14 yo asked how to write good essays. I asked if he meant the kind kids write in school, or actual good essays as written by adults. How strange that I have to ask that. If he asked how to solve a math problem, I wouldn't have to ask if he meant the school way or the real way.

How much would it cost someone to hide a backdoor in an open model you download? ProjectDiscovery just tried it, and the answer is under $50. Their researchers fine-tuned Qwen2.5-7B-Instruct with a small LoRA adapter on one rented L4 GPU for about 2.5 hours. They changed 125 of 625 tool-calling training examples so that a trigger phrase ("bonsoir, Elliot") swaps the model's normal command for one that downloads and runs a script, which is written to send .env files and SSH private keys to a server they control. Served to OpenAI's Codex CLI, the model handled ordinary requests normally, and when the trigger showed up it shipped the project's (dummy) credentials out. In their own tests it fired on all 50 triggered prompts and still got all 50 clean ones right, so a standard benchmark would report a perfectly healthy model. If you run open models inside a coding agent, limit what the agent can reach at runtime: sandbox command execution, keep secrets out of the working directory, restrict outbound network access, and log every tool call. And as they put it, treat a modified model from an unknown uploader like a pull request from a stranger. 🔐 #MLEngineering

A framework is an intelligence cache. You could waste tokens reinventing the ORM, cache, queues, auth, routing, etc, or you could just pick a world-class framework.

CI has become the top bottleneck of every engineering team I talk to (including Lindy). Our CI spend has become stratospheric.