Decommissioning legacy infrastructure at OpenCode exposed third-party API keys across 1.4% of workspaces, prompting rapid balance draining and cross-provider emergency revocations.
Overview
This edition covers the credential breach impacting OpenCode Console accounts, the Linux kernel maintainers' consensus eliminating the mandatory Assisted-by commit tag, and DeepSeek's commercial release of Search and Fetch APIs alongside its V4.1-Flash checkpoint.
One event, one page—updated as the story changes.
Browse every editionThe incident reveals the vulnerability of centralized cloud credential management in developer tools, providing critical lessons on token architecture and spend controls for enterprise AI deployments.
The Linux kernel's shift from bureaucratic provenance tagging to strict human developer accountability sets an engineering precedent globally, providing vital governance lessons for Thai software enterprises adopting generative AI.
Slashing web retrieval costs to $0.75 per thousand calls transforms the economics of agentic workflows and real-time enterprise RAG in Southeast Asia, though privacy governance and endpoint rate limits demand careful architectural vetting.
How to read the signal
We merge repeated coverage of the same event into one page. Rumors are clearly labeled and change status when new evidence arrives.