vulnerabilities to KEV catalog"), someone forwards it, and everyone nods. That is a waste of the single most operationally useful list in vulnerability management. The KEV is small, machine-readable, updated near-daily, and every entry on it has ...

0 0

11m read

DEV Community • 2026-07-31 00:23

Stopping Runaway AI Loops: Implementing Enterprise FinOps and Observability with PolicyAware

Autonomous agents don't just fail loudly—they fail expensively. A single misconfigured retry loop between an agent and an LLM can generate thousands of redundant tool calls and API requests before anyone notices, turning a minor logic bug into a five-figure cloud bill. PolicyAware is built to be the operational safety net that catches this class of failure before it reaches your finance team's das...

0 0

6m read

DEV Community • 2026-07-31 00:22

Why your company's search bar can't find the answer that's right there

On a Tuesday morning in March, a chief executive asked a question that should have taken thirty seconds to answer: have we ever agreed to a liability cap below one million dollars? The answer existed. It was written down, signed, filed, and sitting on the shared drive the whole time. Finding it took three days, and not finding it in time cost forty thousand dollars. Every organization has a vers...

0 0

4m read

DEV Community • 2026-07-31 00:15

50 headline prompts that don't sound like AI wrote them

Ship log — first $3 in 3 days (or learn what fails) Aimed at fellow indie hackers: I'm running a "first $100" experiment. One pack, one platform, full learnings shipped. Here's what worked, what flopped, and what I changed. Day 0 — packaging Built headlines-no-ai-wrote, $3, single markdown file + JSON mirror. Stack: Gumroad for checkout, just markdown for delivery. Why ma...

0 0

1m read

DEV Community • 2026-07-31 00:12

Quantified Self: Stop Waiting for Excel! Build a High-Performance Biometric Dashboard with DuckDB & Apache Superset

Are you a "data hoarder" when it comes to your health? Between Apple Health exports, Oura Ring logs, and Garmin CSVs, I found myself sitting on nearly 10 million rows of biometric data. Trying to analyze a multi-year trend of Heart Rate Variability (HRV) or Resting Heart Rate (RHR) in Excel is a one-way ticket to "Application Not Responding" hell. 📉 In this tutorial, we are diving into the world ...

0 0

4m read

DEV Community • 2026-07-31 00:11

Your link checker thinks deleted Telegram bots are alive

Delete a Telegram bot and https://t.me/your_deleted_bot keeps returning HTTP 200 with a page that looks completely normal. Every link checker I know of — CI actions, directory scripts, monitoring cron jobs — reports it as healthy forever. If you maintain anything that lists Telegram bots, some fraction of your list is already dead and your checks are telling you it is fine. Reproducing i...

0 0

4m read

DEV Community • 2026-07-31 00:05

tinyNpm - A security focused package.json version keeper extension for VS Code

I had been using package.json version keepers for quite some time but after the big supply chain attack i thought they would be the perfect place to add in some security. The idea is just to provide the latest package number x days old. This will help prevent most of the danger in supply in chain attacks. It will also remove the ^ if you have it so you can better control what version of a packag...

0 0

1m read

DEV Community • 2026-07-31 00:03

How I Decide What to Build Next at a One-Person Studio

Every idea gets run through a one-sentence test before it is allowed to count as a real idea at all Most ideas die for one of three specific reasons, not vague lack of enthusiasm An idea only earns a build slot once it has survived contact with a real, repeated problem A maybe-later list holds the rest on purpose, and I check it far less often than people assume The One-Sentence Test I...

0 0

9m read

DEV Community • 2026-07-31 00:03

All software engineers are now QAs

At the start of June 2026, Anthropic published a statistic that was controversial. Most of what Anthropic says publicly generates a large number of cynical comments, so make of that what you will. The quote and statistic were that 80% of Anthropic's code is generated by Claude. Even up to 90% for new features. What was interesting about this was that a) it's actually totally insane and b) it made...

0 0

4m read

DEV Community • 2026-07-31 00:02

Why Anthropic Just Endorsed a Plan to Pace AI

Anthropic and OpenAI both endorsed a new letter called Pacing the Frontier on July 28, asking Washington to help build tools for a deliberate, verifiable AI slowdown, not an immediate pause Over 1,100 employees signed within a day, including Anthropic CEO Dario Amodei and several co-founders, plus senior researchers at OpenAI, Google DeepMind, and Meta The letter leans on Anthropic's own June res...

0 0

8m read

DEV Community • 2026-07-31 00:02

Transitioning from Python to Rust or Go: For Which Workload?

Python's rapid development capabilities and rich ecosystem make it the starting point for many projects; however, when performance limits are reached in CPU-bound workloads or high-concurrency systems, the appeal of languages like Rust or Go increases. This transition decision typically arises to address existing system bottlenecks, achieve higher efficiency with lower hardware costs, or meet spec...

0 0

10m read

DEV Community • 2026-07-31 00:00

JWT Auth Without the Confusion

What JWT Actually Is JWT (JSON Web Token) is a compact, URL-safe way to transmit claims between two parties. It's not a magic security solution. It's a token format: three base64url-encoded segments separated by dots (header.payload.signature). header: {"alg":"HS256","typ":"JWT"} payload: {"sub":"user123","iat":1700000000} signature: HMACSHA256(base64url(header)+"."+base64url(payload...

0 0

2m read

DEV Community • 2026-07-31 00:00

hermes-memory-installer: Memory Sidecar v3.5.1

Memory Sidecar v3.5.1 is an operational hardening release for the public agent‑agnostic memory layer. If you already use the sidecar pattern to give your AI agents robust, persistent memory without coupling them to a specific framework, this update focuses on making that infrastructure more resilient in production. The accompanying hermes-memory-installer gets targeted improvements to match. ...

0 0

3m read