Join us

ContentUpdates and recent posts about Arti..
Link Xygeni Team
@mashka shared a link, 1 month, 1 week ago
Paid Acquisition and Growth Marketing, xygeni

You don’t have a vulnerability problem. You have a prioritization problem.

Most teams today don’t struggle to find vulnerabilities; they struggle to decide what to fix first. With SAST, SCA, secrets, and CI/CD checks all generating signals, the real challenge is prioritization: what’s actually exploitable, what’s reachable, and what can be fixed without breaking things. Instead of relying only on severity, modern teams are shifting toward risk-based remediation, combining exploitability, context, and stability, while reducing noise across tools and automating safe fixes through PRs. If you’re dealing with alert fatigue or slow remediation cycles, this checklist is a practical starting point → https://go.xygeni.io/ai-driven-remediation-risk-prioritization-checklist

Ai-Driven Checklist
Link
@varbear shared a link, 1 month, 1 week ago
FAUN.dev()

A new chapter for the Nix language, courtesy of WebAssembly

Determinate Nix introduces experimental WebAssembly host calls. It lets Nix invoke Wasm modules, pass and return complex Nix values, and support Rust, C++, and Zig toolchains. It runs on Wasmtime/Cranelift and slashes runtime and memory: Fibonacci test 0.33s vs 79.33s, 30MB vs 4.5GB. Per-call instan.. read more  

A new chapter for the Nix language, courtesy of WebAssembly
Link
@varbear shared a link, 1 month, 1 week ago
FAUN.dev()

Using Rust and Postgres for everything: patterns learned over the years

Rust and PostgreSQL are considered the best tools in the software world due to their performance and reliability. Rewriting a backend service from Go to Rust led to significant improvements in processing speed and memory usage. Using sqlx for database operations and leveraging PostgreSQL features li.. read more  

Link
@varbear shared a link, 1 month, 1 week ago
FAUN.dev()

I built a programming language using Claude Code

Cutlet usesClaude Code. The LLM emits every line. Source, build steps, and examples live on GitHub. It runs on macOS and Linux and ships aREPL. It supports arrays, strings, double numbers, a vectorizingmeta-operator, zip/filter indexing, prototypal inheritance, and a mark-and-sweepGC. Development ra.. read more  

Link
@varbear shared a link, 1 month, 1 week ago
FAUN.dev()

Why value streams and capability maps are your new governance control plane

The piece flips enterprise AI fromgenerativetoagentic. Agents getstructured autonomyto perceive, plan, and execute across systems. It turnsvalue streammaps into a control plane withautonomy zones,halt-on-exceptiongates, cryptographicflight recorders, andpolicy-as-code. Result: less hallucination and.. read more  

Why value streams and capability maps are your new governance control plane
Link
@varbear shared a link, 1 month, 1 week ago
FAUN.dev()

Cracking the Python Monorepo

Outlines a Python monorepo setup that pairsuvworkspaces withDaggerandBuildKitcaching. Builds container stages programmatically. Keeps things cache-friendly and predictable. Parsespyproject.tomland extracts the workspace graph. Copies required local packages into intermediate stages. Installs them in.. read more  

Link
@kaptain shared a link, 1 month, 1 week ago
FAUN.dev()

Running Agents on Kubernetes with Agent Sandbox

Agent Sandbox unveils the Sandbox CRD to map long-lived, singleton AI agents onto Kubernetes. It adds stable identity and lifecycle primitives. It supports runtimes like gVisor and Kata Containers. It enables zero-scale resume. It includes SandboxWarmPool with SandboxClaim and SandboxTemplate to kil.. read more  

Link
@kaptain shared a link, 1 month, 1 week ago
FAUN.dev()

Securing Production Debugging in Kubernetes

The post prescribes an on-demand SSH gateway pod. It usesshort-lived, identity-bound credentialsandKubernetes RBACto grant scoped, auditable debug sessions. It recommends anaccess brokerthat binds Roles to groups, issues ephemeral certs and OpenSSH user certificates, rotates CAs, enforces command-le.. read more  

Link
@kaptain shared a link, 1 month, 1 week ago
FAUN.dev()

The Invisible Rewrite: Modernizing the Image Promoter

SIG Release rewrote theimage promotercore. It cut 20% of the code. It added apipeline engine,cosignsigning, andSLSAattestations. Signing now sits separate fromsignature replication. Registry reads run in parallel - plan time dropped ~20m → ~2m. Per-request timeouts, retries, and HTTP connection reus.. read more  

Link
@kaptain shared a link, 1 month, 1 week ago
FAUN.dev()

Kubernetes v1.36 - Sneak Peek

Kubernetes v1.36 (Apr 22, 2026) enablesHPAScaleToZeroby default. That lets theHPAuseminReplicas: 0and read only controller-owned pod metrics. The release swaps long-lived image-pull secrets forephemeral KSA tokens. It deprecatesIPVS, retiresIngress NGINX, and aligns withcontainerd 2.x. The release f.. read more  

Arti is an official Tor Project initiative to rewrite the Tor client stack in Rust. Its primary goal is to address long-standing safety, reliability, and maintainability challenges inherent in the legacy C-based Tor implementation. By leveraging Rust’s strong compile-time guarantees for memory safety and concurrency, Arti eliminates entire classes of bugs that have historically affected Tor, including many security vulnerabilities.

Arti is architected as a modular, embeddable library rather than a monolithic application. This makes it easier for developers to integrate Tor networking capabilities directly into other applications, services, and platforms. From its earliest versions, Arti has supported multi-core cryptography, cleaner APIs, and a more maintainable internal design.

While early releases focused on client functionality such as bootstrapping, running as a SOCKS proxy, and routing traffic over the Tor network, the long-term roadmap includes full feature parity with the existing Tor client, support for onion services, anti-censorship mechanisms, and eventually Tor relay functionality. Arti represents the future foundation of the Tor ecosystem, prioritizing long-term security, developer velocity, and adaptability.