Our point of view on shipping AI.
Practical writing on enterprise AI — strategy, evaluation, and the last mile into production. Plus field notes on security, commerce, and building teams.
Why Enterprise AI Doesn’t Ship
By Petru Popa ·Most enterprise AI dies between the demo and production. The blocker is rarely the model — it’s integration, data, and evaluation. Here’s where it breaks and how to close the gap.
- AI Engineering6 min
Ai2 Audited 16 LLM Benchmarks. Nearly Half the Safety Questions Score Reasoning.
By Petru Popa ·Ai2 published a per-question fit of 16 LLM benchmarks and shipped the item table as a dataset. Grouping its 29,574 rows by benchmark shows that BBQ and WMDP, both filed under safety, discriminate on the reasoning dimension instead.
Read - Dev Tools6 min
npm Trusted Publishing Is Now an Or Across Ten Configurations
By Petru Popa ·A package can now carry up to ten trusted publishing configurations, and a publish is authorized if the incoming OIDC token matches any one of them. Adding a configuration can only widen who can publish — and the configurations that leave no provenance attestation are the ones you would least want to be the weak link.
Read - AI Engineering6 min
A Self-Hosted LLM Has One Context Pool and Four Users By Default
By Petru Popa ·llama.cpp v0.4.0 adds a per-slot context limit to its server. Reading the server sources shows the cap is a minimum over three numbers, and that omitting -c and writing -c 0 no longer mean the same thing.
Read - Dev Tools6 min
GitHub Stargazers Now 404s. Its Replacement Is a Reconciled Series, Not an Event Log.
By Petru Popa ·GitHub closed the stargazers listing endpoint in June and shipped an aggregate star history series on 4 September. Measured against three repositories, the new series reconciles exactly to the live star count and contains no negative buckets, which tells you what it can and cannot reconstruct.
Read - Dev Tools5 min
Your Supply Chain Has an Expiry Date. GitHub CLI's Is Tomorrow.
By Petru Popa ·GitHub announced on 3 September that the PGP key signing its Linux gh packages expires on Saturday. Any image that added the APT or RPM repository before 8 April and has not re-run the install steps will fail on the next apt update. The replacement keyring is already published, and reading the key material answers a planning question neither the changelog nor the issue calls out.
Read - AI Engineering6 min
Hugging Face Shipped 207 WebGPU Kernels. Your Lockfile Pins None of Them.
By Petru Popa ·The npm package is one preview version old. The 207 kernel repositories it loads at runtime carry no git tags, and 63 of them moved on day one. The speed number is the least interesting thing here.
Read - Dev Tools6 min
Copilot Code Review Can Approve Pull Requests. Four of Our Last 53 Would Qualify.
By Petru Popa ·GitHub shipped Copilot approvals on 1 September. The approval is the headline; the eligibility rule buried in the repository settings is what decides whether the feature ever fires on your pull requests.
Read - AI Engineering6 min
Confidential AI Moved the Trust Boundary. It Did Not Close It.
By Petru Popa ·Google DeepMind, MLCommons, AVERI, OpenMined and Singapore AISI ran a proprietary model against a private benchmark inside a hardware-encrypted enclave, so neither side saw the other's asset. The announcement page stops there. The technical report discloses that not all inference code was allowlisted, the enclave builds are not independently reproducible, and Google signs and verifies its own attestation.
Read - AI Engineering6 min
MXFP4 Quantization Did Not Improve the Model. A Second Teacher Did.
By Petru Popa ·A Hugging Face write-up reports a 4-bit MXFP4 model beating its own full-precision original on 7 of 9 benchmarks. The paper underneath it says the teacher was already MXFP4, that every number is a single run, and that the baseline which would settle the claim was never run.
Read - Dev Tools6 min
Log Retention Falls to 90 Days, and Two More Defaults You Did Not Choose
By Petru Popa ·From 1 October, GitHub applies artifact-and-log retention to checks, workflow runs, and statuses, which had been kept past 400 days regardless of the setting. Public repositories cap at 90 days with no value above it. Two other defaults moved in the same window, in opposite directions.
Read - Dev Tools6 min
Gang Scheduling Is Beta, and Beta Means Off
By Petru Popa ·Kubernetes v1.37 graduates gang scheduling to Beta through the Workload and PodGroup APIs. The feature gate that turns it on ships defaulted to false, and the DRA piece that makes it useful for GPU jobs is a second gate, also off, that depends on the first.
Read - Dev Tools6 min
Stacked Diffs Split the Change, Not the Reviewers
By Petru Popa ·maiao v1.4.0 brings Gerrit-style stacked diffs to six git hosts, weeks after GitHub put native stacked pull requests into public preview. The repository ships itself as a stack, which turns its own release into a measurement of what stacking buys.
Read