TLDR 2026-10-22

Keep credentials out of your agent's context (Sponsor)

An agent that reads a web page, a Jira comment, or an inbox can pick up instructions an attacker wrote. If a Slack or Salesforce token is sitting in that same process, it's exposed too.

Here's how you can keep credentials away from agents with WorkOS:

>> Pipes handles OAuth, token refresh, and encrypted credential storage behind a drop-in widget.

>> Relay, now in early access, routes your agent's API calls through WorkOS, which attaches the credential server-side and restricts requests to allowed provider hosts. Permissions and other outbound paths still need their own controls.

See how Relay works →

📱

Big Tech & Startups

Anthropic Joins the AI Agent Race With Claude Duet (3 minute read)

Anthropic's Claude Duet joins a fast-growing field of AI assistants that take actions and perform tasks on their own. Unlike OpenAI's dots and Meta's Muse, Anthropic's agent was built for work and is less capable at personal errands. It can connect to more than 6,000 outside apps and make purchases through Link, Stripe's digital wallet, and Shopify's Shop Pay. The agent shows users exactly what it plans to do before performing actions, and some actions, like trading stocks or moving money between accounts, are blocked even with user approval. The wait list to use the agent is now open to Anthropic's Pro and Max plan subscribers.

Musk Tries to Lock In His Tesla-SpaceX Dream Before Trump's Exit (11 minute read)

Elon Musk is fully behind a combination of SpaceX and Tesla, his two most valuable companies. He is pushing to announce a deal by the first half of 2027 so it closes during the Trump administration. The timing will depend on when Tesla's board gets comfortable with the details - SpaceX shareholder approval is less of an obstacle, as Musk controls more than 80% of the voting power. Combining the companies before the end of this administration would consolidate Musk's corporate power before a potentially less accommodating political and financial environment takes hold.

🚀

Science & Futuristic Technology

Tesla starts Optimus robot production in California as profit falls 43% (3 minute read)

Tesla has started production of its Optimus humanoid robot at its factory in Fremont, California. While the company admits there is still more work to be done before the robot is fully safe and reliable, it says it has proven that the current manufacturing process for Optimus is suitable for a commercial product. Elon Musk says Tesla will be able to make 20,000 units per week by the end of 2027. Tesla's profits fell 43% in the third quarter due to heavy investments in its Optimus robots, AI, and autonomous driving.

Physicists trap and tame single particle of antimatter for months (12 minute read)

Physicists at Northwestern University have coaxed a single positron (the antimatter counterpart of an electron) into an exquisitely controlled quantum state for the first time. The scientists cooled the fast-moving particle to nearly absolute zero after capturing it from radioactive decay, and then suspended it in a near-perfect vacuum, resulting in a state where the positron behaved much like an artificial atom with quantum energy levels scientists can precisely control and observe. The technique could enable the most precise test yet of a fundamental symmetry between electrons and their antimatter counterparts.

💻

Programming, Design & Data Science

Build and scale a winning agent strategy (Sponsor)

As teams move agents from experiments into production, many of the hardest problems sit outside the model. Someone has to own each agent. It has to be evaluated and governed, and it has to keep getting better once it's live.

Join us at 10 AM PT on Nov 5th for a live session on the Agentic Operating Model, a framework for aligning the people, processes, and technology it takes to run AI across an organization.

The Topology of an LLM Agent Loop With Tool Use (7 minute read)

An agent is three things: a model, an agentic loop, and a set of tools. Where these run has implications for cost, capability, effectiveness, and security. If you focus on topology, you can break down any agentic product and reason about what a product can and cannot do. There isn't one perfect loop - good UX for a general-purpose chatbot is not the same as good UX for a coding agent.

The bridge to agent-scale Git infrastructure (11 minute read)

Git traffic grew exponentially over the past year. During that time, GitHub started moving almost all of its repositories to Azure. This post discusses how per-reference quorums will bring over the rest, and how object storage lets reads scale independently.

🎁

Miscellaneous

The internet is having a very bad cybersecurity day (2 minute read)

AI has discovered critical security vulnerabilities in PHP, prompting the US National Security Agency to advise organizations using PHP to either update immediately or take their systems offline until they can. Node.js has released an update that fixes four high-severity vulnerabilities. LiteLLM was compromised by an attacker who injected malicious code. eMudhra, an Indian certificate authority, had its private keys compromised, potentially allowing attackers to issue fraudulent certificates and impersonate legitimate websites. These unrelated issues highlight the challenges cybersecurity teams now face.

How Mark Zuckerberg Pushed Meta to Shield Him From California's Proposed Wealth Tax (6 minute read)

California's proposed tax on billionaires prompted Mark Zuckerberg to leverage the board at Meta to get the company to protect him from it. He issued an ultimatum to the board on September 9 that he would sell his home in Palo Alto, and the listing would be public, if a deal wasn't struck by September 13. The board decided to issue a new class of stock to shareholders that Zuckerberg could sell to pay the potential wealth tax without cutting into his 60.6% voting power. California's proposal would assess a one-time 5% tax on all holdings of billionaires who lived in California as of January 1, 2026.

⚡

Quick Links

Reach 8 million tech professionals reading TLDR (Sponsor)

Ads get ignored on social media but not in TLDR! Reach developers, PMs, marketers, founders and other tech leaders where they actually pay attention. Learn more about sponsorship opportunities.

Why AI's Deepest Mind Believes the World Is About to Change Radically (19 minute read)

Demis Hassabis believes that AI can lead to an amazing future, but we have to intentionally build toward it.

The compiler was supposed to end programming too (15 minute read)

IBM claimed FORTRAN would virtually eliminate coding and debugging back in 1954.

Meta says Muse has over 10M users, with shopping a top activity (3 minute read)

Over a quarter of Muse's engaged users were shopping via the AI agent, with an average purchase size of over $200.

Sentry gave $1M to Open Source maintainers this year (Sponsor)

41 companies have now paid $7.4M through the Open Source Pledge, which supports the people who maintain critical open source infrastructure. Join the Pledge.

Today's PHP Security Release, and How We're Strengthening PHP Security (12 minute read)

PHP's recent release fixes two critical vulnerabilities that allow unauthenticated attackers to execute code on servers running PHP.

Mathematics is a subject for the young (13 minute read)

Mathematics is changing faster than at any point in its history, and today's graduate students and postdocs will shape its future.

The open standard for agent readiness (14 minute read)

AgentReady is an open specification for what a product should implement to be usable by AI agents.

Love TLDR? Tell your friends and get rewards!

Share your referral link below with friends to get free TLDR swag!

https://refer.tldr.tech/c463e0ba/

Track your referrals here.

Want to advertise in TLDR? 📰

If your company is interested in reaching an audience of tech executives, decision-makers and engineers, you may want to advertise with us.

Want to work at TLDR? 💼

Apply here, create your own role or send a friend's resume to and get $1k if we hire them! TLDR is one of Inc.'s Best Bootstrapped businesses of 2025.

If you have any comments or feedback, just respond to this email!

Thanks for reading,
Dan Ni & Di Wu

Manage your subscriptions to our other newsletters on tech, startups, and programming. Or if TLDR isn't for you, please unsubscribe.

Anthropic's AI agent 🤖, Elon's merger 💰, internet security meltdown 👨‍💻