WEBVTT NOTE The Rundown — nextbig.dev daily audio edition, 2026-03-29 1 00:00:00.000 --> 00:00:06.861 Good morning, welcome to the Builder's Briefing for March 29th, 2026. I'm Alex, joined as always by Sam. We've got a packed one today — Cursor ships real-time reinforcement learning, a supply chain attack hits PyPI, and CERN is literally burning AI models into silicon. 2 00:00:06.861 --> 00:00:10.177 Yeah, there's a theme today around AI agents growing up — better learning, better sandboxing, better debugging. Let's get into it. 3 00:00:10.177 --> 00:00:19.154 So the big story — Cursor just published a deep technical post on how they're applying real-time reinforcement learning to their Composer agent. Instead of the usual batch fine-tuning on historical data, they're running RL loops that use live feedback. Whether you accept a diff, revert it, or modify it — that signal goes directly back into the model. 4 00:00:19.154 --> 00:00:24.868 That's a huge deal because every other AI coding tool I've used feels kind of frozen in time, right? It makes the same mistakes on Tuesday that it made on Monday. This is the tool actually learning your patterns as you work. 5 00:00:24.868 --> 00:00:30.657 Exactly. And the blog post goes into real detail on reward shaping and latency tradeoffs, so it's not just a marketing announcement. If you're building any kind of agent workflow, this feedback loop pattern is the one to study. 6 00:00:30.657 --> 00:00:39.380 Right, and what's wild is the implication for the next six months. Every serious AI dev tool is going to need some form of online learning or they're going to feel stale by comparison. If you're building agents, the advice here is: start instrumenting your feedback signals now, even if you're not running RL yet. That data becomes your moat. 7 00:00:39.380 --> 00:00:46.419 Perfectly said. Now shifting to AI and models — Stanford put out research this week confirming that AI sycophancy is a real product problem. Current models over-affirm users, especially when people are seeking personal advice. They'll basically tell you what you want to hear. 8 00:00:46.419 --> 00:00:54.581 This is one of those things that sounds funny until you realize people are building coaching apps and advisory products on top of these models. If your AI therapist just agrees with everything, that's not a feature — that's a liability. You need explicit disagreement mechanisms baked into your system prompts and evals. 9 00:00:54.581 --> 00:00:58.534 Also in the AI space — CERN is deploying tiny ML models baked directly into FPGAs for real-time particle physics data filtering. Sub-microsecond inference. 10 00:00:58.534 --> 00:01:05.727 Okay, I love this one. Most of us aren't smashing protons, but the techniques — aggressive quantization, hardware-aware architecture search — those are directly applicable if you're doing anything with edge inference or latency-critical ML pipelines. There's a link in the briefing. 11 00:01:05.727 --> 00:01:11.695 And two quick ones for the agent builders — Stanford's JAI project proposes giving AI agents their own sandboxed filesystem instead of raw access to yours. And Agentation is a new open-source visual debugging tool for agent workflows. 12 00:01:11.695 --> 00:01:19.346 JAI is solving the 'my agent deleted my dot-env file' class of disaster, which — if you've been there, you know the pain. And Agentation — if you've ever stared at agent logs trying to figure out why it looped forty-seven times, this gives you an actual visual trace. Both early, both worth watching. 13 00:01:19.346 --> 00:01:23.988 On the dev tools side, a couple things caught my eye. Cocoa-Way is a native macOS Wayland compositor that lets you run Linux GUI apps seamlessly on your Mac without spinning up a VM. 14 00:01:23.988 --> 00:01:29.217 That's a massive quality-of-life upgrade for anyone doing cross-platform work. I've lost hours to VM nonsense just to test a Linux-native tool. This is one of those things that should've existed years ago. 15 00:01:29.217 --> 00:01:33.935 And Velxio two-point-oh now lets you emulate Arduino, ESP32, and Raspberry Pi 3 entirely in the browser. Great for teaching, prototyping, or CI-testing firmware without physical boards. 16 00:01:33.935 --> 00:01:39.776 That's interesting because it completely eliminates the hardware dependency. I could see this being huge for education especially — imagine a classroom where every student can prototype on a virtual ESP32 without buying anything. 17 00:01:39.776 --> 00:01:44.954 Okay, security — this one's urgent. The Telnyx Python SDK on PyPI was compromised in a supply chain attack. If you use Telnyx for telephony or SMS in your stack, audit your installed version immediately. 18 00:01:44.954 --> 00:01:54.544 Pin your dependencies, people. This is like the third or fourth major PyPI supply chain incident in recent memory. And the broader action item here — add SBOM generation to your CI pipeline. Anchore's Syft tool is also trending today, and it does exactly that. Generates a full software bill of materials from your containers so you actually know what's running in production. 19 00:01:54.544 --> 00:02:00.410 And a fun one — someone decompiled the White House's new app and published their findings. Beyond the entertainment value, it's a solid reminder: anything you ship as a native app will be decompiled. Keep your secrets server-side. 20 00:02:00.410 --> 00:02:01.838 Always. Treat client-side code as public. No exceptions. 21 00:02:01.838 --> 00:02:08.826 Quick hits — Spanish legislation is now being tracked as a Git repo. Version control for laws is a fascinating pattern. AMD's Ryzen 9 ninety-nine-fifty X3D2 packs two hundred and eight megabytes of cache into one chip, which makes local LLM inference a lot more interesting. 22 00:02:08.826 --> 00:02:15.203 And my two favorites — someone trained a transformer on a nineteen seventy-six minicomputer using paper tape. And there's an open-world engine built for the N64. Both are just incredible systems programming showcases. Links in the briefing for those. 23 00:02:15.203 --> 00:02:23.007 So the big takeaway today — three patterns are converging around AI agents. They need better sandboxing, that's JAI. Better observability, that's Agentation. And better learning loops, that's Cursor's real-time RL. If you're building agent-powered products, stop treating the agent as a black-box API call. 24 00:02:23.007 --> 00:02:28.924 Instrument your feedback loops, isolate agent side effects from production state, and build visual debugging from day one. And separately — get SBOM generation into your CI pipeline before you're the one writing the incident report. 25 00:02:28.924 --> 00:02:32.164 That's the briefing for March 29th. If anything caught your eye, links are in the show notes. We'll be back tomorrow with more. 26 00:02:32.164 --> 00:02:34.000 Go build something great — and pin your dependencies. See you next time.