Workflow Automation in 2026: n8n Published 196 Advisories in Nine Months, 59,558 Hosts Sat Exposed, and the Code Alternative Raised at $12.55B
The no-code automation tools became agent runtimes this year and the security record followed: n8n went from a EUR 250M valuation to a reported $5.2B while publishing 196 GitHub security advisories in 2026 (19 critical), a CVSS 10.0 unauthenticated flaw left 59,558 hosts exposed per Shadowserver, and CISA added one n8n and six Langflow CVEs to its exploited list. Zapier MCP counts 25 million tool calls, Copilot Studio bills 5 credits per agent action, Agentforce ARR passed $1.5B, and Temporal raised $550M at $12.55B with 4,300 paying customers. Plus a hardened n8n queue-mode compose file.
15 minOct 5, 2026Observability in 2026: OpenTelemetry Graduated, the Collector Is Still v0.162, eBPF Instrumentation Is v0.14, and Datadog Bills $1.12B a Quarter
The non-AI state of observability in 2026 from primary sources: OpenTelemetry graduated from CNCF in May with 12,000 contributors from 2,800 companies, yet the Collector distribution is v0.162.0 with mixed component stability, profiles are alpha, messaging conventions are still Development and OBI, the donated Beyla, is v0.14.0. Datadog grew 36 percent to $1.12B in Q2, cost is the top concern for 31 percent of 1,363 surveyed engineers, and the levers that move the bill (tail sampling, OTTL filtering, cardinality limits, columnar storage, Arrow transport) live in the pipeline you run yourself.
13 minOct 5, 2026MLOps in 2026: Evals Are the New Unit Tests, Judges Agree With Experts 66% of the Time, and OpenAI's Evals API Shuts Down on 30 November
The 2026 state of MLOps, checked against primary sources: OpenAI is closing its Evals API (read-only 31 October, off 30 November) and winding down fine-tuning while buying Promptfoo; Langfuse went to ClickHouse and W&B to CoreWeave; GDPval's model grader agrees with experts 66% of the time against 71% for humans; ARC-AGI-3 went from 0.51% to 99.9% in five months; Terminal-Bench retires a task when every frontier model solves it 5 of 5 times; MLflow 3.16, Kubeflow 26.03, Feast 0.66, lakeFS under BSL, and a pytest gate on a Wilson lower bound that I actually ran.
14 minOct 5, 2026FinOps for AI in 2026: 98% Manage Token Spend, 3 in 4 Can't Prove the Value, GPUs Run at 5%, and FOCUS Gets a Token Column in 1.5
The AI cost ledger as of October 2026: State of FinOps 2026 (1,192 practitioners, 98 percent manage AI spend, up from 31 percent in 2024), the Tokenomics Foundation finding that three in four enterprises cannot prove AI outcomes to the CFO, a per-million-token price table for Anthropic, OpenAI, Google and DeepSeek with cache and batch multipliers, a 20-step agent loop at $1.58 uncached and $0.42 cached, the FOCUS 1.2 to 1.5 roadmap and who exports which version, LiteLLM and Cloudflare budgets, Cast AI's 5 percent GPU utilisation, and $0.0037 of model cost inside a $0.99 resolution.
13 minOct 5, 2026CRA Reporting Went Live on 11 September: 24 Hours to ENISA, 3.08 Billion Rekor Entries, 17% of PyPI Attested, 92% SBOM False Positives
Supply-chain compliance in 2026: what the Cyber Resilience Act's Article 14 duty requires since 11 September 2026 (24-hour early warning, 72-hour notification, ENISA's Single Reporting Platform), what waits until 11 December 2027, how the open-source steward role works, where SBOMs stand (CISA's 2026 minimum elements, CycloneDX 1.7, a 92 percent false-positive rate in a 2,414-repo study), how far provenance has got (SLSA 1.2, 20 percent of PyPI uploads via trusted publishing, Rekor at 3.08 billion entries), the US retreat from mandates, and the pipeline I would run.
13 minOct 5, 2026DevOps Still Matters in 2026: AI Cut Delivery Stability 7.2%, Then Doubled Merged PRs and Added 91% to Review Time
Why DevOps is the big thing of the agent era: DORA 2024 found a 25% rise in AI adoption cost 1.5% throughput and 7.2% stability, DORA 2025 saw throughput turn positive while instability stayed up across nearly 5,000 respondents, and DORA's 2026 ROI model budgets a 15% three-month dip and a change failure rate rising from 5% to 6%; GitHub merged 518.7M PRs (+29%) and over 1M agent PRs in five months, Faros telemetry on 10,000 developers shows 98% more PRs and 91% longer reviews, METR found experienced developers 19% slower, and the Replit postmortem's fixes are 2015 DevOps controls.
13 minOct 5, 2026CI/CD in 2026: Agents Opened 1M PRs in 5 Months, Bots Write 1 in 5 Reviews, and Most Agent PRs Get No Human Look
What the pipeline looks like when AI agents open the pull requests: GitHub's coding agent went GA on 25 September 2025 and opened over a million PRs in five months, Copilot code review passed 60 million reviews and one in five on GitHub, CodeRabbit has reviewed 13 million PRs on $88 million raised, and the first studies find most agent PRs get no human review attention. The gates that still hold: the assigner cannot approve, an extra approval for bot authors, path fences, signed commits, SLSA provenance, and a workflow YAML that gives agent PRs their own lane.
13 minOct 5, 2026AIOps in 2026: 47% on ITBench, 10% on Hard On-Call, $6.50 an Investigation, and Four Outages Where the Automation Was the Incident
The incident-response agents of 2026 against the evidence: Datadog Bits AI SRE GA at about 6.5 credits ($6.50) per investigation, PagerDuty's approval-gated SRE Agent, Grafana's six GA agent tools, Splunk's AI SRE, Elastic buying Deductive, Resolve at a $1B headline valuation on $4M ARR, Traversal's $48M; benchmarks from 13.8% on ITBench in 2025 to 47% in May 2026, 20.7% exact root cause on OpenRCA 2.0, 10% on hard ORCA-Bench and 40% hallucinated causes; what the AWS, Azure, Cloudflare and Google postmortems say about automation; and why a human should hold the button.
14 minOct 5, 2026AI SOC Agents in 2026: 98% Accuracy Claims, 23 to 34% on the Benchmark, and 0% of Teams Letting Them Act Alone
What the security-operations agents from Microsoft, Google, CrowdStrike, Palo Alto, SentinelOne, Torq and a billion-dollar startup cohort actually do in 2026 and what is measured: a median of 100 alerts a day and 28 percent never investigated, 75-minute mean investigations, Microsoft's $4-an-hour compute units and Google's token meter, CrowdStrike's 98 percent triage claim against Meta's 23 to 34 percent benchmark, Anthropic's and Google's reports of attackers running agents against defenders, and a Sigma rule and CI step that keep a human on the merge button.
14 minSep 9, 2026AI Power in 2026: 485 TWh, a 0.3 GW Stargate, a 116 GW Turbine Backlog, and 1,800 MW That Dropped Off the Grid in Seconds
The electricity numbers behind AI, kept honest: IEA's 485 TWh for 2025 and 950 by 2030, LBNL's 4.7 percent of US power heading to 12, what a prompt actually costs (0.24 Wh at Google, 30 times more in reasoning mode), which gigawatt campuses are energised versus announced (Stargate Abilene at 0.3 of 1.2 GW), where the power comes from (a 116 GW gas-turbine backlog with 2031 slots, nuclear restarts in 2027, one SMR construction permit), what the grid operators are doing about 233 GW queues and 1,800 MW load-loss events, rack power from 132 kW to 600 kW, and a script to measure your own job's energy.
14 minSep 8, 2026AI Found the Bugs: 23,000 Findings in a Month, a 3-Day Patch Mandate, and the End of curl's Bounty
From AIxCC's 18 real bugs in August 2025 to Project Glasswing's 23,019 findings by May 2026 and the first AI-written zero-day exploited in the wild. What the cyber reasoning systems, Big Sleep, Codex Security and Mythos Preview actually did, why bug bounties are drowning, why CISA now wants federal patches in three days, and a workflow for a small team that keeps the humans looking only at validated findings.
13 minSep 8, 2026Agent Observability in 2026: The Spans Are Standard, the Standard Isn't Stable, and Nobody Reads the Logs
OpenTelemetry's GenAI conventions moved to their own repo in June and still carry the Development badge; every vendor from Datadog to Grafana ingests them anyway. I instrumented an agent loop with the official Python library, show the exact spans it emits, and go through what the 2026 eval papers say actually catches failures: pass^k, log inspection, and a step budget.
13 minSep 2, 2026It's 2 AM. Do You Know What Your AI Agent Is Doing?
I run the microVMs that other people's AI agents execute in. At 2 AM almost all of them are idle — and the things burning money are the robots watching them.
11 minSep 2, 2026microVM Production Incidents: 4 Postmortems From My Fleet
Four real postmortems from a multi-tenant Firecracker microVM fleet I run solo: a wiped boot disk, silent config drift, a fatal page fault, and no alerts.
10 min