Try: tag:typescript source:blog -github
59 of 59 activities
An autonomous agent holds an API key, a shell, and the ability to send messages as you — running while you sleep. The security question is not whether it can be jailbroken; it is what the blast radius is when it misbehaves. The controls that make unattended safe.
Part 1 treated AI as a Junior+ teammate you prompt. This is the leap to an agent that runs every 15 minutes with no one watching: the anatomy of an autonomous loop, the model-routing economics that keep it cheap, and the kill switches that keep an unattended agent from doing damage.
A short, honest changelog: what shipped in the @dcyfr/ai v3.x line, what changed for people building on it, and what comes next — catching the blog up with work the package already produced.
After 6 months and 12,000+ AI-assisted code changes, discover the 5 daily workflows that deliver 60% time savings, 75% more features shipped, and zero quality regression. Real patterns, measurable results, and pitfalls to avoid.
New /open-source page showcasing all published npm packages in the @dcyfr/ai ecosystem.
New /ai landing page covering the full framework — plugin architecture, multi-provider support, delegation, CLI, RAG, and code-gen.
Plugin marketplace with trust scoring, audit tracking, TLP classification, and sandbox isolation now live.
Eight adversarial security scenario mitigations (CS2–CS10) shipped: HMAC identity verification, TLP clearance enforcement, rate limiting, content policy scanning, chain depth guards, and reputation-gated access.
Plugin catalog launched with trust scoring engine, audit trail, TLP classification, Docker sandbox isolation, and automated CVE scanning.
Introducing RIVET: a systematic framework for enhancing blog content with 8 interactive components. Real implementation data from 4 blog posts with 181 component instances, 97 passing tests, and measurable engagement improvements.
Real-time monitoring via Axiom — request traces, Web Vitals, delegation events, and automation logs all stream to structured datasets.
Delegation framework with reputation engine, SLA contracts, TLP clearance enforcement, and 8 security scenario mitigations shipped to npm.
Code generation toolkit for structured TypeScript, tests, and documentation scaffolding published to npm.
On January 13, 2026, Node.js released security patches for 8 vulnerabilities (3 HIGH, 4 MEDIUM, 1 LOW) affecting all active release lines. This post breaks down each CVE, explains who is affected, and provides actionable remediation guidance.
OWASP's first Top 10 for Agentic Applications (2026): Learn the 10 critical security risks facing autonomous AI systems—from goal hijacking to rogue agents. Expert analysis with real-world CVEs and mitigation strategies.