Latest

6/recent/ticker-posts

Header Ads Widget

Terraform Auto-Apply ๐Ÿช, Fable on AWS ☁️, Infinite Cardinality Metrics ๐Ÿ“

Terraform plans can be auto-applied safely when they pass deterministic policy-as-code checks instead of relying on rushed human reviews ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌  ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ 

TLDR

Together With Buildkite

TLDR DevOps 2026-06-12

You're now building at a scale that deserves a pro-tool. (Sponsor)

Other CI platforms make you compromise on flexibility, speed or scale.

Need 1,000 concurrent runners? 10,000? 100,000+? Done. Buildkite runners live on your infra, ours, or both. Parallelize, fan-out and orchestrate to depths a faster runner can't reach.

With Buildkite, you get pipelines across any language or cloud, flaky-test detection with auto-quarantine and test splitting, artifact management to cache dependencies and secure your supply chain, and agentic components like first-party MCP and universal pipeline triggers.

Try the 30-day all-access trial. No credit card. Real engineer on standby. Start building →

๐Ÿ“ฑ

News & Trends

Anthropic Claude Fable 5 on AWS: Mythos-class capabilities with built-in safeguards now available (4 minute read)

Anthropic's Claude Fable 5 model has launched on Amazon Bedrock and Claude Platform on AWS. Featuring state-of-the-art performance across software engineering and knowledge work while automatically routing potentially harmful prompts about cybersecurity, biology, chemistry, and health to the older Opus 4.8 model, the model is now available in US East (N. Virginia), and Europe (Stockholm) regions, though accessing it requires opting into a 30-day data retention and human review policy through Amazon Bedrock's Data Retention API.
Agent Substrate Can Power Agents on Kubernetes with kagent (16 minute read)

Solo.io announced its collaboration with Google on the Agent Substrate project, an open-source solution for running sandboxed AI agents on Kubernetes that can scale to zero, suspend idle agents to storage, and resume them in 50-200ms while packing multiple agent instances into single pods with strict tenant isolation. The company was preparing to open-source its own similar technology—which used Bubblewrap, Landlock, seccomp, and optional Firecracker microVMs—when it discovered Google's overlapping architecture and decided to combine efforts instead.
๐Ÿš€

Opinions & Tutorials

How formal verification makes AWS Nitro the first formally verified cloud hypervisor (7 minute read)

The new AWS Nitro Isolation Engine provides mathematically verified isolation between EC2 virtual machines and ships as an always-on feature for Graviton5 users. Its critical isolation logic runs through a small Rust-based separation kernel verified with Isabelle/HOL, ฮผRust, Separation Logic, and 330,000 lines of machine-checked proofs covering confidentiality, integrity, functional correctness, runtime safety, and memory safety.
Formal methods and the future of programming (8 minute read)

Jane Street is building a formal methods team because agentic coding has changed the cost-benefit tradeoff for software verification. AI agents can now generate useful code quickly, but they also tend to produce overly complex code with subtle bugs and missed invariants, making formal methods more attractive as both a verification tool for human reviewers and a feedback mechanism that helps agents produce safer, higher-quality code.
Safe Terraform auto-apply with conftest (4 minute read)

Terraform plans can be auto-applied safely when they pass deterministic policy-as-code checks instead of relying on rushed human reviews or non-deterministic AI judgment. Exporting Terraform plans as JSON and evaluating them with conftest/Rego lets teams define explicit rules for safe changes, such as allowing only creates, limiting blast radius, restricting resource types, or gating production changes for human review.
๐Ÿง‘‍๐Ÿ’ป

Resources & Tools

AgentsView (GitHub Repo)

AgentsView launched as an open-source tool that tracks costs and usage across more than 20 AI coding agents including Claude Code and Codex, running entirely locally with no accounts required and claiming to be 100x faster than existing tools like ccusage by indexing session data in SQLite. The tool auto-discovers agent sessions on your machine, provides a web UI for browsing token consumption and compute costs, and supports optional PostgreSQL or DuckDB backends for team dashboards while keeping all data local by default.
SkillSpector (GitHub Repo)

SkillSpector, a new open-source security scanner, helps users detect vulnerabilities and malicious code in AI agent skills before installation, addressing research findings that 26.1% of skills contain vulnerabilities and 5.2% show likely malicious intent. The Apache-licensed tool uses a two-stage detection pipeline with LLM-powered semantic analysis and pattern matching to identify 64 vulnerability types across 16 categories, integrating with the OSV.dev database to check dependencies against thousands of known security advisories.
๐ŸŽ

Miscellaneous

How We Moved Discord Voice to the Edge (12 minute read)

Discord migrated over 80% of its voice and video traffic from traditional cloud providers to Cloudflare's 300+ city network, resulting in quality improvements across 70% of regions with Frankfurt seeing 34% lower ping and 42% less packet loss. The year-long migration required building custom infrastructure to handle Cloudflare's ephemeral container architecture and solving tricky issues like ISP peering bottlenecks in France, NIC queue contention that initially forced them to halve server density, and mysterious latency spikes in Europe that turned out to be a combination of event loop starvation in their Rust code and CPU scheduling conflicts with network interrupt handling.
Software Is Made Between Commits (3 minute read)

DeltaDB is a version-control system that records every operation between commits so code changes and the conversations that produced them stay linked over time. It gives each fine-grained delta a stable identity, supports conflict-free replicated worktrees for multi-user and multi-agent editing, and lets developers trace any line of code back to the agent or teammate conversation that created or changed it.

Quick Links

They have 10x the uptime SLA of the nearest workload automation competitor (Sponsor)

4 billion SaaS executions per year, 99.95% uptime SLA, and no infra costs for agents, databases, or VMs. No wonder why >50% of the Fortune 50 trust Redwood. Get a Demo
Infinite Cardinality Metrics: Custom metrics built for modern systems (4 minute read)

Datadog's Infinite Cardinality Metrics is a new pricing model that charges custom metrics by metric name rather than the number of unique time series created by tag combinations, allowing engineers to add unlimited dimensions without worrying about exponential cost increases.
Now available: Amazon EC2 M9g and M9gd instances powered by new AWS Graviton5 processors (5 minute read)

Amazon EC2 M9g and M9gd instances, powered by Graviton5 processors, deliver up to 25% better compute performance than Graviton4.
Static types and shovels (3 minute read)

Static typing became more useful as mainstream type systems improved from verbose, low-value “paper shovels” into modern systems with nullability, sum or union types, and type inference.

Love TLDR? Tell your friends and get rewards!

Share your referral link below with friends to get free TLDR swag!
Track your referrals here.

Want to advertise in TLDR? ๐Ÿ“ฐ

If your company is interested in reaching an audience of devops professionals and decision makers, you may want to advertise with us.

Want to work at TLDR? ๐Ÿ’ผ

Apply here, create your own role or send a friend's resume to jobs@tldr.tech and get $1k if we hire them! TLDR is one of Inc.'s Best Bootstrapped businesses of 2025.

If you have any comments or feedback, just respond to this email!

Thanks for reading,
Kunal Desai & Martin Hauskrecht


Manage your subscriptions to our other newsletters on tech, startups, and programming. Or if TLDR DevOps isn't for you, please unsubscribe.

Post a Comment

0 Comments