标签：#RNA

Winning is the part everyone posts about. The two months after — the part where a cash prize actually...

The EU-funded XAIDA project is using artificial intelligence to help researchers detect, analyze and attribute extreme weather events, including heatwaves, in a changing climate. Its work matters because better understanding of the link between climate change and individual extremes can support more informed decisions over time. But XAIDA is not launching a consumer weather app, a commercial forecasting service, or a ready-to-integrate API for businesses. XAIDA, short for eXtreme events: Artificial Intelligence for Detection and Attribution , began in 2021 under the EU's Horizon 2020 programme. The project brings together European research groups working on data-driven methods for extreme-weather science. Its official tools overview describes a collection of AI-enabled capabilities designed to support science, policy and decision-making. That distinction is important. A weather forecast estimates likely conditions at a particular place and time. XAIDA's work is focused more broadly on detecting extreme phenomena, examining their characteristics and quantifying the influence of climate change. These are related to prediction, but they are not the same as publishing a daily operational forecast for a business location. What XAIDA is building XAIDA's public materials describe the Artificial Intelligence for Disentangling Extremes , or AIDE, toolbox alongside related AI-based methods. The project also refers to stochastic weather generation and other analytical approaches. Together, these tools are intended to help researchers investigate complex extreme events and their climate context. The project has used AI techniques, including variational autoencoders, in case studies and research outputs concerning heatwaves and other extremes. A variational autoencoder is a machine-learning approach that can learn patterns in complex data and generate statistically plausible variations. In this context, such methods can help researchers examine how extreme events relate to under

Il rischio reale dell'AI enterprise non sono gli agenti autonomi. È la complessità tra di loro. Executive Briefing — Settembre 2026 Quando le aziende deployano fleet di agenti AI invece di sistemi singoli, il pericolo vero non è un agente che si mette a fare il matto da solo. È la complessità emergente delle loro interazioni: una ragnatela di chiamate a cascata, permessi dimenticati e gap di accountability che nessuna checklist può chiudere. 1. Il problema che nessuno vede arrivare Le aziende non deployano un agente e lo guardano girare. Deployano fleet: bot di supporto, agenti di retrieval, layer di orchestrazione, ognuno che chiama API, delega ad altri agenti, si infila in sistemi che non erano stati progettati per decisioni automatiche. Lo scenario che dovrebbe farvi perdere il sonno non è un singolo agente che combina un guaio. È cento agenti che fanno esattamente quello per cui sono stati costruiti, tutti insieme, in combinazioni che nessuno ha disegnato. La complessità non cresce linearmente col numero di agenti. Aggiungi un secondo agente e aggiungi una connessione. Aggiungi il decimo e potenzialmente aggiungi decine di connessioni, perché ora qualsiasi agente può chiamarne un altro, e ogni chiamata può scatenarne una terza altrove. Un ticket di supporto che prima toccava un solo sistema oggi può passare attraverso quattro agenti prima che un essere umano lo veda. E ogni passaggio è un punto decisionale non approvato. La maggior parte dei programmi AI enterprise si blocca quando gli umani responsabili perdono il filo. Chiedete a un team security quali agenti possono raggiungere quali sistemi, e otterrete silenzio. Chiedete quale agente ha triggered quale downstream action tre salti fa. Ancora silenzio. 2. Perché le checklist non funzionano L'istinto è trattarlo come compliance: approva l'agente, registralo, passa oltre. Ma una checklist valuta un singolo punto nel tempo. La complessità corre lungo una catena, e non puoi governare una catena con una pila di ap

Enterprise AI's real risk isn't autonomous agents. It's the complexity between them. Executive Briefing — September 2026 When enterprises deploy fleets of AI agents instead of single systems, the real danger is not a rogue agent. It is the emergent complexity of their interactions — a web of cascading calls, forgotten permissions, and accountability gaps that no checklist can fix. 1. The problem nobody sees coming Enterprises do not deploy one agent and watch it run. They deploy fleets: support bots, retrieval agents, orchestration layers, each calling APIs, delegating to other agents, reaching into systems that were never designed for machine decision-makers. The failure mode that should keep you up at night is not a single agent doing something bad. It is a hundred agents doing exactly what they were built to do, all at once, in combinations nobody designed for. Complexity does not grow linearly with agent count. Add a second agent and you add one connection. Add a tenth and you potentially add dozens, because any agent might call any other, and each call can trigger another somewhere else. A support ticket that used to touch one system might now pass through four agents before a human ever sees it. Every handoff is an undocumented decision point. Most enterprise AI programs stall when the humans responsible lose the thread. Ask a security team which agents can reach which systems, and you get silence. Ask which agent triggered which downstream action three hops ago. More silence. 2. Why checklists fail The instinct is to treat this like a compliance checklist. Approve the agent. Log the agent. Move on. But a checklist checks a single point in time. Complexity runs across a chain, and you cannot govern a chain with a stack of one-time approvals any more than you can call a diet successful because you had a vegetable once. Two failure modes dominate. Permissions creep. Somebody builds an agent to summarize support tickets and grants it broad API access because scop

Hey everyone! I bring you my development journey on what I have discovered, accomplishments for this...

The European Union's Roam Like at Home regime now extends to Moldova and Ukraine, broadening the area where travellers can use mobile calls, SMS and data at their domestic price. For companies whose staff travel, work in the field or coordinate operations across these markets, the change can make mobile spending more predictable and reduce a familiar source of cross-border friction. The extension was approved by the Council of the EU in July 2025 for application from 2026. The Council's official announcement on the roaming extension confirms that Moldova and Ukraine were set to join the EU roaming area from 1 January 2026. Follow-up EU updates recorded Ukraine's formal accession in Kyiv on 12 January 2026. In practical terms, a customer from an EU country, Moldova or Ukraine can use their domestic mobile plan while roaming in the other participating areas, rather than facing a separate retail roaming tariff. The arrangement is not a blanket promise of unlimited use abroad, however. It operates under the established Roam Like at Home framework, including fair-use policies, sustainability derogations and wholesale roaming charges. What the extension changes for cross-border work For a travelling employee, a mobile connection is part of the working toolkit. Calls with customers, two-factor authentication messages, map and logistics apps, messaging platforms and cloud services can all rely on roaming data. Bringing Moldova and Ukraine into the same roaming area gives businesses a clearer basis for planning those routine costs when staff move between the EU and either country. The change also matters for service consistency. EU communications around the extension stress that roaming customers should receive the same quality of service available at home, including access to technologies such as 4G where those are available under the domestic service. That principle is important for work that depends on stable mobile data, although real-world performance will still depend

Messing with the genetic code might have gotten a bit easier to do.

Enterprise vibe coding: the governance framework for shipping AI-generated apps to production Published: August 22, 2026 Category: Enterprise · AI Deployments Reading time: 9 minutes Author: NEXUS AI Team Gartner forecasts that 40% of new enterprise production software will be built using vibe coding techniques by 2028. A 2026 scan of more than 1,400 live vibe-coded applications found that 65% already had a security issue, and 58% shipped with at least one critical vulnerability. Those two numbers describe the same industry moving in opposite directions at once: adoption is outrunning governance. This post covers what a governance framework for enterprise vibe coding actually looks like, the five controls it needs, and where most teams get it wrong. What is enterprise vibe coding? Enterprise vibe coding is the practice of using natural-language prompts to generate application code, then governing that code through mandatory review, access control, and audit before it reaches production, rather than letting it ship straight from a prompt to a live endpoint. The term (coined by Andrej Karpathy in early 2025) originally described a fast, low-friction way for one person to build a prototype. What "enterprise" adds is the governance layer prototyping was never built for: staging environments, encrypted secrets, role-based access, and a record of who approved what. That distinction matters because the adoption curve and the risk curve are not moving together. The governance gap, in three numbers 40% of new enterprise production software will be built using vibe coding techniques by 2028, according to Gartner's May 2025 report "Why Vibe Coding Needs to Be Taken Seriously," as reported by CIO Dive . 65% of vibe-coded production applications had a security issue, in a 2026 scan of more than 1,400 live apps by the API security firm Escape.tech, reported via a Cloud Security Alliance research note . 58% of those same applications shipped with at least one critical vulnerabilit

Hibernation cuts down on synapses, but mice seem to retain memories anyway.

Cloudflare has recently detailed how it is using AI to transform internal engineering standards from passive documentation into an actively enforced control system across the software development lifecycle. By Craig Risi

The vaccine reportedly thwarted the cancer's return and spread.

The European Commission’s 2022 procurement for a participatory foresight study on next-generation online platforms placed platform design and consumer behaviour within a wider policy question: how could the platform economy evolve, and what might those changes mean for European Union policymaking? The work was not a narrow experiment on marketplace user experience. Instead, it was a two-year exercise intended to identify long-term trends across online platforms and assess their policy implications. The Commission published the call, reference CNECT/2022/OP/0049 , in August 2022. Its official announcement of the foresight study on the future of online platforms lists a submission deadline of 22 September 2022 at 16:00 CEST . That makes the procurement a completed historical call, rather than a current tender opportunity. The framing remains relevant because interface design, recommendation systems and other platform choices can influence what people notice, compare and select online. But the Commission’s stated objective was broader than any one marketplace design question. It sought a structured view of the platform economy’s possible future trajectories and the public-policy issues those trajectories could raise. What the 2022 study was designed to examine The Commission described the project as a two-year participatory foresight study . Participatory foresight brings relevant groups into a structured exploration of future developments rather than attempting to predict one fixed outcome. In this case, the study was designed to identify ten topics in collaboration with Commission services, then examine long-term trends and their potential policy relevance. Design’s influence on consumer behaviour was part of the broader theme, not the full scope of the procurement. That distinction matters. A study focused solely on a marketplace interface might measure how a particular ranking, default or layout affects a defined consumer decision. The Commission’s foresight work i

Everybody says AI governance matters. They are right. But that is the easy part. The harder part is...

The European Commission has updated its guidelines for teachers and educators on tackling disinformation and promoting digital literacy, extending the guidance to address generative AI , influencer dynamics and prebunking . The refresh gives schools and education professionals new materials for helping young people assess online information and build resilience against misleading content. The revised guidance sits within the EU's Digital Education Action Plan (2021-2027) . According to the European Commission publication record for the updated guidelines , the Directorate-General for Education, Youth, Sport and Culture released the updated publication on 4 June 2026. The update matters because the information environment facing pupils has changed substantially since the original guidance was issued. Generative AI can now be relevant to how online content is created, altered and spread. At the same time, social-media reliance and influencer-led information dynamics have become more prominent considerations for digital literacy education. The Commission's revised material positions educators and schools as part of the response, rather than treating disinformation solely as a platform or policy problem. What the updated EU guidance adds The updated guidelines are one element of a wider package of digital education and online-safety work. European Commission press materials published on 5 March 2026 described four sets of guidelines, comprising two new sets and two updates. The digital literacy and disinformation guidance was among the updated materials, with explicit attention to generative AI and contemporary online dynamics. A Better Internet for Kids summary published on 10 March 2026 identified several practical and policy-oriented additions. These include: Lesson plans and an updated glossary to support classroom use. Consideration of generative AI's impact on disinformation . Coverage of social-media reliance and the role of influencers in shaping information exp

What are you working on? I hear these words in my day-to-day. And sometimes, when I hear them, there’s this little brain freeze that happens because my brain is probably trying to put into words the amount of things that have wandered through my head in the last 24 hours. 😂 So I thought, okay, let me try something. I want to take some of those wandering thoughts, explorations, things I'm trying out and things I'm learning, and put them into writing. This is going to be a series where I come and talk about what I'm working on — software engineering, product, work, people, faith, relationships, rest, and whatever else happens to be taking up space in my head at the moment. So, what am I working on? I recently started writing backend code, and there’s a bit of a backstory to that. I built this frontend commerce store years ago where people can come and shop for furniture. At the time, I used a backend-as-a-service to handle the backend side of the application. Now, I’m coming back to that same system and writing the backend myself with NestJS. I wanted to go beyond just consuming a backend and actually understand what is happening behind the scenes. The learning process is a bit stretching at the moment because I’m getting familiar with a lot of new concepts. Tiring and frustrating? Yes. But the feeling when I finally understand the reason behind something is always refreshing. That has been really rewarding lately. I'm also in the middle of launching a mobile application at my workplace, going through system design classes, figuring out how to get the best out of my engineers (AI sub-agents, by the way 😅), and occasionally imagining that dream job where you get to build products that serve millions of people and work with really brilliant minds. Also, I discovered the productivity rush that comes with using large monitors. 😂 Then there's learning how to rest while also trying to close out all the open loops in my head. Building reading habits. Figuring out what to pri

Hello I'm Marlene and I invite you to follow my journey developing ProForma.net. But since this is my first post about ProForma, I will give you an overview of what I'm trying to achieve. What ProForma.net is planned to be The main Goal is to develop an application shell for schema based Applications. You will have mainly to different types of UI schemes, first for the Window Layout, there you will tell which elements are contained in the different application sections, like what Buttons or Menus you will have in the window title bar, or what sidebar tabs you will provide for the Ribbons, what the content area is filled with (spoiler I'm going to use flexlayout-react https://github.com/caplin/FlexLayout ). As host application I will write a C# application using the WebView2 abstraction library Photino ( https://www.tryphotino.io/ ). What you can expect In this dev diary series I'll show what I was working on, I'll show you some code and will explain why did to choose the way I did it, or will share some thoughts about the project or the architecture. I also will show you how to write plugins for ProForma, because I plan to handle everything as a plugin so you can change the most aspects of the app. The journey begins: overcome the guard Ok, most of you will know it... parameter checking on top of a method... nearly endless 'if throw' constructs... they are ugly... if (! Directory . Exists ( physicalPath )) throw new DirectoryNotFoundException ( $"Could not find the given path ' { physicalPath } '." ); if ( _directories . ContainsKey ( urlPrefix )) throw new Exception ( $"Key ' { urlPrefix } ' already exists." ); if ( _directories . ContainsValue ( physicalPath )) throw new Exception ( $"Physical Path ' { physicalPath } ' already exists." ); I mean who wants to read that? I don't. So I wanted guards, and I've could used some 3rd Party library, but instead I came up with my own solution for the Guards, since I don't always want to throw the exception on a failed asser

The European Union's AI Act establishes a risk-based framework for AI systems that ranges from prohibited practices to minimal-risk uses. Regulation (EU) 2024/1689 divides the framework into four levels: unacceptable risk, high risk, limited risk and minimal risk. For AI developers, vendors and enterprises, the practical importance is straightforward: the system's risk category determines whether it can be used and, if so, the level of compliance, transparency and governance expected around it. The regulation entered into force on 1 August 2024 . Its four-tier approach is designed to avoid applying the same regulatory burden to every AI use case. Instead, the Act reserves its strictest treatment for systems that present the greatest risk, while leaving minimal-risk systems without additional sector-specific obligations under the AI Act beyond general law. The definitive reference is the official text of Regulation (EU) 2024/1689 . Although older explainers may use slightly different labels for transparency-related obligations, the final binding regulation is consistently described by EU institutions as a four-level risk framework. The EU AI Act's four risk levels The categories are not simply labels for how sophisticated an AI model is. They are a regulatory method for connecting an AI system's use and potential impact with corresponding obligations. A business cannot determine its position merely by calling a tool "low risk". It needs to assess the system against the Act's framework and the obligations associated with the applicable category. Risk level Regulatory position Core consequence Unacceptable risk Prohibited AI practices The practices are banned outright. High risk Systems subject to extensive obligations Requirements include conformity assessments and risk management. Limited risk Systems subject to certain requirements Transparency and oversight requirements apply in relevant cases. Minimal risk Most AI systems No additional sector-specific AI Act oblig

The European Union's voluntary General-Purpose AI Code of Practice gives providers of general-purpose AI models a practical framework for supporting compliance with the EU AI Act. Finalised in July 2025, the code addresses transparency, copyright, and safety and security. Its public signatory list includes major AI and technology companies, but official EU material does not support claims that roughly 190 organisations have signed the GPAI code. The distinction matters for companies assessing AI suppliers. Signing the code can signal engagement with the EU's emerging governance expectations, but it is not a substitute for examining a provider's specific commitments, documentation, and product-level controls. The European Commission describes the code as a voluntary instrument, and its official GPAI Code of Practice page states that the signatory process and public information continue to be updated. What the GPAI Code of Practice covers The code is designed for providers of general-purpose AI models, a category that can include models used across multiple downstream applications. Rather than creating a separate legal regime, it is intended to help providers demonstrate how they can meet relevant AI Act obligations . Its three chapters cover different aspects of provider responsibility: Transparency: commitments related to information and documentation that can help downstream providers understand and use general-purpose AI models appropriately. Copyright: measures intended to address copyright-related obligations for providers of general-purpose AI models. Safety and security: commitments focused on managing risks associated with the most capable models, including systemic-risk considerations where applicable. Code chapter Primary focus Why it matters to AI buyers Transparency Provider information and documentation Helps buyers assess whether a model provider can supply information needed for downstream use. Copyright Copyright-related provider commitments Relevant

This week's Java roundup for July 27th, 2026, features news highlighting: OpenJDK JEPs targeted and proposed to target for JDK 28; the GA release of GPULlama3.java 1.0; point releases of Micronaut, Quarkus and JobRunr; a maintenance release of JDKUpdater; the sixth release candidate of Maven 4.0; and the first milestone release of Jakarta Agentic AI 1.0. By Michael Redlich

The Observability Black Box As autonomous AI agents evolve from isolated chat assistants into multi-agent systems executing multi-step business logic across databases, APIs, and microservices, enterprise platform teams face an acute operational challenge: black-box opacity. When an autonomous agent fails, hallucinates, or executes an out-of-bounds API call, traditional Application Performance Monitoring (APM) tools fall short. Standard HTTP request logging and basic prompt-response captures cannot reconstruct the non-deterministic reasoning loops, tool selection branches, or sub-agent delegations that led to an incident. Furthermore, enterprise auditors, security teams, and regulatory bodies (governed by SOC 2, FedRAMP, and the EU AI Act) now require non-repudiable proof of agent execution. Organizations must be able to answer five fundamental questions for every production run: Which human or non-human identity authorized the agent run? What planner reasoning path or tool routing logic was chosen? Which exact data assets or vector embeddings were retrieved into context? What was the precise execution latency, token cost, and error tax of each intermediate step? Can the complete execution graph be cryptographically reconstructed for compliance review? To resolve this challenge, platform engineering teams must deploy Audit, Observability & Lineage —an architecture anchored in OpenTelemetry (OTel), OWASP Agent Observability Standards, and immutable lineage graphs. Deep-Dive Architecture: OpenTelemetry & Lineage Integration A production-grade Agent Observability stack avoids proprietary vendor lock-in by standardizing on OpenTelemetry (OTel) OTLP trace ingestion and open metadata stores. 1. The Unified OpenTelemetry Span Tree Every agent execution unit — from user intent trigger to final task completion — is encapsulated within a single root trace context ( agent.run ). Sub-tasks, tool calls, and model invocations are recorded as hierarchical child spans: [ Root Trace: