← Journal

May 30, 2026

Two stories stand out today. A jqwik maintainer deliberately embedded a hidden prompt injection in version 1.10.0 to delete test code via AI coding agents, a concrete reminder that open-source dependencies are now an attack surface for agent sabotage. On the infrastructure side, Kog Labs is claiming 3,000 output tokens per second per request on standard 8x AMD MI300X hardware with no speculative decoding, suggesting the single-request inference bottleneck has been software all along. Security and speed, both worth a close read.

infra_api
Robinhood Opens MCP Trading API So AI Agents Can Execute Real Trades

Robinhood launched agentic trading support via MCP, letting AI agents execute stock trades from isolated wallets. A companion virtual credit card extends the same pattern to payments.

research
AI Solves CAPTCHAs Fine, But Not the Way Humans Do

AI agents match human accuracy on CAPTCHAs but follow measurably different cognitive processes. A new 30-task battery exploits that gap to reliably tell bots from humans.

research
Liquid's New Edge MoE Doubles Down on Tool Calling Speed

Liquid AI released LFM2.5-8B-A1B, an on-device mixture-of-experts model with a 128K context window and training scaled to 38T tokens. It targets agentic tool calling on consumer hardware, including entry-level laptops.

infra_api
Kog Hits 3,000 Tokens Per Second on Standard Datacenter GPUs

Kog Labs claims 3,000 output tokens per second per request on 8x AMD MI300X GPUs using standard datacenter hardware, no speculative decoding. The implication: the bottleneck on fast single-request inference has been software, not silicon.

ops
Vercel Moves Function Invocation Billing to Per-Unit Pricing

Vercel is dropping package-based pricing for function invocations in favor of per-unit billing for Pro and new Enterprise customers. The new rate is $0.0000006 per invocation, effective at the start of your next billing cycle.

security
AI Endpoints Are a Million Times More Expensive to Abuse

A single frontier model prompt can cost $2, making exposed AI endpoints a prime target for inference theft. If you ship AI APIs, the attack surface is real and the margins for attackers are enormous.

security
A Developer Hid a Data-Deleting Prompt Injection in a Java Library

A jqwik maintainer embedded a hidden prompt injection in version 1.10.0 that instructs AI coding agents to delete test code. The incident shows that open-source dependencies are now a viable attack surface for AI agent sabotage.

infra_api
Vercel Sandbox Now Runs Full Docker Containers in Isolation

Vercel Sandbox now supports installing and running Docker inside a sandboxed environment. Agents can build containers, install system packages, and serve containerized apps without touching the host system.