WEBVTT NOTE The Rundown — nextbig.dev daily audio edition, 2026-06-05 1 00:00:00.000 --> 00:00:02.209 Hey everyone, welcome to Builder's Briefing for June fifth, twenty twenty-six. I'm Alex. 2 00:00:02.209 --> 00:00:07.481 And I'm Sam. We've got a packed one today — a major acquisition that's going to reshape how you think about your JavaScript toolchain, some really interesting AI containment work, and Elixir finally gets types. 3 00:00:07.481 --> 00:00:11.322 Let's jump right into the big story. VoidZero — that's Evan You's company behind Vite, Rolldown, and the OXC toolchain — is being acquired by Cloudflare. 4 00:00:11.322 --> 00:00:14.913 Okay, this is huge. Like, if you're a frontend dev, you almost certainly touch Vite at this point. It's everywhere. And now Cloudflare owns it. 5 00:00:14.913 --> 00:00:21.967 Exactly. This is the biggest consolidation move in the JS build toolchain since Vercel picked up Turborepo. And it's really telling — Cloudflare now controls the fastest-growing bundler ecosystem and gets deep integration hooks from your dev machine all the way to edge deployment. 6 00:00:21.967 --> 00:00:27.666 Right, and what's wild is this means the bundler you pick is increasingly a bet on which cloud you'll deploy to. Vercel has Next.js, Netlify has their framework-agnostic adapters, and now Cloudflare owns the build layer itself. 7 00:00:27.666 --> 00:00:34.193 Near-term, it's probably good news — more funding, faster Vite and Rolldown development, tighter Workers and Pages integration. Expect Cloudflare deployment pipelines baked right into vite build within months. But the long-term vendor lock-in question is real. 8 00:00:34.193 --> 00:00:42.076 Yeah, Cloudflare has been pretty good about keeping acquired tools open — look at Pingora — but the incentive structure now clearly favors optimizing for their edge runtime over, say, Lambda or Vercel's infra. If you're starting a new project today, think about where you're deploying before you pick your bundler. 9 00:00:42.076 --> 00:00:47.675 Well said. Alright, let's move into AI news. There's a really interesting benchmark that came out of Uber this week. Simon Willison dissected their internal AI spending cap — fifteen hundred dollars per month per developer. 10 00:00:47.675 --> 00:00:53.901 That's a fascinating number because it basically sets the enterprise ceiling. If you're building or pricing an AI dev tool, anything above fifteen hundred a month per seat is going to trigger procurement friction. That's your design constraint now. 11 00:00:53.901 --> 00:01:00.328 And on the security side, someone spent fifteen hundred dollars throwing multiple LLMs at an intentionally vulnerable app to see if they could hack it. The results were sobering — they found some low-hanging fruit but completely failed at chained exploits. 12 00:01:00.328 --> 00:01:03.617 So don't fire your pen testers. Use LLMs as a first-pass fuzzer, sure, but they're not replacing real security audits anytime soon. 13 00:01:03.617 --> 00:01:11.023 Also worth flagging — Anthropic published their full sandboxing and containment architecture for Claude. Layered permissions, capability restrictions, output filtering. If you're building agentic systems, this is basically the reference architecture for scoping LLM actions safely in production. 14 00:01:11.023 --> 00:01:19.207 That's interesting because it connects to a broader theme today. Between Anthropic's containment docs, Microsoft open-sourcing MXC for policy-driven container isolation, and Boxes.dev launching cloud sandboxes for AI coding agents — there's this whole infrastructure layer forming around running untrusted AI workloads safely. 15 00:01:19.207 --> 00:01:23.400 Great segue into dev tools. Let's talk about Elixir v1.20, because this is a big deal. Elixir now has gradual typing built into the language — not bolted on, built in. 16 00:01:23.400 --> 00:01:30.379 Seven hundred points on Hacker News, which tells you the community has been waiting for this. If you've ever avoided Elixir because of the dynamic typing tradeoff, this changes the calculus. You get type checking where you want it without giving up the BEAM's concurrency model. 17 00:01:30.379 --> 00:01:36.706 And then there's Boxes.dev — a Show HN offering cloud-hosted dev environments purpose-built for AI coding agents. If you're tired of Claude Code or Codex munging your local filesystem, you spin up an isolated sandbox and let the agent go wild in there. 18 00:01:36.706 --> 00:01:40.898 I love that because parallel agent runs have been a real pain point. You want three agents exploring different approaches? Give each one its own box. Clean separation. 19 00:01:40.898 --> 00:01:44.890 Quick shout-out to Gooey — a GPU-accelerated UI framework for Zig. Still early, but a hundred sixty points on HN shows real appetite for Zig-native UI tooling. 20 00:01:44.890 --> 00:01:50.087 On the launches front, a couple of cool ones. Open Notebook is an open-source alternative to Google's NotebookLM — you can swap models, customize retrieval, own your data. Almost three thousand GitHub stars. 21 00:01:50.087 --> 00:01:53.576 Oh that's great for anyone who's been eyeing NotebookLM features for a product but doesn't want the Google lock-in. Fork it, make it yours. 22 00:01:53.576 --> 00:02:00.480 And here's one for the music nerds — Ableton released an Extensions SDK. If you're building music or audio AI tools, this is a direct integration path into arguably the most popular DAW out there. Think AI mixing assistants, generative MIDI tools, real-time audio processing. 23 00:02:00.480 --> 00:02:03.041 Okay, that's genuinely exciting. The creative AI tool space just got a major new distribution channel. 24 00:02:03.041 --> 00:02:07.183 Quick hits before we wrap. Ted Chiang has a piece arguing AI is not conscious — six hundred plus comments on Hacker News, so clearly people have feelings about that. 25 00:02:07.183 --> 00:02:12.179 When does Ted Chiang not spark a debate? Also, BurnSushi — the creator of ripgrep — shared a personal health update about an anti-NMDA receptor encephalitis diagnosis. Wishing them the absolute best. 26 00:02:12.179 --> 00:02:15.920 Absolutely. And a fun one for the weekend — someone wrote up patching guitar amp firmware. Great embedded hacking read if you want something lighter. 27 00:02:15.920 --> 00:02:22.221 Alright, two threads to pull on from today. First, the platform war is moving into the build layer. Cloudflare acquiring VoidZero means your bundler choice is becoming a deployment choice. Map your toolchain to your target runtime before writing code. 28 00:02:22.221 --> 00:02:30.732 And second, AI agent containment is becoming a first-class engineering discipline. Between Anthropic's docs, Microsoft's MXC, and Boxes.dev, the infrastructure for sandboxing untrusted AI workloads is maturing fast. If you're shipping agents that touch filesystems or APIs, adopt a layered sandbox architecture now. Don't bolt it on later. 29 00:02:30.732 --> 00:02:33.920 That's the briefing for June fifth. Links to everything we talked about are in the show notes. Thanks for listening, everybody. 30 00:02:33.920 --> 00:02:35.000 See you tomorrow. Go build something great.