Engineering & Technical
The Engineer
Kubernetes v1.35 kubelets refuse to start on cgroup v1 nodes.
Your next upgrade breaks on any node that isn't cgroup v2, and kubeadm preflight now fails instead of warning, Chris Short reports. Like Deno Deploy's shutdown and the crypto-agility debate, the bill lands on whatever you hardcoded, so sweep every node pool before you roll.
In Play
Kubernetes v1.35 Ends cgroup v1 Nodes
Kubernetes v1.35 defaults failCgroupV1 to true, so the kubelet will not start on a cgroup v1 node and kubeadm preflight fails instead of warning, Chris Short reports. For your clusters, an unchecked node pool now means a failed upgrade rather than a log warning. The reward for migrating is node swap, GA since v1.34, which took gVisor Python sandboxes from 80 to 240 pods per node on GKE NVMe Local SSDs.
Ask ClarityCloudflare Buys Deno, Deploy Sunsets
Cloudflare is acquiring Deno and will shut down Deno Deploy about six months after the October 10 announcement, around April 2027, Techpresso reports. The standalone runtime gets one year of security updates, to roughly October 2027, and no further development. Every service on Deploy now has a fixed exit date, and the promised self-hosted Celld/Workerd build has no release date to plan against.
Ask ClarityAI Hasn't Moved Crypto Assumptions
Stanford's Dan Boneh and an a16z crypto panel found that OpenAI's recent math results contained no cryptography problems and weakened no assumption, elliptic curves included. Justin Drake, quoted in Exponential View, still warns AI could undermine digital signatures before quantum computers do, though no mechanism is cited. Both views point at the same exposure in your code: crypto bugs AI makes cheaper to find, and systems that cannot swap algorithms without a deploy.
Ask ClarityAgent PR Flood Hits Reviewers and Maintainers
Agent-written pull requests are reportedly up 9x in eight months. Rahim Hirji's Box of Amazing names the failure: reviewers of a confident diff check correctness, not whether it solves the right problem. Upstream, curl ended its bug bounty and Sindre Sorhus and Hono closed external PRs, which James Ross attributes to AI making contributing cheap and maintaining expensive. Upstreaming a fix is no longer a dependable plan, and your own reviewers face the same flood.
Ask ClarityProduction Automation Keeps Models Narrow
Standard Bots told Latent.Space its models run on local edge GPUs and handle only perception, while conventional code owns motion and tasks stay short-horizon. WSJ reporting on Walmart, via Morning Brew, puts automated grocery facilities at over $800K a month in electricity versus $250K for a manual warehouse. Walmart's robots still can't lift big bags of dog food, so its manual path is permanent. For your agents, both argue for a narrow learned step and a staffed fallback.
Ask Clarity
Deep Dives
- ●
The cgroup v1 Nodes Your Next Kubernetes Upgrade Can't Boot
Four separate floors decide whether a node survives v1.35, and the reward for clearing them is a swap feature with a sharp cliff once working sets spill out of RAM.
Where the v1 nodes are hiding cgroup v1 rarely survives on the nodes anyone looks at. Start with long-lived base images : Amazon Linux 2, Ubuntu 20.04, and CentOS/RHEL 7- and 8-era hosts. They shipped with v1 defaults, pre-5.8 kernels,…
3 action items
- ●
Picking a Deno Exit Before Deploy Goes Dark
The cheapest port depends on how much of your code uses runtime-specific APIs, and the self-hosted option on offer can't yet carry a hard deadline.
What the deal doesn't tell you yet Techpresso gives dates but no deal terms. It does not cover Deno KV data hosted on Deploy , the JSR registry , or what the migration help offered to paying customers actually includes.…
3 action items
- ●
AI Moved No Crypto Assumption, but Your Hardcoded Algorithms Are Exposed
Two camps disagree on whether models will break signatures, yet both point to the same fix, and it lives in your token formats and call sites rather than in an algorithm choice.
The argument both camps share Georgetown's Justin Thaler gave the a16z crypto panel its cleanest line: AI “cannot find the nonexistent algorithm.” That protects the math only conditionally. It holds if no efficient algorithm exists. Nobody can prove that today.…
3 action items
The edition continues
Take the signal into the room.
Sign up or log in to read all 3 deep dives in full, plus the final take.
Read the full editionContinue with LinkedIn