
cloud agent platform @mercury
Boulder, CO
Joined February 2015
- Tweets6.4K
- Following702
- Followers601
- Likes42.4K
Thomas D retweeted
The year is 1873. Your wife tires easily and reads too much. The doctor prescribes the rest cure: six weeks flat in bed, no books, no visitors, fed on milk, forbidden to sit up without his permission. The man who devised it is the most famous nerve specialist in America, and the women come out of it quieter, which is taken as the cure.
The year is 1915. The hospital has a new way of delivering your child. Morphine, then scopolamine, and the mother wakes two days later with a baby she cannot remember having. They call it twilight sleep. The women are strapped into padded cots so they do not hurt themselves while they scream, and the straps are the modern part. The babies arrive blue and slow to breathe.
The year is 1945. The truck comes down your street fogging DDT, and the children run behind it in the white cloud because the man on the back says it is harmless. At the beach it is sprayed over the bathers on their towels. It goes on the cattle, over the barn, and across the kitchen table.
The year is 1948. Your son has trouble with his ears. The doctor slides a rod tipped with radium up each nostril and holds it there for the best part of ten minutes, and you bring him back three more times. Hundreds of thousands of American children get the same treatment. The cancers arrive in their fifties.
The year is 1962. The health visitor tells you breastfeeding is old-fashioned and the formula is scientific. By 1972 fewer than one American baby in four is breastfed at all. The formula is skimmed milk and sugar, with the milk fat taken out and vegetable oil put in.
The year is 1971. The family planning clinic fits a small plastic crab called the Dalkon Shield. Its tail is a bundle of fibres that wicks bacteria up into the womb. 2.8 million are fitted in America before it is withdrawn, and the company goes bankrupt under the claims. It had been sold as safe and superior.
The year is 1983. The doctor says your arteries are the butter's fault. The dripping tin goes in the bin, the yolks go to the dog, the margarine goes in the fridge, and you have the heart attack anyway, on skimmed milk, having done everything right.
The year is 2001. Your 15-year-old is low, and the doctor prescribes Paxil, because the trial in the journal says it is effective and well tolerated in adolescents. The raw data, reanalysed 14 years later, shows more suicidal thinking on the drug than on the sugar pill. The company pays $3 billion to settle. Nobody rings the house.
The year is 2009. The government has spent around £500 million stockpiling Tamiflu for the pandemic, on the strength of the manufacturer's trials. When the trials are finally prised loose five years later, the drug shortens flu by about half a day and nothing shows it keeps anyone out of hospital. The stockpile goes out of date in a warehouse.
The year is 2026. The doctor has ten minutes and a screen. The number is high, so the tablet is for life. The weight is high, so the injection is for life. The meat is bad for the planet and the oil is good for the heart, and the person in the chair is as certain as everyone who ever sat in it.
Every one of those was settled, by a committee, in a journal, with a doubter somewhere being laughed at. The rest cure, the straps, the fog, the rod, the formula, the crab, the margarine, the trial, the stockpile. All of it certain, all of it printed, all of it done to somebody who had asked for help.
You were never the one who was wrong. You were the one it was done to, and the only person in the story who did as they were told every single time.
The apology comes a generation late, in a footnote, addressed to nobody.
The next one is being drafted now.
Thomas D retweeted
The benefits of abundant intelligence will accrue far outside of San Fransisco.
Spent the last year writing about capital, sovereignty, and the coming reordering of economic power.
THE COMMANDING HEIGHTS
Commanding-Heights.com
Thomas D retweeted
It’s funny how we all sort of agree @tryramp’s valuation is at the very least aspirational at $60B and then Instinct rolls in with a rumored $30B valuation and we’re all still recovering from their $10B valuation that it’s impossibly difficult to process.
Is the VC plan to just hope they can sell Instinct to @SpaceX like they did with @cursor_ai before everyone realizes they have zero moat and no ownership over their COGS (and, as you’ll see tomorrow non-working unit economics)?
I like Instinct in theory but these valuations and the ultimate reality check will be bad for the industry imo.
.@tryramp is a $60bn card company. Within 12 months, most of its business won't be cards.
I went through the full 50 min of @sytaylor's interview with @eglyman. What stood out:
> $60bn on ~$2bn of revenue, 30x, growing 100%+ a year
> $250bn/yr of monetizable non-card volume, also growing 100%+
> the median customer cut its expenses by ~7.5%, far more than interchange can ever give back
> AI spend now equals 2% of white-collar payroll. "Software became money"
> Ramp's MCP server has been live for 2+ years, and some weeks agent usage grows 10%
> "stablecoin sandwich": fiat → stablecoin → fiat to pay a foreign vendor after the Friday cutoff. One of their fastest-growing products
My bet: that's how stablecoins win in B2B. Sold as a payment that lands by Monday, with the rail invisible.
Thomas D retweeted
The coding interview is dead, at least for my team at Anthropic. I've seen enough to know that it no longer provides signal. I removed it from loops this month.
I have a spicy, optimistic take - I think there's an opportunity for junior engineers: felixrieseberg.com/hunger-be…
Thomas D retweeted
took a while to get these all collated together, but excited to share latest SlopCodeBench (scbench dot ai) findings. Shouts out @gorlanski for helping put this together - findings should make it into the main results leaderboard soon. View article
Thomas D retweeted
I’ll try to disagree with this without calling BS on it :)
There’s a lot here I agree with.
Software is getting dramatically cheaper to produce. Agents should go horizontal across the SDLC. Humans should move higher up the abstraction ladder. And staring at every line of AI-generated code is definitely not the future.
But I think some of the conclusions go too far.
“Slop doesn’t accumulate because we now have incredible models that can help us fight it.”
I don’t think that’s true. Or at least, not that straightforward.
Some code slop may become increasingly cheap to clean up.
Architectural drift isn’t.
Lost intent isn’t.
A hidden dependency isn’t.
A security invariant nobody remembered to tell the agent about isn’t.
The ugly workaround that exists because of a production incident three years ago isn’t.
And developers knowledge slop isn’t!!
A model can make ugly code beautiful.
It cannot recover organizational knowledge that the system never preserved. Think about this for a sec please
That’s why I think better models actually make the surrounding system MORE important, not less.
Then there’s the idea of:
prompt the what, not the how.
Strongly agree with the direction.
Humans should increasingly own intent, architecture, standards, values, tradeoffs and goals.
But the “how” doesn’t disappear.
It moves into the system.
Into skills, policies, architectural constraints, organizational memory, evaluations, tools, and the rules by which agents are allowed to act.
Please, let’s not over hype people here. It is quite incredible that we can shirt our work from code to this higher abstraction, but it does include the how. Whoever says otherwise, almost feels like they are working on some simple product, maybe some simple CLI tool.
And then the part I disagree with most:
no PRs, no code review.
I can absolutely imagine a future with no PRs. Yes.
I cannot imagine a serious software factory with no independent review.
Those are very different statements.
The PR is an interface.
Review is a function.
The interface can disappear while the function becomes much more important.
An agent can make a change without a human ever looking at the diff.
But before that change ships, another independent system should be able to ask:
What was the intent?
What is the blast radius?
How critical is this path?
Which organizational assumptions does this touch?
What evidence proves the behavior?
What does production history tell us?
Can this be safely rolled back?
Does this change fall inside the factory’s autonomous operating domain?
Unless you are building some with no user base.
And only then:
Does a human actually need to be involved?
That’s the distinction I think matters.
The future isn’t humans rubber-stamping every PR.
But it also isn’t “agents got good enough, so review goes away.” “Agents are sooo good that the generative parts don’t need any adversarial counterparts” and human judgement- we might get there , but not yet.
In fact, as agents become better at producing convincing, plausible, production-looking code, independent verification becomes more important.
It happens so often that they make really bad mistakes. You are really not fixing agents daily?
Because the dangerous failure is no longer obviously bad code.
It’s code that looks completely reasonable while being wrong at the system level.
And I think the same applies to the idea that bugs becoming cheaper to fix means we can relax process.
Sometimes yes.
A UI regression with a feature flag, great. Let the factory move fast.
But “cost to repair” and “cost of failure” are not the same thing.
An authorization bug, corrupted data migration, broken financial calculation or security incident can be cheap to patch and enormously expensive to experience.
That’s why I think the right destination is not less control.
It’s much more autonomy AND much more control
Finally summarized what I've been sending to friends in DMs View article
Thomas D retweeted
This week, I was at AGNTCon. I may be biased but Agent Substrate is going to change this industry. We spent the last 8-9 months working on this and it’s incredible to see so many companies are aligning on it now.
Thomas D retweeted
Finally summarized what I've been sending to friends in DMs View article
Thomas D retweeted
i'll say it. this is the most braindead direction in AI right now
the tech is insane, yes. it sounds human, it laughs, it stops mid sentence, it drops the “uuhh”
that's EXACTLY what's wrong with it
we spent decades making computers fast and precise and now we're paying billions to make them hesitate like a nervous dude
when i talk to a model i want answers AS FAST AS POSSIBLE, AS SHORT AS POSSIBLE. i don't want a fake friend that talks over me
if you want a human experience go talk to a REAL human with REAL emotions. touch grass bro please
and honestly if you're so lonely that you need a machine to fake pauses and laughs for you, that's not a product problem, that's a you problem
this app is cooking people's brains and this is the proof
We believe voice is the most natural way to interact with intelligence, so we created Dessa, the most authentic full-duplex speech model ever built. Talking with it feels like talking with a person…full of emotion, nuance, pauses, and a natural cadence.
block.xyz/dessa
Thomas D retweeted
I found footage of 20yo Dario Amodei speaking against the Iraq War in 2003.
18 years before Anthropic even existed
Thomas D retweeted
Happy Pythagorean Theorem Day!
10/24/26
10² + 24² = 26²
This is the last one we’ll experience in our lifetime.
Thomas D retweeted
Yes. See, e.g. how we found critical safety and liveness bugs in every (formally verified) Raft implementation we’ve ever looked at. antithesis.com/blog/2026/fin…
Replying to @MarcJBrooker
The point is that even 'correct' protocols come with a set of assumptions about the world around them. When those assumptions are broken, even in subtle ways, the protocols behave in unsafe ways.
Replying to @Railway
i'm sure you're all better than me at this but just some of what we've seen if it helps - they're not going to stop. it's going to get increasingly sophisticated and they're going to go after every surface of your system and all of your employees
any old projects you've long forgotten about will be found and used against you
the only reason we're surviving is because we have agents going 24/7. we're still barely sleeping
good luck, sorry you're dealing with this, but really it's a collective problem we're all facing together
Thomas D retweeted
ghuntley.com/libaries. timeless.
October has been an absolute nightmare for software
> Railway - customer secrets exposure
> LiteLLM - malicious PyPI + Docker releases
> Zeabur - infrastructure breached
> OpenCode - AI API keys exposed
> OVHcloud CLI - official binaries backdoored
> Rank Math PRO - malware in official plugin
> TeamUpdraft - customer data compromised
> ConnectWise - cloud backup identities compromised
> Tensorlake - npm package infected
> SubQuery - backdoored npm package
> GhostAction - GitHub repos with malicious workflows
> PHP - critical RCE vulnerabilities
> Node.js - security vulnerabilities patched
> eMudhra - certificate authority keys compromised
> Tailscale - eMudhra incident
At this point, the biggest security risk might not be the code we write, but the code we trust...
This has been obviously destined since Dario saw GPT-3 autocompleting a for-loop in python and was struck by a vision of our future.
My guess is that this has barely started, and that Super Worms are coming. There's never been a better time to build an intranet for your people.
Thomas D retweeted
>junior dev at a mid startup
>wednesday morning
>just want to push a minor bugfix to our php app today
>open laptop, check slack
>company group chat is an absolute warzone
>CTO typing in all caps about php2shell
>fucking php
>whatever, server hasn't blown up yet, I just need to get my code in
>open gitlab to merge the PR
>forced emergency logout because of a critical gitlab security patch release
>fucking gitlab
>pipeline fails because of some weird regex compiler bug
>spend 40 minutes fighting CI/CD
>i can just use AI to help debug
>fire up opencode
>api keys nuked because they were breached
>fucking opencode
>i’ll just get fresh LLM api keys from our corp proxy, LiteLLM
>it won’t connect? It’s down?
>look up LiteLLM news: supply chain compromise
>fucking litellm
>cold sweat forming
>slack alert: db connection error
>check our database connection
>we host on TiDB Cloud
>they just announced a security breach, unauthorized access via stolen service account credentials, data copied
>fucking tidb cloud
>full panic attack incoming
>figure fuck it, just ship the container to Railway and go home
>open Railway dashboard
>bright red banner: "Security Disclosure: Rotate all environment variables immediately. All builds paused."
>fucking railway
>try to open the app URL in browser to see if anything is even working
>NET::ERR_CERT_AUTHORITY_INVALID
>eMudhra intermediate certificates compromised
>4
>instantly untrusted by every major browser
>fucking emudhra
>stare blankly at mac screen for 10min
>random pop-up
>restarting in 10min to fix a critical vulnerability
>fucking macos
>close laptop
>leave office
>never come back


































