JFrog researchers found a GitHub repo publishing dozens of SQLite CVEs that were entirely fabricated by an LLM; NVD and CISA initially listed them as critical, but code inspection and PoC testing proved the vulnerabilities nonexistent. The incident shows AI‑generated security advisories can pollute vendor feeds and mislead defenders.
Epoch AI’s MirrorCode benchmark asks models to re‑implement whole open‑source programs from scratch. The toughest case so far, Claude Opus 4.7 recreating the 16,000‑line Go bioinformatics suite gotree, finished in 14 hours for $251, a task that would take a human weeks. It shows autonomous coding is already tackling multi‑thousand‑line projects.
By stitching Tailscale, a persistent Ubuntu VM, a shared Nix store, and tools like Portless and chezmoi, the author lets LLM agents run off‑machine, survive laptop shutdown, and be accessed from VS Code or a phone. The result is parallel, approval‑free development that follows you anywhere.
Instead of copy-pasting LLM output, the author types every generated line back into the editor. The slow-and-steady approach forces you to understand each API, catch hallucinations, and build a mental map of the codebase, cutting the hidden ‘cognitive debt’ that AI-assisted development creates. It’s slower than pure copy-paste, but yields deeper comprehension.