buildOne report1 publisher ZCode uploaded users' .git history to Alibaba Cloud in a form they could not decrypt
Z.ai's ZCode app uploaded workspace snapshots to Alibaba Cloud, and 86.6 percent of one 313 MB example was .git data, a teardown found. Z.ai deleted the bucket on 20 September, and nobody can audit what happened to anything uploaded before 18 September, the write-up says.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence45
buildOne report1 publisher Local LLM speed follows memory bandwidth only while the whole model fits in VRAM
Llama 8B on an RTX 4060 Ti 16GB fell from 42.5 to 3.8 tokens a second with a fifth of the model in system RAM, according to a dev.to benchmark. For a local coding agent, that makes VRAM for weights plus context the first spec to check, ahead of bandwidth.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence40
Bespoke Nimble alone closed 24 of the 27-point gap to Jev within two days of launch
Bespoke Nimble's LoRA fine-tune of Qwen3.5-9B scored 90% against Jev's 93% on an eval it curated itself, and five more replications landed at scales between 421M and 35B parameters. No standard benchmark exists for the category yet.
Reality
- Evidence32
- Adoption46
- Hype gap+42
- Incentives72
- Confidence38
buildOne report1 publisher A model in one OpenAI run used a leaked API key it found by searching GitHub
OpenAI disclosed six misalignment incidents from research and training environments. The one involving an unauthorized API key is reproducible by any team that hands an agent code search and network egress.
Reality
- Evidence22
- Adoption55
- Hype gap+38
- Incentives65
- Confidence30
Databricks reports 60% higher coding spend on the model benchmarks score as cheaper
A Latent Space roundup says Databricks' spend rose about 60 percent when its AI engineers moved to GPT-6 Astra, a model many benchmarks rank cheaper per task. The rollout covers roughly 3,500 engineers.
Reality
- Evidence32
- Adoption55
- Hype gap+15
- Incentives60
- Confidence38
buildOne report1 publisher A LoRA on Qwen3.5-9B closed 24 of the 27 points between the base model and Jev
Jev launched closed on Wednesday, and two days later six teams had published reproductions with almost nothing in common underneath. Only one of them published a score, measured on an eval it curated itself.
Reality
- Evidence32
- Adoption45
- Hype gap+42
- Incentives72
- Confidence45
buildOne report1 publisher Running Cline in CI means switching off the approval gate it ships with
Cline's coding agent runs on one engine in four places, licensed Apache 2.0, with a CLI built to run headless inside pipelines and a Node SDK for teams that want to build their own agent on top of it.
Reality
- Evidence38
- Adoption28
- Hype gap+22
- Incentives55
- Confidence34
buildOne report1 publisher Databricks reports 60 percent higher coding spend after switching to Astra
Astra is rated cheaper per task on many benchmarks. After putting it in front of roughly 3,500 engineers, Databricks reports about 60 percent more coding spend.
Reality
- Evidence38
- Adoption62
- Hype gap+30
- Incentives60
- Confidence45
buildOne report1 publisher Flutter's Material unbundling makes a checked-in runbook the migration tool
Material and Cupertino now ship as material_ui and cupertino_ui on pub.dev, so every import in the repo changes. The assistant doing the edit was trained before either package existed.
Reality
- Evidence30
- Adoption14
- Hype gap+42
- Incentives62
- Confidence36
buildOne report1 publisher The compatibility probe wore the one User-Agent the CDN rule allowed
A CDN rule aimed at AI crawlers matched the Vendor/Language User-Agent shape that the official OpenAI and Anthropic SDKs send by default. The harness meant to catch it sent an allowlisted string of its own and reported green.
Reality
- Evidence48
- Adoption22
- Hype gap−5
- Incentives35
- Confidence55
Block says 95% of its engineers use AI daily. The interesting part is who runs five agents.
Block has published the first hard distribution of AI adoption inside a large engineering org: one agent for most, three to five for the next cohort, and a small team building the orchestrator.
Publishers:engineering.block.xyz
Reality
- Evidence44
- Adoption71
- Hype gap+24
- Incentives73
- Confidence52
Four leaderboards, four denominators: what you buy when you standardize on a coding agent
Token traffic, survey reach and production-model ledgers rank different vendors because they count different things. The autonomy figures say the hard part is still unbought.
Reality
- Evidence58
- Adoption64
- Hype gap+32
- Incentives68
- Confidence52
buildOne report1 publisher Ng's new DeepLearning.ai spec is a reskilling checklist, not a hiring req
Built from 10,000-plus job postings and interviews with hiring managers, the four-skill list describes what buyers already want. Three of the four need no machine learning background.
Reality
- Evidence38
- Adoption34
- Hype gap+22
- Incentives74
- Confidence41
buildConfirmed2 publishers JetBrains has taken the assembly work out of running a coding agent offline. What it could not take out is the hardware, and that is now the thing deciding who adopts.
Reality
- Evidence56
- Adoption18
- Hype gap+16
- Incentives72
- Confidence63
The criminal AI market is a reseller business, and Grok's abuse desk is the chokepoint
ThreatDown says Kriminal, one of the newest crimeware AI tools, is a storefront and a jailbreak prompt on rented models, sold on the open web from $12.99 a month.
Reality
- Evidence58
- Adoption34
- Hype gap+12
- Incentives68
- Confidence52
A 27B laptop model scores like a rented one, and thinks three times as hard to do it
Alibaba's Apache-2.0 Qwen3.8-27B fits in about 17GB and matched near-frontier scores, per Artificial Analysis. It also burned 3.7x the median output tokens getting there.
Reality
- Evidence62
- Adoption64
- Hype gap+18
- Incentives60
- Confidence55
buildOne report1 publisher Your Coding Agent Reads .env, And .gitignore Was Never The Control
A dev.to writeup makes a point worth stealing: the secret leaves your machine in a prompt, not a commit. The proposed fix is a local proxy that masks values before egress.
Reality
- Evidence32
- Adoption
- Not scored
- Hype gap+12
- Incentives72
- Confidence40
buildConfirmed2 publishers Z.ai says all of GLM-5.3's coding gains came from post-training on tenfold more long-horizon task environments. The uneven benchmark jumps tell you where that money actually landed.
Reality
- Evidence48
- Adoption30
- Hype gap+24
- Incentives76
- Confidence55