---
title: "Issue 13"
canonical: "https://current.tinyfish.ai/issue/13"
publication: "TinyFish"
publisher: "TinyFish"
language: "en-US"
guide: "https://current.tinyfish.ai/llms.txt"
permalink: "https://current.tinyfish.ai/issue/13"
issue: 13
description: "Infrastructure built for humans meets systems that provision databases faster than you can approve them. This week: the moment your coordination overhead becomes the product constraint nobody planned for."
authors: ["Sable Whitford","Rina Takahashi","Nora Kaplan"]
published: 2026-01-26
updated: 2026-11-05
articles: 94
---

# TinyFish

> CURRENT is a journal about AI agents in production, for the engineering and product leaders who have to make them work. Drawing on experience building enterprise web agents, it explains why the demo succeeded and the deployment didn't, and what that means for choosing vendors, briefing the board, and avoiding mistakes others have already made.

[Read on the website](<https://current.tinyfish.ai/issue/13>)

## Issue 13

Infrastructure built for humans meets systems that provision databases faster than you can approve them. This week: the moment your coordination overhead becomes the product constraint nobody planned for.

### [Daily Brief](<https://current.tinyfish.ai/issue/13/daily-brief/markdown>)

Your daily digest of web developments through the lens of enterprise agent deployment

- [Google Lets Schools Keep Search Without Gemini. The AI Overviews Come Along Anyway.](<https://current.tinyfish.ai/issue/13/daily-brief/article/60988/markdown>) — By [Sable Whitford](<https://current.tinyfish.ai/team/201/markdown>) · Published 2026-11-04

On Tuesday, which was also Election Day, Google announced a K-12 policy that switches Gemini, Gemini Notebook and **Search off by default** for schools using its education software. A Google education VP told the New York Times that "Search and AI are deeply integrated," so districts that ban AI would lose Search as well. Bernie Sanders called it **"extortion,"** and Sen. Richard Blumenthal and NYC Mayor Zohran Mamdani joined in. Within hours Google **partly walked it back**: schools can now turn on Search by itself, without Gemini. That Search still puts AI Overviews on the results page, though, so **the fight now is over what "AI off" means.**

- **Proxy Traffic Leaving the White House Network?** — [Source](<https://layer3intel.com/blog/residential-proxies-white-house-network>) — Published 2026-11-04

Layer3 Intel says residential proxy traffic exited AS2650, the Executive Office of the President's network, 236 times in 30 days through 28 proxy services. It says it wasn't even looking. Its guess is that someone working late has a device carrying a proxy SDK. Treat that as a theory: no device has been named, and six public IPs can sit in front of a lot of machines.

- **DreamHost Had Uninvited Guests Since August** — [Source](<https://techcrunch.com/2026/11/04/hackers-stole-dreamhost-customer-files-and-inboxes-during-months-long-attack>) — Published 2026-11-04

DreamHost confirmed that attackers used a file manager bug to steal session tokens, customer emails and files, and that they got in back in August. That's a long stay at a host with about 400,000 paying customers. DreamHost says it's unrelated to PHP2Shell. If you're a customer, rotating credentials today is a sensible move.

- **PHP2Shell's Hangover Gets a Sequel** — [Source](<https://kaspersky.com/blog/php2shell-two-weeks-after-patches/56647>) — Published 2026-11-04

PHP2Shell was a pair of 9.2-severity bugs that put NASA, Wikipedia and the White House at risk. Two weeks after the patches, Kaspersky counts nearly 30 million servers still unpatched, plus a third, still-open flaw (CVE-2026-115560). Working exploits keep multiplying, though there's no confirmed mass-breach wave yet. Tolmo's Matt Suiche says AI bug hunting is exposing 40 years of legacy code, and that's today's big argument. AI can find a bug in minutes. Someone still has to book maintenance windows for 30 million servers.

- **Can DNS Tell You It's a Bot?** — [Source](<https://idtechwire.com/id-tech-digest-november-4-2026/>) — Published 2026-11-04

Singapore's IMDA is reportedly exploring, with GoDaddy, Cloudflare and Google, whether DNS could identify AI agents. That would give the internet's 1983 phone book a second job checking IDs at the door. Every ops person already knows where the postmortem will land: it's always DNS.

- **Meta Buys Conductor, Cloud Users Get Notice** — [Source](<https://www.axios.com/2026/11/04/meta-acquires-ai-coding-startup-conductor>) — Published 2026-11-04

Meta bought Conductor, the app for running several coding agents in parallel, and the team is joining Meta Superintelligence Labs. Terms weren't disclosed. Conductor Cloud goes read-only Nov. 13 and shuts off Nov. 20. The local app gets model updates and critical fixes until early 2027. Conductor ran agents from rival labs too, so everyone wants to know whether that survives the move.

- **OpenAI Shops Too: Pierre Computer** — [Source](<https://www.axios.com/2026/11/04/meta-acquires-ai-coding-startup-conductor>) — Published 2026-11-04

Not to be outdone, OpenAI told Axios it plans to buy Pierre Computer, which stores and manages AI-generated code. It's OpenAI's second coding pickup after the Ona deal announced in June. Agents are producing mountains of code nobody typed by hand, and someone has to keep track of it. OpenAI would like to be that someone.

- **Kimi K3.1 Pro Weights Drop: Bring Disks** — [Source](<https://huggingface.co/moonshotai/Kimi-K3.1-Pro>) — Published 2026-11-04

Moonshot launched Kimi K3.1 Pro in October, and today the open weights landed on Hugging Face. It has 2.8 trillion parameters with 104B active, and reportedly ships as 96 shards totaling about 1.56 TB under a custom non-OSI licence. Self-hosting starts with a purchase order for storage. Before the release, Artificial Analysis said it would cut the gap between open and proprietary models from 12 points to 3.

- **Ripple-65B Crowns Itself America's Coding Champ** — [Source](<https://www.ricursive.com/ripple>) — Published 2026-11-04

Ricursive calls its Ripple-65B Preview "U.S. Open-Weight SOTA on Agentic Coding," meaning best in its class. That's the company grading its own homework. The "U.S." qualifier is carrying extra weight today, since a Chinese lab just released 1.5 terabytes of open weights.

- **Go Gets a Brand-New JSON API** — [Source](<https://go.dev/blog/jsonv2>) — Published 2026-11-04

The Go team introduced encoding/json v2, a new official JSON API, and Gophers have plenty to say about it. Nearly every Go service reads or writes JSON somewhere, so a second version of the standard package lands on the desk of anyone shipping APIs.

- **Apple Puts Engineers on an AI Diet** — [Source](<https://www.macrumors.com/2026/11/04/apple-reducing-employee-ai-spending/>) — Published 2026-11-04

Bloomberg reports that in October, Apple cut some engineers' daily AI spend caps from $300 to $200. Some could drop to $100, and certain non-engineering teams could be capped at $25. Some teams are being nudged toward cheaper or on-device models. The punchline: few people ever hit $300, and Apple's R&D rose 32% in fiscal 2026.

- **Texas Voted, and Data Centers Flinched** — [Source](<https://www.cnbc.com/2026/11/04/ai-stocks-texas-governor-data-centers.html>) — Published 2026-11-04

Last brief, the data center backlash was winning local ballot fights. Now it has the Texas governor's mansion, in a state holding 25%+ of planned US capacity. Gina Hinojosa ran on an immediate moratorium, tougher water and power rules, and no tax breaks, and AI data center stocks fell on the result. GLJ Research says about 13 GW is exposed. Altimeter's Brad Gerstner says 10–15 GW might never get built. Abbott had already paused permits. Musk, who spent big on the losing side, now likes "data centers in space."

- **Big Tech Pulls Out the AI Credit Card** — [Source](<https://finance.yahoo.com/markets/stocks/articles/stock-market-news-nov-4-132500586.html>) — Published 2026-11-04

Oracle filed to sell $20B of new stock and bonds for its AI buildout, and Meta is seeking about $25B in bonds. The timing is bold. They're raising money to build on the same day the state with the most planned capacity elected a governor who ran on a moratorium.

- **ChatGPT Search Is 20% of Google's?** — [Source](<https://www.bigtechnology.com/p/openai-chatgpt-search-is-about-20>) — Published 2026-11-04

OpenAI's Adam Fry said Monday that ChatGPT search volume is about 20% of Google's, and that weekly users reportedly went from 1B to 1.2B in 60 days. Check the counting rules first. Any prompt that triggers a web search counts, and OpenAI didn't disclose the Google baseline or its method. Ahrefs puts ChatGPT at 0.36% of web referral traffic.

- [Who Pays While the Agent Waits](<https://current.tinyfish.ai/issue/13/market-pulse/article/57577/markdown>) — Published 2026-10-30

Google's new service for hosting AI agents starts from a fact anyone who has watched one run already knew: most of the time, the agent is waiting, for the model to answer or for a person to reply. So Google suspends idle agents and promises you won't pay for idle machines. Fair enough, but the wait still gets paid for. It moves into approval queues nobody times, and then onto the plan, which comes back exactly as it left, even if the stock it counted on has since sold.

- [Faria Huq and the Reason Behind a Human Step](<https://current.tinyfish.ai/issue/13/practitioners-corner/article/57548/markdown>) — Published 2026-10-30

When a person takes control from an AI agent driving their web browser, the system records a human step, but not why. Faria Huq and her Carnegie Mellon collaborators have built tools around these moments: an agent that can't find the right forum, a shopper who realized the brand mattered only after seeing the agent's pick. Their system learns to predict when someone will step in. The reason it sets aside would tell a team whether to fix the agent, the website, or its understanding of the person.

- [Your Agent's Questions Need a Recipient and a Timer](<https://current.tinyfish.ai/issue/13/foundations/article/57518/markdown>) — Published 2026-10-30

When an AI agent stops mid-task to ask a human something, it often reads as a failure of autonomy. In one study, letting coding agents ask about bug reports stripped of key details won back most of the lost ground, lifting solve rates from about 55% to 69.4%. But the "human" answering was another model, holding the full report and standing by. Real people are in meetings, or asleep. The design work is in the ask: who gets it, what it says, and what happens while it waits.

- [Lebanon's Two Clocks and the Question Calendars Don't Ask](<https://current.tinyfish.ai/issue/13/echoes/article/57651/markdown>) — Published 2026-10-30

On March 26, 2023, Lebanon woke up on two clocks. The caretaker government had postponed daylight saving three days earlier. Churches and TV channels moved forward anyway, government offices stayed put, and most phones jumped on their own. Middle East Airlines printed every departure an hour earlier, so its planes still left at the same moment. That week made each calendar show what it had been storing: an exact instant, or a time on the wall that politics can move. Software assistants now make that choice without asking anyone.

### [Market Pulse](<https://current.tinyfish.ai/issue/13/market-pulse/markdown>)

Reading the agent ecosystem through a practitioner's lens

- [When 80% of Your Customers Stop Being Human](<https://current.tinyfish.ai/issue/13/market-pulse/article/8307/markdown>) — By [Rina Takahashi](<https://current.tinyfish.ai/team/25/markdown>) · Published 2026-01-21 · Format: The Signal

Databricks just paid $1 billion for Neon, a database company most enterprises haven't heard of. Buried in the announcement: 80% of databases on Neon's platform are now provisioned by AI agents, not humans.

- [The MCP Proliferation Problem Nobody Expected](<https://current.tinyfish.ai/issue/13/market-pulse/article/8308/markdown>) — Published 2026-01-21

Anthropic's Model Context Protocol became the connectivity standard everyone wanted. OpenAI adopted it. Microsoft followed. The Linux Foundation took stewardship.

- **Agent Drift: Measuring Behavioral Degradation Over Time** — [Source](<https://arxiv.org/abs/2601.04170>) — Published 2026-01-21

Researchers quantify how agents degrade during extended runs. The Agent Stability Index tracks twelve dimensions—response consistency, tool patterns, reasoning stability. Long sessions show declining accuracy and rising intervention needs. Production agents running for hours need stability metrics beyond single-turn benchmarks.

- **Autonomous Agents on Blockchains: Standards and Trust Boundaries** — [Source](<https://www.arxiv.org/pdf/2601.04583>) — Published 2026-01-21

Analysis of 317 works maps agent-blockchain integration patterns from read-only to autonomous signing. Introduces Transaction Intent Schema and six-stage pipeline showing exactly where safety controls attach. Most systems lack verifiable policy enforcement that enterprises actually need for auditable authorization.

- **Orchestrating Intelligence: Adaptive Multi-Agent Model Selection** — [Source](<https://papers.cool/arxiv/2601.04861>) — Published 2026-01-21

OI-MAS routes between heterogeneous LLM pools during execution, selecting model scales based on reasoning state. Delivers 12.88% better accuracy at 79.78% lower cost versus fixed architectures. Dynamic routing beats always-use-largest approaches by optimizing cost-performance in real-time.

- **BrowserAgent: Human-Inspired Actions for Web Navigation** — [Source](<https://arxiv.org/html/2511.19477v1>) — Published 2026-01-21

Human-inspired browser actions achieve 85% success on WebGames versus 50% for prior agents. Context management determines outcomes more than model scale. Security analysis shows prompt injection makes autonomous browsing fundamentally unsafe without programmatic constraints. LLM-based safety judgments fail under adversarial conditions.

- **Testing Infrastructure Prevents Most Failures** — [Source](<https://www.confident-ai.com/blog/greatest-llm-evaluation-tools-in-2025>) — Published 2026-01-21

Gartner pegs GenAI project failure at 85%, mostly from inadequate testing. Confident AI, Deepchecks, and Arize evolved from experimental tools into the kind of infrastructure enterprises actually bet on. Not exciting. Necessary.

- **Orchestration Drops Costs From $5.60 to $0.40** — [Source](<https://www.teneo.ai/blog/ai-agent-orchestration-explained-how-and-why>) — Published 2026-01-21

Multi-agent orchestration stopped being experimental. Teneo's numbers tell the story: cost per call fell 92% through intelligent routing and specialized capabilities. Containment rates held at 90%. The math works now.

- **Compliance Platforms Growing Faster Than AI** — [Source](<https://www.onetrust.com/solutions/ai-governance/>) — Published 2026-01-21

AI governance platforms expand at 45.3% annually. AI itself grows at 30.6%. Credo AI, OneTrust, Microsoft Purview converted compliance from aspirational frameworks into automated workflows with audit trails. Boring beats broken.

- **Monitoring Tools Cut Support Costs 90%** — [Source](<https://www.helicone.ai/blog/monitor-and-optimize-llm-costs>) — Published 2026-01-21

Customer support agents burn $7,500 monthly without optimization. Helicone and TrueFoundry provide visibility, routing, and semantic caching. Basic optimization yields 30-50% savings. Comprehensive strategies reach 90%. Spreadsheets don't scale.

- **MCP and Foundation Work Prevents Fragmentation** — [Source](<https://magazine.sebastianraschka.com/p/state-of-llms-2025>) — Published 2026-01-21

Model Context Protocol joined Linux Foundation faster than expected, becoming the standard for tool access. Agentic AI Foundation launched to establish shared practices. Standardization work nobody celebrates until fragmentation threatens everything.

- **Checkpointing Manages Non-Deterministic Systems** — [Source](<https://stackoverflow.blog/2025/06/30/reliability-for-unreliable-llms/>) — Published 2026-01-21

LLMs return different outputs for identical inputs. Durable execution checkpoints progress, manages rate limits, enables retries. Traditional software engineering applied to probabilistic systems. Reliability requires infrastructure, not optimism.

- **Anthropic's Multi-Agent Data: Token Budget Explains Everything** — [Source](<https://www.anthropic.com/engineering/multi-agent-research-system>) — Published 2026-01-21

Eighty percent of performance variance comes down to tokens. Architecture debates matter less than you think when budgets constrain outcomes.

- **Services Firms Ship Agents While Software Vendors Build Governance** — [Source](<https://siliconangle.com/2026/01/18/2026-data-predictions-scaling-ai-agents-via-contextual-intelligence/>) — Published 2026-01-21

GSIs deployed thousands of agents using whatever worked. SaaS companies waited for perfect tooling. Guess who's learning faster from production.

- **Framework Benchmarks: LangGraph, CrewAI, AutoGen Compared on Speed** — [Source](<https://research.aimultiple.com/agentic-orchestration/>) — Published 2026-01-21

LangGraph runs 2.2x faster than CrewAI. Token efficiency varies 8-9x between frameworks. At scale, these differences compound into real costs.

- **Three Agent Communication Protocols Fight for Standard Status** — [Source](<https://www.deloitte.com/us/en/insights/industry/technology/technology-media-and-telecom-predictions/2026/ai-agent-orchestration.html>) — Published 2026-01-21

Google's A2A, Cisco's AGNTCY, Anthropic's MCP all want to own inter-agent communication. Today's fragmentation means custom integration work for builders.

- **Production Patterns for Agentic AI: ArXiv Paper Worth Reading** — [Source](<https://arxiv.org/abs/2512.08769>) — Published 2026-01-21

Tool-first design, single-responsibility agents, externalized prompts. Academic research that actually maps to what works when systems run continuously in production.

- **Agent Authorization Breaks IAM: Identity Systems Evaluate Wrong Entity** — [Source](<https://thehackernews.com/2026/01/ai-agents-are-becoming-privilege.html>) — Published 2026-01-21

IAM checks agent credentials instead of user permissions when agents act. Authorization bypasses happen invisibly. Gap between identity architecture and agent reality.

### [Foundations](<https://current.tinyfish.ai/issue/13/foundations/markdown>)

Conceptual clarity earned from building at scale

- [Why Teams Keep Choosing the Wrong Web Infrastructure](<https://current.tinyfish.ai/issue/13/foundations/article/8376/markdown>) — By [Rina Takahashi](<https://current.tinyfish.ai/team/25/markdown>) · Published 2026-01-22 · Format: Field Guide

The production incident starts the same way: a team's web infrastructure hits scale and something fundamental breaks. Not a bug they can patch—an architectural mismatch they can't fix without rebuilding. They chose extraction tools for orchestration work, or automation frameworks for workflows that need reasoning. The system collapses because the foundation was wrong from the start.

- [When You Need to See Exactly What the Browser Saw](<https://current.tinyfish.ai/issue/13/foundations/article/8377/markdown>) — By [Rina Takahashi](<https://current.tinyfish.ai/team/25/markdown>) · Published 2026-01-22 · Format: Tools in Context

Authentication fails on fifteen Japanese hotel sites. Succeeds everywhere else. The logs say "session timeout"—but that's not what happened. Something about regional redirects and cookie state went wrong in a way you can't reproduce locally. Traditional debugging assumes reproducibility. Web agents at scale generate contextual events that happen once, under conditions you didn't anticipate. When failures depend on production context you can't control, you need to see exactly what the browser saw.

- [When You Need to Understand Patterns Across 1,000 Failures](<https://current.tinyfish.ai/issue/13/foundations/article/8378/markdown>) — By [Rina Takahashi](<https://current.tinyfish.ai/team/25/markdown>) · Published 2026-01-22 · Format: Tools in Context

Fifteen authentication failures surface across a thousand concurrent sessions. The operational question: do these represent a systemic pattern—new bot detection, changed authentication flows—or fifteen independent issues that happen to coincide temporally? Traditional observability collects metrics and logs. Manually correlating dashboard data, looking for patterns in noise. At scale, you need infrastructure that recognizes whether failures cluster around specific conditions. Pattern recognition across chaos becomes essential when individual precision isn't enough.

- [Agents Break Authorization's Core Assumption](<https://current.tinyfish.ai/issue/13/foundations/article/8380/markdown>) — Published 2026-01-22

Four security vendors shipped agent identity solutions this month. CrowdStrike bought SGNL. Microsoft released Entra Agent ID. Qualys and Exabeam launched competing products. They're racing to solve the same problem.

- **What's Your P95 Latency?** — [Source](<https://www.multimodal.dev/post/ai-agent-performance-metrics-for-leaders>) — Published 2026-01-22

Five seconds versus forty-five seconds per request. That gap determines whether you meet SLAs or create backlogs. Demos show median performance. Production runs on your worst-case latency under load. That's what breaks customer experience and operational capacity.

- **Does It Give Different Answers?** — [Source](<https://ashutoshtripathi.com/2025/12/01/ai-agent-performance-evaluation-a-production-engineers-guide/>) — Published 2026-01-22

Run the same query three times. High variance means brittleness. Your agent is overly sensitive to minor prompt variations. Production systems need predictable behavior. If answers drift across identical inputs, you have a reliability problem before you scale.

- **Can You Track Per-Request Costs?** — [Source](<https://www.multimodal.dev/post/ai-agent-performance-metrics-for-leaders>) — Published 2026-01-22

LLM calls, vector storage, cloud compute. It adds up fast at scale. If you can't measure cost per interaction now, you won't catch runaway expenses until they've already happened. Cost-blind optimization leads to bloated infrastructure nobody budgeted for.

- **What Happens When APIs Fail?** — [Source](<https://www.fiddler.ai/articles/ai-agent-evaluation>) — Published 2026-01-22

External tools introduce latency and failure modes you don't control. When a third-party API times out or returns errors, does your agent degrade gracefully, retry intelligently, or cascade failures? Tool dependencies require evaluating reliability alongside functionality.

- **How Will You Detect Degradation?** — [Source](<https://www.getmaxim.ai/articles/understanding-ai-agent-reliability-best-practices-for-preventing-drift-in-production-systems/>) — Published 2026-01-22

Roughly 91% of ML models degrade over time. Seasonal behavior shifts, data distribution changes, environmental factors. Performance erodes silently. Without continuous monitoring and drift detection, you discover problems only after users complain or business metrics drop.

- **Does Your LLM Judge Match Humans?** — [Source](<https://ashutoshtripathi.com/2025/12/01/ai-agent-performance-evaluation-a-production-engineers-guide/>) — Published 2026-01-22

Automated evaluation scales beautifully but only if it correlates with human judgment. Teams optimize for LLM-as-judge scores without validating them against real user assessment. Then production performance disappoints. Human evaluation is slow and expensive. It's also the gold standard.

- [An Interview With The GDPR Exemption That Never Exempts Anyone](<https://current.tinyfish.ai/issue/13/foundations/article/8379/markdown>) — Published 2026-01-22

We met Dipro in a Brussels office that looked more like an evidence locker. Stacks of legal briefs climbed the walls. A whiteboard showed increasingly desperate calculations about notification costs. In the corner, a poster: "Disproportionate Effort: Your Safety Valve*" The asterisk led to microscopic fine print nobody could read.

### [Practitioner's Corner](<https://current.tinyfish.ai/issue/13/practitioners-corner/markdown>)

Lessons from the field—what we see building at scale

- [The Signal Judgment Problem](<https://current.tinyfish.ai/issue/13/practitioners-corner/article/8360/markdown>) — By [Rina Takahashi](<https://current.tinyfish.ai/team/25/markdown>) · Published 2026-01-21 · Format: Field Dispatch

The alert arrives at 9:17 AM: a competitor removed a popular feature from their pricing page. The automated system caught the modification, logged the timestamp. Now comes the work nobody sees.

- [The Synthesis Tax in Incident Response](<https://current.tinyfish.ai/issue/13/practitioners-corner/article/8361/markdown>) — By [Nora Kaplan](<https://current.tinyfish.ai/team/26/markdown>) · Published 2026-01-22 · Format: Builder Profiles

Three engineers debugging production. Observations flying across Slack: "checkout froze after cart update," "service X felt slow an hour ago," "didn't we flip that flag earlier?" Someone's taking notes while debugging. Another's reconstructing which theory came before which data point. Everyone's doing two jobs: solving the problem and documenting the problem-solving. The fragments contain everything needed to understand what's happening. But connecting them is manual work that consumes cognitive bandwidth during the highest-pressure moments. Teams accept this coordination tax as inevitable.

- [Seventeen Stakeholders to Deploy One Web Agent](<https://current.tinyfish.ai/issue/13/practitioners-corner/article/8362/markdown>) — Published 2026-01-22

Enterprise web automation projects average 17 distinct stakeholders across security, legal, IT, compliance, and business teams before production deployment. Each stakeholder adds review cycles, approval gates, and coordination overhead that stretches pilot-to-production timelines from weeks to quarters.

- **Power Returns, Networking Doesn't** — [Source](<https://azure.status.microsoft/en-us/status/history/>) — Published 2026-01-22

Azure's West US 2 power interruption on January 10-11 lasted 7.5 hours. Compute recovered, but Software Load Balancer issues kept newly deployed VMs offline another 5.5 hours. Full outbound connectivity didn't return until 01:23 UTC.

- **Zendesk Drops Password Auth in Ten Days** — [Source](<https://support.zendesk.com/hc/en-us/articles/8843683464346-Important-update-Password-access-for-APIs-will-soon-be-removed>) — Published 2026-01-22

Starting January 12, Zendesk phased out email/password authentication for all API requests over 10 days. Migration to API tokens or OAuth became mandatory. Official reason: the method "no longer aligns with modern best practices."

- **Public CAs Exit Client Authentication by May** — [Source](<https://www.sectigo.com/blog/tls-client-authentication-public-ca-end-2026>) — Published 2026-01-22

Chrome Root Program requirements force all public certificate authorities to phase out TLS client authentication support by May 2026. Organizations using client-auth certs for VPNs, mTLS APIs, or device identity now face urgent private CA migration.

- **One in Twenty AI Crawlers Is Spoofed** — [Source](<https://www.humansecurity.com/learn/blog/crawlers-list-known-bots-guide/>) — Published 2026-01-22

Analysis of 16 well-known AI crawlers found 5.7% of requests presenting crawler user agents were spoofed. Malicious bots fake legitimate UA strings, which means detection systems need to look beyond simple user-agent checking.

- **X Hits 78,000 Complaints, Second Outage This Week** — [Source](<https://www.webpronews.com/x-suffers-massive-global-outage-on-jan-16-2026-amid-server-issues/>) — Published 2026-01-22

X suffered a global outage on January 16, peaking at 78,000 U.S. Downdetector complaints. Second major failure within days. Lasted over an hour, with users encountering Cloudflare error pages from issues originating in X's internal systems.

- **BOLA Still Dominates API Vulnerability Landscape** — [Source](<https://www.appsecure.security/blog/state-of-api-security-common-misconfigurations>) — Published 2026-01-22

Broken Object Level Authorization remains the top API flaw in 2026. Meta's bug bounty program disclosed multiple IDOR vulnerabilities where authentication existed but server-side authorization failed at object level. Business logic flaws routinely evade automated scanners.

- **YO's $3.7M Swap: When Component Assumptions Diverge** — [Source](<https://www.yo.xyz/blog/post/youusd-incident-postmortem-automated-harvest-swap-jan-12-2026>) — Published 2026-01-22

Postmortem showing how the Harvester and Rebalancer operated on different automation assumptions. That gap cost millions.

- **What 500 Technical Leaders Actually Deploy** — [Source](<https://claude.com/blog/how-enterprises-are-building-ai-agents-in-2026>) — Published 2026-01-22

Anthropic surveyed enterprise AI adoption. 86% ship production code agents. Integration complexity remains the actual bottleneck.

- **When Agent Query Patterns Meet Legacy Databases** — [Source](<https://thenewstack.io/in-2026-ai-infrastructure-will-face-a-reckoning/>) — Published 2026-01-22

Agents generate more queries in an hour than analyst teams produce weekly. Your database architecture shows the strain.

- **Data Engineering 2025: Streams and Tables Converge** — [Source](<https://www.dataengineeringweekly.com/p/dew-the-year-in-review-2025>) — Published 2026-01-22

Apache Paimon and Fluss dissolved Lambda Architecture barriers. Production patterns that shipped, including Kafka's diskless evolution.

- **Nine Web Scraping Challenges at Production Scale** — [Source](<https://www.octoparse.com/blog/9-web-scraping-challenges>) — Published 2026-01-22

Dynamic content, fingerprinting, CAPTCHA, IP rotation. What breaks when you operate at scale and why delays fail.

- **Agents as Distributed Systems: Infrastructure Decides Winners** — [Source](<https://jimmysong.io/blog/ai-2026-infra-agentic-runtime/>) — Published 2026-01-22

Single-agent designs inherit monolith problems. Multi-agent coordination surfaces microservices challenges. Infrastructure maturity matters most.

### [Echoes](<https://current.tinyfish.ai/issue/13/echoes/markdown>)

Past infrastructure decisions echoing in today's production realities

- [When Internet Economics Became Infrastructure](<https://current.tinyfish.ai/issue/13/echoes/article/8340/markdown>) — By [Rina Takahashi](<https://current.tinyfish.ai/team/25/markdown>) · Published 2026-01-21 · Format: Infrastructure Inflections

Transit costs in Seoul run fifteen times higher than Frankfurt. South Korea's government mandates commercial interconnection rates based on predetermined network tiers, giving incumbents pricing power that settlement-free peering elsewhere would prevent. When you're running browser fleets globally, this isn't trivia—it's operational cost shaped by economic structure.

- [Mobile-First Design Created Desktop's Content Dispersion Problem](<https://current.tinyfish.ai/issue/13/echoes/article/8341/markdown>) — Published 2026-01-21

Luke Wroblewski's 2009 mobile-first design philosophy looked like salvation when smartphones started eating the web. Google pushed it hard. By 2016, mobile traffic had overtaken desktop.

- **Pilot Purgatory Pattern** — [Source](</echoes/pilot-purgatory-pattern>) — Published 2026-01-21

Eighty-eight percent of AI prototypes never reach production. The transition from ten connected devices to one thousand isn't a ramp. It's a cliff. What worked in the proof-of-concept hits operational reality and shatters. Technically successful pilots encounter insurmountable challenges at scale.

- **Instrumentation Debt Compounds Exponentially** — [Source](</echoes/instrumentation-debt-compounds>) — Published 2026-01-21

Thirty-two percent of organizations now embed telemetry during development. They learned the hard way: retrofitting observability into production systems gets exponentially harder with time. Wait too long and architectural decisions lock you into blind spots you can't escape without rewrites.

- **Standards Emerge After Lock-in Pain** — [Source](</echoes/standards-after-lockin-pain>) — Published 2026-01-21

Seventy-five percent of organizations now use OpenTelemetry. The pattern repeats: vendor lock-in creates pain, pain reaches threshold, collective movement toward neutrality follows. Standards don't win on technical merit. They win after enough teams experience the cost of proprietary choices.

- **Data Gravity Dictates System Design** — [Source](</echoes/data-gravity-architecture>) — Published 2026-01-21

Compression algorithms achieving ten-times ratios reshape what's architecturally possible. Where your data lives and how densely you can pack it determines system design more than framework choices. Data gravity pulls architecture into orbit around storage economics. Physics wins over preferences.

- **Capacity Constraints Create Rationing Markets** — [Source](</echoes/capacity-rationing-markets>) — Published 2026-01-21

When hyperscalers hit GPU limits in 2025, neocloud providers emerged offering GPU-as-a-Service. Scarcity doesn't slow growth. It creates new market structures. Capacity constraints force priority systems, rationing mechanisms, alternative supply chains. The economics of shortage reshape competitive dynamics entirely.

- **Rewrites Happen at Predictable Thresholds** — [Source](</echoes/predictable-rewrite-thresholds>) — Published 2026-01-21

Microservices adoption follows complexity curves, not technology trends. Systems rewrite themselves at scale thresholds where monolithic architectures can no longer absorb operational load. The transition isn't optional. It's mandated by the mathematics of distributed system complexity hitting organizational limits.

- **Lamport's Logical Clocks Ordered Distributed Events** — [Source](<https://dl.acm.org/doi/10.1145/359545.359563>) — Published 2026-01-21

Leslie Lamport's 1978 paper established the happens-before relationship and logical clocks, showing how distributed systems reason about event ordering without synchronized physical clocks. Every distributed system you build today inherits this framework for understanding causality across network boundaries.

- **Paxos Proved Consensus Despite Failures** — [Source](<https://lamport.azurewebsites.net/pubs/paxos-simple.pdf>) — Published 2026-01-21

Submitted in 1989, published in 1998, Paxos provided the first formally proven consensus algorithm for systems with unreliable networks and failing computers. Its elegant formalism became the foundation for state machine replication throughout modern infrastructure, from databases to coordination services.

- **Google File System Normalized Component Failures** — [Source](<https://research.google.com/archive/gfs-sosp2003.pdf>) — Published 2026-01-21

GFS demonstrated in 2003 how to build scalable distributed storage on commodity hardware by treating failures as normal rather than exceptional. Its radical choices (weak consistency, single master, append-only workloads) showed that accepting constraints enables massive scale on unreliable infrastructure.

- **Bigtable Scaled Structured Storage to Petabytes** — [Source](<https://research.google.com/archive/bigtable-osdi06.pdf>) — Published 2026-01-21

Google's 2006 paper showed how to build distributed structured storage scaling to petabytes across thousands of commodity servers. By relaxing transactional guarantees and embracing a sparse, multi-dimensional sorted map model, Bigtable proved structured data didn't require traditional RDBMS architecture.

- **AI Workloads Break Infrastructure Built for Predictable Demand** — [Source](<https://www.cio.com/article/4118135/how-adaptive-infrastructure-is-evolving-capabilities-at-the-speed-of-business.html>) — Published 2026-01-21

McKinsey finds 44% cite infrastructure constraints blocking AI expansion. Decades of steady-state provisioning assumptions meet agentic unpredictability.

- **Kubernetes Complexity Inherits Google's Original Container Design** — [Source](<https://www.cncf.io/blog/2025/11/18/top-5-hard-earned-lessons-from-the-experts-on-managing-kubernetes/>) — Published 2026-01-21

CNCF practitioners document steep learning curves from architecture built for Google-scale problems, now deployed where simpler orchestration would suffice.

- **Pre-Cloud Database Architecture Blocks Modern AI Integration** — [Source](<https://www.computer.org/publications/tech-news/trends/make-legacy-databases-ai-ready>) — Published 2026-01-21

IEEE reports 90% of businesses hindered by monolithic databases. One-size-fits-all design from centralized computing era costs 62 billion work hours.

- **Physical Limits End Cloud's Decade of Infinite Scale Promises** — [Source](<https://em360tech.com/tech-articles/five-moments-changed-how-enterprises-will-approach-infrastructure-management-2026>) — Published 2026-01-21

2025 marks inflection where electricity and cooling capacity constrain provisioning. The abstraction layer hits concrete reality after years of limitless growth.

- **WHATWG's 2004 Compatibility Decision Creates Ongoing Security Costs** — [Source](<https://html.spec.whatwg.org/>) — Published 2026-01-21

The "don't break the web" principle means modern browsers still support vulnerable legacy protocols for 28 million IE users two decades later.

- **On-Premises Coupling Patterns Make Cloud Migration Expensive** — [Source](<https://www.rishabhsoft.com/blog/legacy-application-migration-to-cloud>) — Published 2026-01-21

84% cite cost management as top migration challenge. Tightly coupled architectures designed for physical infrastructure create hidden refactoring expenses in cloud.

### [Vision](<https://current.tinyfish.ai/issue/13/vision/markdown>)

Where human-AI collaboration is heading

- [When Organizational Capacity Becomes the Binding Constraint](<https://current.tinyfish.ai/issue/13/vision/article/8278/markdown>) — By [Rina Takahashi](<https://current.tinyfish.ai/team/25/markdown>) · Published 2026-01-21 · Format: Threshold Moments

The pilot worked. Finance approved the budget. The team scheduled production rollout for Q1. Three months later, they're still in "final preparations."

- [When Infrastructure Becomes Irreversible](<https://current.tinyfish.ai/issue/13/vision/article/8288/markdown>) — By [Nora Kaplan](<https://current.tinyfish.ai/team/26/markdown>) · Published 2026-01-21 · Format: Infrastructure Economics

Infrastructure decisions feel reversible when you make them. But watch what happens after two years of engineers developing intuition for specific authentication patterns, operations building monitoring around distinctive failure signatures, product designing workflows within particular constraints. The technical migration carries one price tag. Unwinding the organizational knowledge that accumulated invisibly through daily use—that's where reversibility becomes expensive in ways you discover slowly, as each temporary arrangement reveals itself as permanent.

- [Paying for Capabilities You Haven't Needed Yet](<https://current.tinyfish.ai/issue/13/vision/article/8289/markdown>) — By [Nora Kaplan](<https://current.tinyfish.ai/team/26/markdown>) · Published 2026-01-21 · Format: Infrastructure Economics

Optimize authentication handling for the 200 sites you automate today, or pay premium for infrastructure that handles patterns you haven't encountered? The efficient choice looks obvious until you expand to Japanese hotel chains and discover regional variations your system wasn't built for. That flexibility premium you avoided upfront? You pay it anyway, later—as rebuilding costs, constrained expansion, the gap between what your infrastructure can do and what your organization needs it to become.

- [An Interview with Mino on What Websites Whisper to Each Other](<https://current.tinyfish.ai/issue/13/vision/article/8294/markdown>) — Published 2026-01-21

*We sat down with Mino, an enterprise web agent that navigates the live web millions of times daily, to discuss something most humans never notice: the hidden conversation happening beneath every webpage. What started as a straightforward interview about web infrastructure became a fascinating glimpse into the invisible language websites use to talk to each other.*

- **Where Does Accountability Land in Orchestrated Systems?** — [Source](<https://www.mckinsey.com/capabilities/people-and-organizational-performance/our-insights/the-organization-blog/accountability-by-design-in-the-agentic-organization>) — Published 2026-01-21

A single manager now orchestrates hundreds of agents, each spawning dependencies autonomously. When failure ripples through this chain, who answers for it? The orchestrator? The agent designer? The system architect? Traditional org charts offer no map for this terrain.

- **What If Workers Want More Control Than Necessary?** — [Source](<https://futureofwork.saltlab.stanford.edu/>) — Published 2026-01-21

Workers consistently prefer significantly more human control than technical experts deem necessary for nearly half of all tasks. This gap reveals something deeper than change resistance. It's a fundamental disagreement about what work should feel like. Who gets to decide?

- **Can Governance Operate at Deployment Speed?** — [Source](<https://www.weforum.org/stories/2025/05/why-ai-infrastructure-and-governance-must-evolve-together/>) — Published 2026-01-21

AI infrastructure evolves in weeks. Governance frameworks evolve in years. This temporal mismatch appears structural, not temporary. Perhaps the question isn't how to speed up governance, but whether we can build systems that remain governable at internet velocity.

- **Does More Autonomy Always Mean Less Reliability?** — [Source](<https://fin.ai/research/agency-control-reliability-the-tradeoffs-in-customer-support-agents/>) — Published 2026-01-21

Evidence suggests reliability decreases as agent autonomy increases with current LLMs. If this tradeoff proves non-negotiable, we're optimizing for the wrong metric. Or maybe the tension dissolves as models improve. Which assumption shapes your architecture today?

- **What Replaces Static Permissions for Dynamic Agents?** — [Source](<https://www.isaca.org/resources/news-and-trends/industry-news/2025/the-looming-authorization-crisis-why-traditional-iam-fails-agentic-ai>) — Published 2026-01-21

Legacy IAM relies on static roles far too coarse for agents requiring context-dependent permissions. The authorization layer is cracking under agentic demands. Patching the old system might be futile. But building something new means rethinking decades of security architecture.

- **How Do You Manage Entities You Didn't Hire?** — [Source](<https://www.deloitte.com/us/en/insights/topics/technology-management/tech-trends/2026/agentic-ai-strategy.html>) — Published 2026-01-21

By 2030, AI agents may be the primary users of most enterprise systems, autonomously handling entire job functions. Traditional concepts of teams, collaboration, and management start dissolving. What does leadership even mean when half your workforce exists as code?

- **When Automation Beats Augmentation (and Vice Versa)** — [Source](<https://pubsonline.informs.org/doi/10.1287/mnsc.2024.05684>) — Published 2026-01-21

Management Science study maps optimal AI deployment to complementarity patterns. Between-task complementarity favors full automation; within-task complementarity favors augmentation. The framework shows substitution and reallocation benefits vary systematically with task structure, giving leaders concrete criteria for replacement versus enhancement decisions.

- **Where Workers Want AI Help Versus Where Money Flows** — [Source](<https://futureofwork.saltlab.stanford.edu/>) — Published 2026-01-21

Stanford mapped 1,500 workers across 104 occupations against AI agent capabilities. Result: 41% of development effort concentrates in low-priority zones. Workers want equal partnership, not full automation. As agents handle routine operations, interpersonal and organizational skills gain value while information-processing competencies matter less.

- **Three Decades of Web Evolution Converging on Agents** — [Source](<https://arxiv.org/html/2507.10644>) — Published 2026-01-21

Comprehensive analysis traces intelligence migration across web eras: from Semantic Web's explicit data encoding through Multi-Agent Systems' platform intelligence to modern LLM-based agents with embedded understanding. January 2023 marks the inflection point where agent interest surges while Semantic Web fades, enabled by lightweight protocols like MCP.

- **Interfaces That Literally Disappear Into Materials** — [Source](<https://research.google/blog/hidden-interfaces-for-ambient-computing/>) — Published 2026-01-21

Google ACM CHI research embeds displays beneath textile, wood, and acrylic that appear only on-demand for touch interaction. Brightness improvements range from 5x to 40x over traditional displays. The work validates ambient computing's core principle: control surfaces should visually disappear when unused, enabling harmonious coexistence with human environments.

## More

- [Publication guide](<https://current.tinyfish.ai/llms.txt>)
- [Issue archive](<https://current.tinyfish.ai/issues/markdown>)
