Arron Young

After enough "can I run the tests?" prompts, "can I send this to your customer?" risks becoming another button to clear.

Five months ago I asked here how people keep track of their agents. The replies went well beyond coding. In a later discussion, a builder running customer support agents made a point that stuck: people stop reviewing when checking the draft takes longer than writing the reply themselves.

Everyone building anything emotional with AI reaches for the emotion recognition article. The sentence that is more likely to apply to you is in Article 50(1), and it has applied since 2 August.

When I went looking at what the EU AI Act asks of an app like Murror, I assumed the provision about emotions was the one aimed at us. It isn't, quite, and the one that is aimed at us is simpler and already live.

A scan of 1.2 billion URLs found 15.3K validated prompt injections sitting on live pages, and about 70% of them are in HTML you never render. The fix most teams reach for - strip the page to plain text before you send it - is the worst of the four options tested.

Two of the last three things I've written here were about reading the primary document instead of the coverage. This one is about a paper almost nobody covered, which is worse, because it changes a line of code a lot of us shipped this year without thinking about it.