jonathanwall retweeted
Big day for @AccrualHQ: we’re acquiring the team and technology behind @puzzlefin's AI Close, Cowork and Chat products, accelerating our expansion into CAS and our vision for one AI platform for the entire accounting firm.
Delighted to welcome @sashaorloff and team aboard! 🚀
👉 accrual.com/insights/puzzle
jonathanwall retweeted
to make the “ai software factory” work, we need to be qualitymaxxing. every software product should have this running in the background
in six months this will feel obvious
jonathanwall retweeted
Eight months ago we launched a bug finder that you could run once a month. Today we're launching Self Healing for your codebase.
Introducing Detail!
jonathanwall retweeted
We ran a chess tournament for bugs.
The question we wanted to answer: are bugs from Detail "important"? How do they compare to what code review bots catch?
One of the most important ways we benchmark ourselves is that we want the bugs we generate to be significantly more important than the typical comment from a code review bot.
We took a week of findings from CR bots running on OpenClaw and vLLM, plus findings from Detail on the same week of changes. We put them through an LLM-as-judge tournament.
We fed the head-to-head results into a Bradley-Terry model to compute ELO ratings for bugs. Out comes a global ranking from most to least important.
Awesome exploration from @sachiniyergreen below, with methodology, charts, and a PostHog secret exfiltration vuln that four code review bots missed.
Watched Runloop spin up a full dev environment in a minute, live on stage at Stripe Sessions.
Proud to be a launch partner for Stripe Projects, and even prouder of the team that made it real.
youtu.be/-R8E0pk30Bw
You ever run a benchmark and end up with 40 log files, zero clarity, and a laptop that sounds like a jet engine?
@runloopai + W&B Weave fixes this 🧵
jonathanwall retweeted
Runloop is excited to be a launch partner for the @stripe Projects developer preview 🚀
One command provisions a full Runloop account with devboxes ready for agents, full access to pro plan features, and real credentials in your environment. No dashboard and no copy-paste keys 🙅
Simply run:
$ stripe projects init my-app && stripe projects add runloop
Try it today: projects.dev/
Demo: youtu.be/89qkfRFWhy0
Very excited for @RunloopDev to partner with @stripe to streamline onboarding.
Provision accounts via a CLI single command:
$ stripe projects init my-app && stripe projects add runloop
Try it today: projects.dev/
Demo: lnkd.in/dJvtFghr
jonathanwall retweeted
Auditors haven't figured out AI agents yet. But they will.
When they start asking questions like who authorized this action, what did the agent have access to, where's the audit trail, you need answers ready fast. And excuses about it being AI simply won';t cut it.
Security engineers tend to front-run compliance. That's the play here: get your logging, isolation, and access controls in place now so you have good answers before the questions arrive.
Right now the industry is in a "log everything" phase. That's table stakes. The next question is: can you prove what went wrong and whose fault it was when something breaks?
Full conversation: our CEO Jonathan Wall on Techstrong TV — techstrong.tv/videos/latest-…
#AIAgents #AISecurity #Compliance #AuditTrail #GRC #DevSecOps #AIEngineering #Runloop
jonathanwall retweeted
Absolutely inside.
Most haven't realized this yet. This is where everything is going.
If you're a sandbox provider, here's a free idea of what to do:
jonathanwall retweeted
Running an agent that uses MCP is inherently unsafe. Until now.
Protect your API keys and stop MCP-context bloat before it starts with MCP Hub: the first L7 proxy to protect your secrets and consolidate MCP endpoints.
Learn more: runloop.ai/blog/use-mcp-fear…
jonathanwall retweeted
Don't let your agent leak your API keys!
Introducing Agent Gateway: an L7 proxy that protects your authentication keys at the infrastructure layer. API keys never enter the runtime environment, so your agent can't leak them. Instead, agents receive one-time tokens and can be restricted to approved endpoints with Network Policies.
Zero-trust agents are now possible.
Read more:
runloop.ai/blog/protect-api-…
California’s Union Machine: $921 Million and Counting
Public sector unions collect nearly $1 billion a year to control Sacramento. Normal citizens? A trickle against a torrent.
But there's a legal pathway to break their grip and get back to sanity.
garryslist.org/posts/califor…
jonathanwall retweeted
AI agents are powerful, but security has to keep up. 🔐
@ZDNET explores how exploitable flaws in agentic AI change the threat model. As our CEO @jonathantwall shares in the article: lateral movement between agents makes the blast radius grow fast, a critical risk orgs can’t ignore.
Agent-native security is mandatory in 2026 and sandboxing is just the first step.
Read more here 👉️
zdnet.com/article/exploitabl…
jonathanwall retweeted
Big moment for Postgres!
Search has always been Postgres' weak spot, and everyone just accepted it.
If you needed a real relevance-ranked keyword search, the default answer was to spin up Elasticsearch or add Algolia and deal with the data sync headaches forever.
The problem isn't that Postgres can't do text search. It can.
But the built-in `ts_rank` function uses a basic term frequency algorithm that doesn't come close to what modern search engines deliver.
So teams end up:
- Running a separate Elasticsearch cluster just for search
- Building sync pipelines that inevitably drift out of consistency
- Paying for managed search services that charge per query
- Accepting mediocre search relevance because "good enough" ships faster
But this is actually a solvable problem.
You can realistically bring industry-standard search ranking directly into Postgres, which eliminates the need for external infra entirely.
This exact solution is now available with the newly open-sourced pg_textsearch by @TigerDatabase, a Postgres extension that brings true BM25 relevance ranking into the database.
BM25 is the algorithm behind Elasticsearch, Lucene, and most modern search engines. Now it runs natively in Postgres.
Here's what pg_textsearch enables:
- True BM25 ranking with configurable parameters (the same algorithm powering production search systems)
- Simple SQL syntax: `ORDER BY content <@> 'search terms'`
- Works with Postgres text search configurations for multiple languages
- Pairs naturally with pgvector for hybrid keyword + semantic search
That last point matters a lot for RAG apps. The video below shows this in action, and I worked with the team to put this together.
You can now do hybrid retrieval (combining keyword matching with vector similarity) in a single database, without stitching together multiple systems.
The syntax is clean enough that you can add relevance-ranked search to existing queries in minutes.
pg_textsearch is fully open-source under the PostgreSQL license.
You can find a link to their GitHub repo in the next tweet.
jonathanwall retweeted
Friendly reminder the first German Chancellor to initiate phase out of all Nuclear by 2022 went to work for Russian oil and gas firms when he left office.
Say his name.
Gerhard Schroeder
jonathanwall retweeted
You can now upload files, directories, and binary resources directly through the Runloop SDK and have them automatically unpacked onto devboxes before the boxes start using our Object store; now generally available. Try it out and let us know what you think!
runloop.ai/blog/object-store…
jonathanwall retweeted
I must say that the most hilarious twist of tech trajectories of 2025 was the fusion industry realizing they could *double* the economics of fusion reactors by using the neutron blanket to....
Transmute Mercury into Gold.
Alchemy is so back
jonathanwall retweeted
this was a ton of fun to work on, sandboxes are quickly becoming a default key part of agent infra. lots of use cases like safe code exec, reproducible work, and massively parallel jobs.
hype to see what the community builds around this, reach out with any questions from the code, vid, or blog :)























