• What a signature proves: a supply chain attack that carried valid provenance

  Provenance proves which commit a package was built from, not that the commit was authorized.

• A compiler ten times faster, an ecosystem one version behind

  TypeScript 7 is measurably fast and just as measurably incomplete: 7.0 ships without a programmatic API.

• The article that was not postponed: the part of the AI Act that lands in the interface

  The high-risk timetable moved to 2027 and 2028; the transparency obligations took effect on 2 August 2026.

• Green-gate blindness: four defect classes tests cannot see

  Defects that ship with every gate green, and the measurements that pay for them.

• What a Suspense boundary is worth: 5014 ms against 14 ms

  The measured cost and gain of keeping content off the boot critical path.

• The 5015 ms a browser cannot see: metadata that is never streamed to bots

  A five second delay that appears only when the request comes from a bot.

• Handing a rule to the compiler: the mutation 2347 tests could not see

  Which rules move into the type system, and which only a test can hold.

• 22693 bytes down to 15986: when payload size is the only detector

  With every gate green, only the byte count said the bodies were never delivered.

• 30.08 ms and 10.31 ms on the same tree: measuring is harder than fixing

  Machine load can exceed the difference being measured, and tools can lie too.

• 1.06 GB of wallpapers, 27 KB on screen

  From source to derivative to the bytes on screen: measuring an image pipeline.