Google has unveiled AX, a declarative orchestration system designed specifically for agentic AI workloads rather than conventional stateless or batch computing. The project grew out of agentic runtime research from Google DeepMind combined with Google's experience in isolation, resumption, and scheduling at scale, and builds on the existing Agent Substrate framework. AX treats tasks, workspaces, network policies, and models as core primitives so developers can operate large fleets of AI agents without building custom infrastructure.
Go 1.27 introduces specialized memory allocation functions for objects of 80 bytes or smaller, tailored to the runtime's existing size-class system. These functions handle specific size classes and pointer/non-pointer distinctions, letting the compiler skip generic branching logic used in the shared mallocgc path.
Following discussions at RustConf's Unconf event, developer Russell has begun drafting a living document of best practices for writing performant applications on Tokio's async runtime. The post outlines general principles, emphasizing that performance issues are highly context-dependent and that developers should first confirm a real problem exists before optimizing.
GitHub has launched Project HydraFusion, a research preview available through the /experimental flag in GitHub Copilot CLI. Instead of picking one model, HydraFusion builds an execution plan that draws on multiple AI models from different providers, using them to draft, critique, revise, or escalate tasks to stronger models as needed. Developers select it like any other model, and it automatically manages the underlying workflow while charging standard per-model token rates.
As companies deploy AI agents that autonomously execute multi-step tasks across enterprise systems, existing identity and access controls only confirm authentication at login, not whether an agent's behavior remains safe afterward. The piece argues that once agents are authenticated and acting independently, traditional security tools offer little ongoing visibility into their actions.
RealDiff is an open-source tool that compares two Git revisions by actually running their tests, rather than just diffing source code, to catch behavior changes that ripple beyond the files a pull request touched. It builds a noise baseline from repeated base runs, then flags the first divergent behavior in each call tree, supporting analysis across six programming languages including .NET, Java, and Node.js. A demo shows a one-line change from an unstable to a stable sort algorithm silently altering the output of an unrelated pricing engine elsewhere in the codebase.
A security research team investigated repeated crashes in a customer's Go application running on embedded 32-bit ARM Linux systems, which failed with a fatal 'netpoll: eventfd ready for something unexpected' error after long uptimes. Tracing the fault into Go's netpoll_epoll.go code, they found it matched a previously reported but unresolved issue in the Go project's issue tracker involving epoll reporting more than the expected EPOLLIN event.
Kern is a new open-source tool that runs rootless, kernel-enforced containers from a single 1.52 MB static binary, with no background daemon or socket required. It can pull and build OCI images, launch a sandboxed shell in about 3.5 milliseconds, and apply CPU, memory, disk and device limits either inside a sandbox or directly to processes on the host via named resource profiles set in a kern.toml file.
GoKawiil