AI Coding Weekly

Vercel's security agent patched 14,665 bugs in a week

Guillermo Rauch says Vercel Security Review flagged 57,897 vulnerabilities across customer repos in under a week, 6,029 of them critical or high, and the agent already patched 14,665 of them.

Receipts

Vercel's security agent: 57,897 found, 14,665 patched in a week

Guillermo Rauch posted one week of Vercel Security Review numbers: 57,897 vulnerabilities identified, 6,029 critical or high, 14,665 already patched by the agent. That is up from 6,817 found and 1,411 patched in the first 24 hours. He says it works on any repo regardless of where you deploy.

Guillermo Rauch
@rauchg
X
I'm shocked at ① the number of critical vulnerabilities that would go unnoticed and ② the ease at which the agent automatically fixes them.
Nov 10, 2026 · View on X

Read the full story

How they actually work

Matt Pocock runs every agent from one "home repo"

Matt Pocock's answer to working across multiple repos is a single home repo holding all his skills, steering files and wiki, where he launches every agent. Its AGENTS.md carries plain-language pointers to the others, like "For skills, clone mattpocock/skills to ~/repos/skills." He says it gives one place for tooling and a way to make sweeping changes across repos.

Read the full story

Model and agent watch

Theo got early access to Gemini 4 Carbon, then rewrote his take

Theo says he was not super impressed with Gemini 4 Carbon overall on early access, then ran a few more tests while prepping to film and found he had missed some things. He says the video will not be going how he initially planned, without saying what changed. Separately he called Fable 5.2 the greatest model ever released.

Theo - t3.gg
@theo
X
Did a few more tests as I was getting ready and...I missed some things.
Nov 11, 2026 · View on X

Read the full story

Built from 509 posts by the engineers, language designers and agent builders we follow on X over 1 days.

Get the next one by email

Coding with AI, read daily so you do not have to. The experiments, the receipts and the arguments from engineers shipping real software. Not a changelog.