Spec-driven agent coding gets a framework; supply chain attacks keep escalating.
Top Signal
Get Shit Done ships spec-driven development system for Claude Code
workflow
GitHub Trending
GSD is a meta-prompting and context engineering framework that wraps Claude Code in a structured spec-driven workflow. Instead of ad-hoc prompting, you define specs and let the system manage context, task decomposition, and execution. It's lightweight — no server, no dependencies — just a system of prompts and conventions that sit on top of Claude Code. Why this matters: as agent-assisted coding matures, the bottleneck shifts from 'can the AI write code' to 'can you reliably tell it what to build.' GSD codifies that communication layer. If you're running Claude Code for anything beyond one-off scripts, this is worth 20 minutes to evaluate. The approach — treating prompt engineering as a first-class development discipline — aligns with the 'harness engineering' pattern we've been tracking.
Read more →
Fast Signals
GitHub launches official stacked PRs support (gh-stack)
workflow
HN Front Page
GitHub now ships first-party tooling for stacked pull requests — the workflow where you chain dependent PRs so reviewers see small, logical diffs instead of one massive PR. 716 HN points and 377 comments suggest massive pent-up demand. If you're shipping AI features in large PRs that reviewers rubber-stamp, stacked PRs force better decomposition.
Link →
Voicebox: open-source voice synthesis studio hits GitHub Trending
new tool
GitHub Trending
A local-first voice synthesis tool with a studio UI for creating, managing, and exporting voice clones. Relevant if you're building voice features without depending on ElevenLabs or Play.ht APIs. Open-source means you can embed it in pipelines and avoid per-character pricing.
Link →
Servo 0.1.0 ships as an embeddable Rust crate on crates.io
platform change
Simon Willison
The Servo browser engine is now available as a Rust library you can embed in your own applications. This is the first time a production-grade browser engine has been packaged as a simple crate dependency. Relevant for anyone building AI tools that need to render, scrape, or interact with web content programmatically — an alternative to headless Chrome for agent browsing.
Link →
Attacker bought 30 WordPress plugins and injected backdoors in all of them
emerging signal
HN Front Page
Someone systematically purchased established WordPress plugins and planted backdoors across all 30. This is the plugin-marketplace variant of the supply chain attacks we've been tracking all week. If your AI tools generate code that installs dependencies, this is another reason to pin versions and audit what your agents pull in.
Link →
Cloudflare ships unified CLI for its entire platform
platform change
HN Front Page
Cloudflare released a single CLI covering Workers, R2, D1, KV, and the rest of the platform. For AI builders deploying on Cloudflare's edge, this means you can now script full deployments without touching the dashboard. Agent-friendly — one binary, consistent flags, composable with shell scripts.
Link →
Radar
Brightbean: full social media tool built in 3 weeks with Claude + Codex
A Show HN project (179 points, 123 comments) demonstrating a complete social media management platform built entirely with AI coding assistants in 3 weeks. Worth studying the repo structure for how someone decomposed a real product into AI-manageable chunks.
Link →
Convergence Watch
supply chain compromise
TRENDING
3 mentions across HN Front Page, Simon Willison
Fourth consecutive day of supply chain attack signals. Pattern has expanded from npm/PyPI package poisoning to WordPress plugin acquisition attacks. The attack surface for AI-generated code that auto-installs dependencies is growing. Consider adding dependency auditing to your CI if you haven't already.
agent management platforms
TRENDING
5 mentions across GitHub Trending, HN Show, r/LocalLLaMA
Third consecutive day across 3 sources. The space is consolidating around tools that orchestrate multiple agents as teams rather than running single agents. GSD's spec-driven approach and earlier entries like Ralph suggest the 'how do I manage my AI workforce' question is becoming urgent.
claude code ecosystem tooling
4 mentions across GitHub Trending, HN Show, HN Front Page
GSD and Claude Cookbooks both trending on GitHub. Combined with yesterday's claude-mem and claudraband, Claude Code is spawning a rich third-party ecosystem. The tool is becoming a platform in its own right.
SOURCE DOWN: r/LocalLLaMA returned 0 items
STALE: Latent Space newest item is >48h old