Open Source Weekly: From AI Simulations to Vintage Code

Open Source Weekly: From AI Simulations to Vintage Code

AI & Simulations This week, the open source world buzzes with innovations in AI and simulation. MaterialSim introduces an AI agent that automates computational materials simulations, promising to accelerate research in chemistry and physics. On the educational front, a new simulation method helps students intuitively grasp why dividing by a whole number increases the denominator, … Read more

AI, Open Source, & Cloud: Weekly Digest

AI, Open Source, & Cloud: Weekly Digest

Open Source at the Core of AI Evolution This week’s digest showcases the dynamic intersection of open source, AI, and cloud-native technologies. From OpenAI’s playful Birding Pal project to Hugging Face’s deep dive into scaling laws, the theme is clear: open source remains the engine driving AI innovation. The release of MLflow’s tutorial on multi-agent … Read more

Multi-Agent Supervisor Pattern: LangGraph Routing, Tracing & Evaluation (Notebook 1.10)

Multi-Agent Supervisor Pattern: LangGraph Routing, Tracing & Evaluation (Notebook 1.10)

Video by MLflow via YouTube
Multi-Agent Supervisor Pattern: LangGraph Routing, Tracing & Evaluation (Notebook 1.10)

In the tenth and final tutorial of the Mastering MLflow for GenAI series, Jules Damji (Databricks) builds a multi-agent supervisor pattern with LangGraph and MLflow, routing queries to specialized agents, synthesizing results, and evaluating the full workflow with granular traces and scorers.

This session simulates a Databricks Agent framework–style supervisor using LangGraph’s StateGraph for acyclic, state-machine-like execution. The use case is a FEMA disaster-response assistant over roughly simulated records.

What You’ll Learn:
🔹 Multi-agent supervisor pattern: a supervisor fans out queries to specialized agents, then returns one cohesive answer
🔹 Supervisor router (Node 1): classify natural-language queries and route to a Genie-like agent, a knowledge assistant, or both
🔹 Genie-like agent (structured data): Natural Language → SQL with an LLM chain, executed against FEMA data via Python Pandas + SQLite
🔹 Knowledge-based assistant (unstructured data): document retrievers, OpenAI embeddings, and cosine similarity over in-memory files like PDFs
🔹 Synthesizer (Node 3): combine one or both agent outputs into a single response
🔹 Granular MLflow tracing: define agent tools: query, tool, embedding, and retriever functions with MLflow span markers
🔹 Built-in scorers: use MLflow’s 60+ scorers for answer relevance, safety, and guideline adherence on an evaluation dataset
🔹 Custom routing accuracy: implement a customer MLflow @scorer metric that compares supervisor fan-out against ground truth
🔹 Extra practice: supplementary notebooks for Deep Agents and CrewAI multi-agent frameworks

Resources:
🔗 Notebook 1.10: https://github.com/dmatrix/mlflow-genai-tutorials/blob/main/10_multi_agent_supervisor.ipynb
🎥 Full Series Playlist: https://youtube.com/playlist?list=PLaoPu6xpLk9EI99TuOjSgy-UuDWowJ_mR

Source

Unconference: FSI OSS Supply Chain Resiliency in the Era of AI – Dov Katz, Morgan Stanley

Unconference: FSI OSS Supply Chain Resiliency in the Era of AI - Dov Katz, Morgan Stanley

Video by FINOS via YouTube
Unconference: FSI OSS Supply Chain Resiliency in the Era of AI - Dov Katz, Morgan Stanley

Dov Katz (Managing Director at Morgan Stanley) presents a deep-dive walkthrough of the Risk Navigator tool built for the OSERA (Open Source Enterprise Resiliency Alliance) initiative. He demonstrates how platform engineering and security teams can parse complex Software Bills of Materials (SBOMs), prioritize back-patching requirements across thousands of repositories, and use automated OpenRewrite pipelines to burn down transitive CVE vulnerabilities at enterprise scale.

🗽 Catch Us in New York! Ready to secure your software supply chain and scale automated patch management? Join the enterprise security community at OSFF New York on November 4–5, 2026.

🎟️ Register Now: https://hubs.ly/Q04n_bZL0
🔥 20% OFF DISCOUNT CODE: 26YTOSFFNY20C

🕒 Timestamps:
0:00 Unconference Kickoff: Why Banks Are Commissioning Shared Back-Patches
1:00 Navigating Shared Infrastructure Priorities and Commissioned Capacity
1:39 Introducing Risk Navigator: Mapping Enterprise Dependency Data Sets
2:30 Quantifying Productivity: Using Reduced CVE/CWE Counts over Merged PRs
3:35 Navigating Transitive Dependencies: High-Leverage Upgrades vs. Developer Friction
4:20 Spec-Driven Local Deployments: Tailoring Risk Navigator for Corporate Estates
5:30 Dashboard Walkthrough: Filtering Patch-Level Opportunities and Version Offsets
6:10 Setting CVSS Vulnerability Thresholds and Evaluating Active Exploits
7:20 Identifying "Dead Ends": When Software Requires Commissioned Back-Patching
8:00 The Version-Bumping Shopping Cart: Generating OpenRewrite YAML Automations
8:41 Back-Patch Priority Matrices: Mutualizing Morgan Stanley, Citi, and Deutsche Bank Lists 9:30 Targeting Amplifiers: Base Container Images and Transitive Spring Framework CVEs
10:00 Privacy and Execution: Running Static JSON Data Pipelines Privately Behind Firewalls
10:40 Transitioning to Scale: Remediation Workflows with Moderne

📊 The Problem: The Transitive Dependency Patching Nightmare
When security scanners flag tens of thousands of Common Vulnerabilities and Exposures (CVEs) across an enterprise codebase containing 60,000 source repositories, platform teams face paralysis. Sending thousands of individual developers to manually add transitive overrides creates massive technical debt that becomes impossible to unwind when official patches release. Furthermore, many critical enterprise dependencies hit "dead ends"—where upstream maintainers have stopped supporting legacy versions—leaving banks with high-risk vulnerabilities and no clear upgrade path.

🏗️ The Solution: Risk Navigator & OpenRewrite Mutualization

Dov Katz demonstrates how financial institutions can use Spec-Driven decision support tools to prioritize remediation:

High-Leverage Amplifiers: Locating core framework and base container image dependencies (such as Spring or base Linux RPMs) where a single patch closes thousands of downstream vulnerability touchpoints simultaneously.

Dead-End Identification: Distinguishing between software that can be immediately bumped to minor/patch versions versus legacy packages requiring joint industry-commissioned back-patching.

Automated Shopping Carts: Selecting vetted dependency targets and exporting OpenRewrite YAML scripts to automatically execute version updates across thousands of repositories.

⚙️ Why This Matters for Financial Engineering

Quantifying True Security ROI: Shifting engineering metrics away from vanity signals (like merged PR counts) to measurable security burn-down rates (reducing active CVE touchpoints from 500,000 to 100,000).

Local Data Privacy: Running static, spec-driven analysis engines completely offline inside corporate environments without sending internal dependency trees or proprietary code to external APIs.

🌐 More about FINOS: https://www.finos.org/
📧 Join our newsletter: https://www.finos.org/sign-up
🎙️ Listen to our Open Source in Finance Podcast: https://www.youtube.com/@FINOS/podcasts
LinkedIn: https://www.linkedin.com/company/finosfoundation

#FINOS #OSFFNewYork #OSERA #MorganStanley #RiskNavigator #SupplyChainSecurity #DevSecOps #OpenRewrite #CVE #PatchManagement

Source

Late Night Linux – Episode 397

Late Night Linux – Episode 397

Video by The Late Night Linux Family via YouTube
Late Night Linux – Episode 397

Support us on Patreon and get an ad-free RSS feed with some early episodes. https://www.patreon.com/LateNightLinux

Initial Steam Machine reviews are broadly positive, Jellyfin is losing some key project leaders, Sony deletes more movies that people "bought", why you probably shouldn’t wipe your phone when the US authorities ask for access, Graham repurposes some discarded crypto hardware to play arcade games, Félim gets that old game working, a great terminal music player, and more.

https://latenightlinux.com/late-night-linux-episode-397/

Source

Retail Giant Salling Group Runs on SAP

Retail Giant Salling Group Runs on SAP

Video by SAP via YouTube
Retail Giant Salling Group Runs on SAP

Salling Group, Northern Europe’s largest retailer, shares how a modern SAP landscape is helping support more than 2,100 stores across six countries. Learn how SAP S/4HANA Cloud, RISE with SAP, and a strong supply chain foundation are helping the company improve efficiency, support employees, and better serve customers.

Read the article: https://news.sap.com/?p=246507

00:00 – The Autonomous Enterprise
00:23 – Who is Salling Group?
00:40 – Why AI Transformation?
00:58 – SAP S/4HANA Cloud and RISE with SAP
01:31 – What’s next for Salling Group?

Source

Iran Attacks Amazon Data Centers AGAIN! #shorts

Iran Attacks Amazon Data Centers AGAIN!  #shorts

Video by TWiT Tech Podcast Network via YouTube
Iran Attacks Amazon Data Centers AGAIN!  #shorts

Iranian forces have once again targeted Amazon AWS data centers in the Middle East, causing significant damage. Satellite images reveal burn scars and fires at multiple facilities. These attacks highlight the vulnerability of cloud infrastructure in the region. #CyberSecurity #AmazonAWS #MiddleEastConflict #DataCenter

You can find more about TWiT and subscribe to our full shows at https://podcasts.twit.tv/
Subscribe: https://twit.tv/subscribe
Products we recommend: https://www.amazon.com/shop/twitnetcastnetwork
TWiT may earn commissions on certain products.

Join our TWiT Community on Discourse: https://www.twit.community/

Source

Through the Lens’ ep. 2

Through the Lens' ep. 2

Video by Meta Developers via YouTube
Through the Lens' ep. 2

One developer has already built more than 100 web apps for Meta Ray-Ban Display. 👓

We’re talking a sky-gazing overlay that tracks constellations, EV controls, smart home lights you can adjust with a pinch gesture, and a racing game you steer by tilting your head.

In ‘Through the Lens’ episode 2, Herald breaks down how he built all of it and shares the technical playbook so you can start building your own. 🚀

🔗 Full episode and links to get started in the comments.

#MetaRayBanDisplay #WebDevelopment

Source