Three Out of Eight: What Skylos Proves About AI-Written Code Skylos checks AI-written code for things that don't exist. I planted eight mistakes: it proved three, passed five, and a one-line comment still got past its CI gate. https://blog.shellnetsecurity.com/posts/2026/skylos-ai-code-verification/ #code #eight #ai #rss #feeds #linksharing #qwibbit

A Forged Receipt That Verifies: Offline Evidence with proofbundle proofbundle signs AI eval results into receipts you can verify offline. My forged one passed too, until a pinned trust policy said whose key counts. https://blog.shellnetsecurity.com/posts/2026/proofbundle-offline-signed-receipts/ #rss #feeds #linksharing #qwibbit

12,165 Crashes in 60 Seconds: Fuzzing a REST API with WuppieFuzz WuppieFuzz turns an OpenAPI spec into a coverage-guided REST API fuzzer. My first minute produced 12,165 crashes; three of them mattered, and the spec explained the rest. https://blog.shellnetsecurity.com/posts/2026/wuppiefuzz-rest-api-fuzzing/ #rss #feeds #linksharing #qwibbit

Same Bytes, Different Language: Testing ygo's Claim of Byte-for-Byte Yjs Compatibility ygo says a Go program and a JavaScript Yjs client produce identical bytes for the same edits. I checked, found where that holds and where my own test setup broke it, and probed what the decoder does with hostile input. https://blog.shellnetsecurity.com/posts/2026/ygo-yjs-wire-compatibility-go/ #differentlanguage #yjscompatibility #claim #samebytes #ygo #javascriptyjs #rss #feeds #linksharing #qwibbit