InfoQ

Google has open-sourced Mantis, an AI-agent framework designed to automate the software vulnerability lifecycle, from identifying and validating vulnerabilities to reproducing and fixing them. Google says it developed Mantis to address the high rate of false positives and hallucinated vulnerabilities produced by conventional AI-powered code scanning.

The engineering team at software company Figma recently documented how they built AI agents to help their security team investigate alerts, search past incidents, check company systems, and even prepare code fixes. The agents learn from previous investigations, reducing repetitive work and helping engineers resolve complex alerts about 70% faster, while human review and strict controls remain in place.

For years, TrueNAS CORE stood as the undisputed standard for open-source storage appliances, built on a foundation of FreeBSD and OpenZFS, which some would call "rock-solid". However, when upstream maintainer iXsystems shifted its engineering weight entirely toward TrueNAS SCALE, a Debian Linux-based environment, legacy operators were left facing a deprecated architecture.

Transcript Meryem Arik: I'm going to be doing something very risky today, and I'm going to be predicting the future. You should famously never, ever make predictions, especially about the future, because it always goes wrong. A very wise man said this. He actually was a baseball player in Boston. Luckily, I'm not a wise man. I'm Meryem. I'm the cofounder of Doubleword. I work on high throughput inference.

In a recent research paper, Google introduced Beyond Zero, a "security model for the AI era" that extends Zero Trust to autonomous AI agents. The new approach moves access decisions from the application level to individual resources and actions, combining static authorization controls with dynamic AI-driven decisions to enable machine-speed enforcement for humans and agents.

Listen to this article -  0:00 Audio ready to play Your browser does not support the audio element. 0:00 0:00 Blume, a zero-config documentation framework that renders a folder of Markdown into a complete docs site, has been released as open source by Hayden Bleasel, pitched as "a world-class docs framework for everything you ship" with zero-config setup, automatic SEO and AEO, 30+ components and no app boilerplate to write.

JupyterGIS is an open-source extension designed to bridge the gap between geographic information systems (GIS) and the data science notebook environment. Its primary intent is to eliminate the friction of context switching by unifying geospatial data discovery, complex analysis, visualisation, and narrative communication into a single interface.

Airbnb has redesigned its authentication architecture to make login flows easier to change across Web, iOS, and Android. The new system moves authentication decisions from clients to a server-side policy engine that selects the most appropriate authentication challenge based on the user and session context.

Kubernetes is encouraging developers to take a closer look at KYAML, a stricter dialect of YAML designed to make Kubernetes configuration more explicit, predictable, and less prone to common YAML errors. In a recent Kubernetes blog post, the project explains how developers can pretty-print existing manifests in KYAML and why the format could provide a more consistent way of working with increasingly complex Kubernetes configuration.

Software architecture faces a pivotal moment: rapid iteration, cloud-native adoption, and ubiquitous AI are reshaping system design. However, speed introduces trust deficits - nearly 30% of engineers distrust AI-generated code, signaling an urgent need for stronger architectural oversight and validation. Design is no longer static; it happens continuously in production. This eMag and the accompanying Next-Gen Architecture Playbook podcast series address how technical leaders must adapt.