Shivanand Velmurugan (@shiva) header
Shivanand Velmurugan (@shiva) profile picture

Product Leader (@MSFT / Fabric, Real-Time Data, Schemas). In a past life, I built operating systems, drivers, a DSL, an in-memory database.

Vancouver, British Columbia
Joined March 2007
Photo by Shivanand Velmurugan (@shiva)Photo by Shivanand Velmurugan (@shiva)Photo by Shivanand Velmurugan (@shiva)Photo by Shivanand Velmurugan (@shiva)Photo by Shivanand Velmurugan (@shiva)Photo by Shivanand Velmurugan (@shiva)Photo by Shivanand Velmurugan (@shiva)Photo by Shivanand Velmurugan (@shiva)Photo by Shivanand Velmurugan (@shiva)
1/5 @nickaturley @embirico @sama I tried ChatGPT again after several months away. OpenAI’s response to Anthropic’s handling of government relations had already broken my trust. I came back willing to give the product another chance, and your product broke my trust.
1
48
4/5 Then I asked the agent to submit product feedback and give me a tracking reference. It couldn’t. You have a connection flow asking for broad access to my inbox, but the agent can’t file a complaint about that very request. That's negligent, and frankly appaling.
1
6
5/5 Here’s what I want: By default all of your basic on-boarding workflow should work with read-only access. Don't hide behind user "consent". @nickaturley @embirico will you address this? I’d rather uninstall than surrender control to AI agents.
6
Shivanand Velmurugan retweeted
In lieu of flowers, memorial contributions may be made to: Johns Hopkins Alzheimer’s Disease Research Center Fund    alzresearch.org/giving/ Alzheimer’s Foundation of America Caregiver Resources     alzfdn.org/donate/ Photo Credit: Tommy Garcia
6,675
79,736
17,356
345,515
11,827,410
Shivanand Velmurugan retweeted
Security called me at 6:12 AM today. "Patch every PHP server immediately." I asked what happened. "Two critical vulnerabilities. Remote code execution. No authentication required." Cool. How many PHP servers do we have? According to inventory: 12 According to reality: Nobody knows. We found one running WordPress. Three running old internal tools. One under someone's desk. Two inside vendor appliances. A forgotten employee directory from 2016. And a server named: PHP-OLD-DO-NOT-TOUCH Naturally, that one runs payroll exports. Then we found a PHP 5.6 box. I asked who owned it. The documentation said: BRIAN. Brian left in 2019. We called Brian. He said: "Oh wow, that's still running?" Excellent. By 8 AM, leadership joined the incident call. CEO: "Can hackers actually get in?" Security: "Potentially yes." CEO: "Without a password?" Security: "Yes." CEO: "Then why do WE need passwords?" Not the lesson. Finance asked if we could wait until the weekend to patch because downtime affects revenue. Security explained that the alternative was letting strangers execute code on our servers. Finance asked for a cost comparison. At 9:17, someone suggested temporarily taking the vulnerable websites offline. Marketing refused. "Our campaign is live." So for the next hour, the company officially decided maintaining a landing page for 20% off webinar registration was more important than preventing remote server takeover. We finally patched everything we could find. Then our scanner discovered another PHP server. Hostname: TEMP-PHP-2014 Uptime: 4,512 days. Nobody knows what it does. Nobody owns it. Nobody can shut it down. But every time we block network access, the warehouse stops printing shipping labels. Security has classified it as critical infrastructure. It is running PHP 5.4. The vulnerability has existed longer than half our employees. The emergency patch took four hours. Finding out what PHP actually runs took eleven. The internet isn't held together with code. It's held together with servers everyone is afraid to turn off.
914
7,063
1,159
57,915
3,853,342
“We need to separate the supply of intelligence from the authority over it” — Satya Nadella, circa 2026. An important inflection point. I very much appreciate the ownership and maturity with which he is articulating the need for leaders in AI to grow up.
176
I’m here, SFO! Super excited for #lennyssummit tomorrow.
1
221
I did a little experiment today. I was very mean to two AI agents — Claude and Kimi. I’m canceling Claude and switching to Kimi for my personal use.
1
411
Kimi K3 de-escalated the situation. “The user wants estimates for watches 3-6 only, with no opinions, no waxing on, no superlatives. Just factual numbers. Let me pull the relevant data from my previous searches and present it cleanly.”
1
36
If you want to launch a serious product, the “leaders” have to learn how not alienate their users. I really don’t need Claude to fix my diction or to suggest that I should be more polite. Fuck that!
150
Shivanand Velmurugan retweeted
In the fullness of time, LLMs will eventually become commodities and their price will be a race to the bottom. As the competitive advantage of one LLM over another shrinks - particularly as open source models expand - the value proposition will turn to the neuro/symbolic harnesses that use those models, structures that encompass agents, agent orchestration, tooling, and component plugins. Even those from frontier AI organizations will fall to open source frameworks. The last thing standing will be those who command the data centers on which these things run, and even then, that will become a commodity, with the number of players shrinking to just a few survivors. They too will find pressure: as computational power rises, more and more such systems will be run locally.
94
181
47
1,416
240,393
Analyse files in this repo, and start work. Bootstrap a CLI to manage memory across multiple AI sessions, one that can evolve into a portable semantic and ontological representation of my use of AI across all my projects. Use Zig. Keep it metal! #fable let's go!
1
284
Ok! The soundstage got a major upgrade today! After decades of ogling, I’m a proud owner of an Accuphase E-301. Paired it gingerly with Kappa 6.1s. Ran through some Pink Floyd, Bill Evans, Macklemore, Jamiroquai, a whole host of others. Life cannot be better.
1
379
Shivanand Velmurugan retweeted
Make no mistake: post-Mythos, the United States has a licensing regime for AI. It’s just informal, with no consistent rules or firm boundaries on state power or public transparency. Cobalt mining in the Congo is vastly more institutionalized than frontier AI licensing in the US.
38
116
12
1,180
77,036
This could be interesting 360! I wonder what the graph would look like if each of you did that, and shared with each other!
i hooked my whoop to my work calendar to find which coworker gives me the most stress 🚨 thanks to fable, I reverse engineered whoop to pull per minute heart rate. nd matched spikes with cal events and attendees I now have a leaderboard and I think about it daily. few info masked for obvious reasons ;)
250
How much local AI can you squeeze out of a 16GB Mac Mini? Cloud is great, but I wanted to muck with the silicon. I vibe-coded a test harness to benchmark 13 local LLMs. From Llama 3.2's cache speed to the brutal 14B memory swap cliff, here is the data: blog.shiv.me/posts/2026/from…
218