Maxime Gréau

Check out this 🧵to know more about the recent supply chain attacks and how we can help

Palantir CEO Alex Karp rips into AI slop companies: “The appearance of software working, is not software working.” “The slop getting a lot of attention is dangerous in terms of the hyperbolic rhetoric—that there will be no jobs because of slop, nothing will work, we will have a god-like figure in the name of AI.” “In fact, what actually does work is a platform built by a motley crew of highly-technical people who over 20 years have been maligned for being right.”

fantastic read for younger/recent grads 🔥 (or anyone really) got off the phone with my younger brother, we yapped about adoption of AI in his field (Private Equity) vs what we’re seeing in AI with the rapid growth of capabilities, tooling, and intelligence Takeaway: it’s an AMAZING time to be a young, hungry specialist in a field that’s not fully adopting AI yet but where you’re willing to lock-in and push + explore the boundaries of what’s possible with frontier systems today just how software engineers largely accepted that the exact way we code and do work has fundamentally evolved (even if software design principles are still very important), every field will come to terms with how to effectively use and monitor AI to get real work done young people for better or worse are unencumbered by their experience because they don’t have much lol and can just lock in on solving their problems with the amazing new tools we get every day the best time to start tinkering with AI for your work is always, just try stuff, post about it, engage with others, people wanna help if they see someone trying in their field 🚀

New blog: Building agents that reach production systems with MCP. When should agents use direct APIs vs CLIs vs MCP? Plus patterns for building MCP servers, context-efficient clients and pairing MCP with skills. claude.com/blog/building-…

We’re excited to announce our first-ever Reddit AMA, with our CTO & Co-Founder, @mattomata, on building & securing the software supply chain in the age of AI. Feel free to ask your toughest questions…we’re here for it! 📆 Tuesday, April 21 @ 12pm ET reddit.com/r/cybersecurit…

6/ Give Claude a way to verify its work Finally, make sure Claude has a way to verify its work. This has always been a way to 2-3x what you get out of Claude, and with 4.7 it's more important than ever. Verification looks different depending on the task. For backend work, make sure Claude knows how to start up your server/service to test it end to end; for frontend work, use the Claude Chromium extension to give Claude a way to control your browser; for desktop apps, use computer use. Personally, many of my prompts these days look like "Claude do blah blah /go". /go is a skill that has Claude 1. Test itself end to end using bash, browser, or computer use 2. Run the /simplify skill 3. Put up a PR For long running work, verification is important because that way when you come back to a task, you know the code works.

😍

Simon Willison breaks down why using AI coding agents is a masterclass in software engineering. He tells Lenny Rachitsky that it takes every inch of his 25 years of experience to get it right. Hear his "state of the union" on Lenny’s Podcast! 💻 Enjoy full Episode on Spice:🎧 thespice.ai/episode/a450c0…

We open sourced the tool used to detect the Axios supply chain compromise! I built it Friday after a red eye home from RSAC. Also, wrote up the full story, including the hectic moments after that first critical alert github.com/elastic/supply…

Was impressed with @bcherny before, seeing how he’s handled the recent source code leak he’s gone even higher on my respect list. Used as a chance to share some cool background to Claude Code features, and emphasize a blameless post mortem culture.

If you haven't already heard, axios was compromised yesterday. That is four significant supply chain attacks in under two weeks: Trivy, LiteLLM, telnyx, + now axios. Chainguard Containers + Libraries customers are safe from all attacks. More details of each attack in thread🧵

Chainguard is racing to fix trust in AI-built software - here's how #ftag=COS-05-10aaa0j" target="_blank" rel="nofollow noopener">zdnet.com/article/how-ch… via @ZDNET & @sjvn @chainguard_dev is expanding beyond #opensource security to protect open-core software, #AI agent skills, and GitHub Actions.

Steve Carell & Amy Poehler speak on Michael Scott’s character and compliment each on just how impactful each other’s shows “The Office” and “Parks & Rec” were to fans, especially during the pandemic 🤣❤️ “I’ve provided a public service really… and in that way I feel like i’m more than an actor” “You got cocky” 💀😭

State of Context Engineering in 2026 newsletter.swirlai.com/p/state-of-con… < this is good stuff. What are the patterns and considerations for giving your LLM or AI agent what it needs to know?

The best tutorial out there (and i've seen all of them :-)) if you are interested in understanding the container image internals (and with awesome diagrams, as usual, that makes the tutorial 10x better): "How Container Images Actually Work: Layers, Configs, Manifests, Indexes, and More"

ALERT: Massachusetts just announced a partnership with Google to offer FREE AI and tech career certificates to EVERY MASSACHUSETTS RESIDENT. Programs include the new Google AI Professional Certificate plus cybersecurity, IT, project management, and more. aihub.masstech.org/google-certifi…

I love that @LangChain @hwchase17 never shy away from sharing some of the best practical Agent Engineering wisdom. Apart from @AnthropicAI, I haven't seen many companies doing this a regular cadence.