The Changelog: Software Development, Open Source

Peer Richelsen, co-founder of open-source scheduling platform Cal.com, explores how AI is reshaping software security and startup economics. They discuss the flood of AI-generated contributions, the collapse of traditional vulnerability reporting, and why Cal.com is forking its codebase to keep sensitive production systems private while preserving Cal.diy for the open-source community.

Sam Lambert, CEO of PlanetScale and database engineering leader, returns with bold takes. He talks Postgres at scale, Niki’s sharded Postgres do-over, non-blocking schema changes and instant rollbacks. He also debates open source risks, AI-enabled engineering, and why breaking up sleepy giants might be healthy.

Haroon Meer, founder of Thinkst and creator of Canary and Canarytokens, builds honeypots and digital tripwires. He talks about irresistible AWS API key tokens, a bank-backed credit card token, the new Breadcrumbs feature that herds intruders to canaries, a one-click hardware Canary demo, and how a bootstrapped company reached massive ARR without outbound sales.

Max Stoiber, software engineer and founder behind styled-components, react‑boilerplate, Spectrum, Stellate, and now working on ChatGPT’s plugin/app directory at OpenAI. He talks about the long tail of open source projects and how they shaped his career. He revisits Spectrum’s path into GitHub Discussions and Stellate’s GraphQL caching that led to dual acquisitions. He explains why ChatGPT apps feel like a new surface for software.

Matt Carey, engineer at Cloudflare who builds the Agents SDK and MCP server. He walks through server-side Code Mode that lets models write safe TypeScript against an SDK. They discuss the dynamic V8 worker loader for running model-written code, how Code Mode compresses API access into tiny context, and practical workflows, tooling, and memory ideas for agents.

Adam Jacob, founder of System Initiative and creator of Swamp, is an infrastructure and automation veteran who built an AI agent platform for reusable workflows. He talks rapid shipping and shrinking teams. He demos Swamp composing extensions and automating Proxmox. He explains agent-driven reviews, UAT gates, reusable workflow architecture, security vaults, and why architecture matters more than coding.

Nicky Pike, a Coder.com representative focused on secure cloud dev environments. He talks about making development more secure and consistent, shrinking attackers' surface on laptops, and running devs and agents in parallel. The conversation highlights practical steps for safer, more reliable cloud-based development workflows.

Amelia Wattenberger, designer and data-viz veteran (ex-GitHub Next, now designing Intent at Augment Code). She argues agents make prototyping faster but finishing the last 20–30% much harder. Conversation covers the arc from autocomplete to chat to CLI back to UI. She explains why Intent uses workspaces as the core primitive, tradeoffs of one-worktree-per-task versus per-agent, and new agent orchestration patterns.

Michael Greenwich, founder and CEO of WorkOS, explains AuthKit and secure CLI authentication in a sponsor segment. He walks through device grant flow and how browser-based logins, SSO, MFA, and passkeys benefit terminal apps. Short, clear explanations highlight integration advantages and real-world developer tooling concerns.

David Carney, Co-founder and Chief Strategy Officer at Tailscale, builds identity-aware networking and TSNet apps and leads the Aperture AI gateway project. He discusses clickless auth with TSIDP, making apps appear as tailnet nodes via TSNet, multi-tailnet isolation for safe workloads, and Aperture for private AI API key control and observability.