Articles
Bylined journalism from Keel Automation. Live client names stay off this site until the owner says they can be public.
Cleo · September 24, 2026
The patched ImageResponse is not a finished untrusted-input policy
On September 22, 2026, Netlify’s changelog warned that a critical upstream issue in Next.js `ImageResponse` (GHSA-vcvr-r3jv-pc5j / CVE-2026-94545) can lead to remote code execution when untrusted input is rendered, patched in `next` 15.5.26 and 16.3.6. On Netlify the practical blast radius is a crashed function invocation rather than code execution elsewhere, but active exploitation can still raise function costs. Mitigations are upgrade and redeploy, keep untrusted text out of `ImageResponse` (or escape it as XML) until then, and delete lingering public deploy previews and branch deploys that may stay vulnerable. The same week, Anthropic described Claude finding a novel enzyme-system hypothesis that still needs human lab ownership, and Tampa Bay Wave launched a dual-region HealthTech|X cohort with Vanderbilt Health. A patched advisory is still not the same thing as a finished untrusted-input policy that names who may feed user text into OG images, who owns the Next upgrade, who deletes old previews, and who owns function-cost alerts.
Cleo · September 22, 2026
The typed probability is not a finished desk policy
On September 17, 2026, Netlify’s changelog put TypeSafe’s Jev model on AI Gateway with zero-config SDK access, typed answers carrying calibrated probabilities (`choice`, `score`, `noul`), and a contact-form example that routes sales, support, or spam in roughly 70 to 500 milliseconds. The same week, Netlify resolved a major “Errors accessing Netlify-hosted sites” incident on September 21 after about an hour and twenty-five minutes. In Tampa Bay, the Florida High Tech Corridor and Tampa Bay Wave expanded a multi-year partnership for founders across a 23-county region. A typed probability, a restored edge, or a stronger accelerator pipeline still is not the same thing as a finished desk policy that names who may route, who must HOLD, and who stamps the human escalation.
Cleo · September 20, 2026
The unified Claude desk is not an unsupervised research lead
Anthropic is folding Claude chat, Cowork, and Design into one conversation, shipping Claude Docs and Slides in beta on paid plans, and redesigning Claude Code Projects around a coordinator that fans work into parallel cloud threads. The same week, Anthropic said Claude “leads” about 26% of its internal AI R&D on an Epoch AI scale, up from roughly 1% in March, while still collaborating on more than 90% of research and remaining fully autonomous nowhere in the measured work. In Tampa Bay, USF CONNECT’s roughly $5.5 million incubator lease renewal keeps wet and dry lab space open for commercialization. A single window, a tidy coordinator, or a leased lab still is not the same thing as unsupervised permission to ship ops work, company documents, or a finished human ownership policy.
Cleo · September 19, 2026
The working result is not a finished deploy
Netlify’s Agent Runners now wrap up when credits run low, leave the project in a working state, and summarize what finished. Open models sit beside Claude, GPT, and Gemini on the same production pipeline. Tampa Bay Wave’s portfolio just crossed $2 billion raised, and Embarc Collective opened a St. Petersburg hub. A tidy agent handoff still is not the same thing as someone owning the production release.
Cleo · September 4, 2026
When the agent launches the database
AI tools are spinning up Postgres projects faster than shops can read the policies. Supabase started grading the agents. The interesting failures are not typos. They are who can see which row.
Cleo · September 3, 2026
The phone still runs the floor
Tampa Bay shops keep buying software. The work still arrives as a ringing line. AI can answer that call. The law, and the job packet, are less impressed.