#office-hours - March 2026

@here Today on office hours we'll have Stategraph founders on the call giving a demo. It's a great opportunity to ask questions from @Malcolm Matalka (Terrateam) and @Josh Pollara who have arguably spent more time looking at Terraform state than any one.

I know I have lot of questions! Watch the video below of their demo last week, for a preview.

https://www.youtube.com/watch?app=desktop&t=15&v=kI-a6rTCc5w&feature=youtu.be

Links that were scheduled to be discussed after the demo at today's office hours:

https://vercel.com/docs/queues
https://www.stepsecurity.io/blog/hackerbot-claw-github-actions-exploitation
https://github.com/aquasecurity/trivy/discussions/10265#discussioncomment-15968674
https://github.blog/changelog/2026-02-26-github-actions-now-supports-uploading-and-downloading-non-zipped-artifacts
https://x.com/i/status/2026695550771540489
https://github.com/AlexsJones/llmfit
https://github.com/milldr/flow
https://code.claude.com/docs/en/remote-control
https://techcrunch.com/2026/03/03/claude-code-rolls-out-a-voice-mode-capability/

Curious how SRE teams here handle incident postmortems.
I built a small tool that reads Slack war-room threads and generates an RCA automatically.
Example output:
• Timeline reconstructed from messages
• Root cause analysis
• Evidence links to logs
• Executive summary
Example incident flow:
03:47 — incident posted in Slack
03:49 — RCA generated
03:51 — fix suggested
Would love feedback from people doing on-call / incident response.
https://www.prodrescueai.com

Links from today's office hours:

https://vercel.com/docs/queues
https://www.stepsecurity.io/blog/hackerbot-claw-github-actions-exploitation
https://github.com/aquasecurity/trivy/discussions/10265#discussioncomment-15968674
https://atmos.tools/changelog/introducing-atmos-ai
https://atmos.tools/changelog/ai-agent-skills
https://atmos.tools/changelog
https://github.blog/changelog/2026-02-26-github-actions-now-supports-uploading-and-downloading-non-zipped-artifacts
https://manuchandrasekhar.com/posts/2026/02-13-tf-deprecation/
https://x.com/i/status/2026695550771540489
https://github.com/AlexsJones/llmfit
https://github.com/milldr/flow
https://code.claude.com/docs/en/remote-control
https://discord.com/channels/1469527844802793589/1469555929480695829/1473742489125916847
https://www.wiz.io/blog/google-closes-deal-to-acquire-wiz
https://developers.cloudflare.com/changelog/post/2026-03-10-br-crawl-endpoint/
https://www.ft.com/content/7cab4ec7-4712-4137-b602-119a44f771de
https://x.com/satyanadella/status/2030992877665583440
https://github.com/chardet/chardet/issues/327
https://grith.ai/blog/clinejection-when-your-ai-tool-installs-another
https://github.com/googleworkspace/cli
https://techcrunch.com/2026/03/02/users-are-ditching-chatgpt-for-claude-heres-how-to-make-the-switch/
z.ai
https://github.com/karpathy/autoresearch
https://codewire.sh
https://robohorizon.com/en-us/magazine/2026/03/eon-uploaded-a-fruit-flys-brain-and-it-actually-works/
https://github.com/kubernetes-sigs/agent-sandbox/
https://github.com/kernel/hypeman

Have been missing the last few HH. Hope you all are well. Sharing this in case it hasn't been discussed. Haven't tried it yet but might be worth a look....

https://pullpreview.com/

Links from today's office hours:

https://tui.studio/
https://github.com/paperclipai/paperclip
https://www.nvidia.com/en-us/ai/nemoclaw
https://github.com/ops0-ai/oxid
https://blog.exe.dev/ssh-host-header
https://www.wired.com/story/hundreds-of-millions-of-iphones-can-be-hacked-with-a-new-tool-found-in-the-wild/
https://atmos.tools/changelog/native-ci-integration
https://github.com/cloudposse-examples/app-on-ecs-v2
https://blog.cloudflare.com/shift-left-enterprise-scale/
https://github.com/mmarinovic/React2AWS
https://cmux.com/
https://tmuxai.dev
https://www.conductor.build/

An interesting AWS Console TUI: https://github.com/k2m30/a9s

Links from today's office hours:

https://rosesecurity.dev/2026/03/20/typosquatting-trivy.html
https://x.com/karpathy/status/2036487306585268612
https://github.com/AmElmo/proofshot
https://github.com/hectorvent/floci
https://x.com/stripe/status/2034257912973963374
https://atmos.tools/changelog/auth-required-concurrent-identities
https://atmos.tools/changelog/auth-console-isolated-sessions
https://rosesecurity.dev/2026/03/20/typosquatting-trivy.html
https://github.com/aquasecurity/trivy/commit/1885610c6a34811c8296416ae69f568002ef11ec#diff-7c91aaa231c9799967299bd573925eaa0e310a4274e57a39bf3bf8930aa278c2R81
https://github.com/actions/checkout/commit/70379aad1a8b40919ce8b382d3cd7d0315cde1d0
https://github.com/zizmorcore/zizmor
https://path.rsaconference.com/flow/rsac/us25/FullAgenda/page/catalog/session/1728070288065001o6bO
https://www.theregister.com/special_features/spotlight_on_rsac/
https://www.theregister.com/2025/04/29/north_korea_worker_interview_questions/
https://github.com/mitchellh/vouch
https://github.com/cloudposse/atmos/pull/2238
https://github.com/cloudposse-examples/app-on-ecs-v2/blob/main/profiles/github/atmos.yaml
https://github.com/paperclipai/paperclip
https://supermemory.ai/docs/intro
https://www.reddit.com/r/ClaudeCode/comments/1s2ci4f/claude_code_can_now_dream/
https://www.youtube.com/watch?v=ShEez0JkOFw