O'Reilly Radar - The Future of Software May Be Conversational Rather Than Autonomous

O'Reilly Radar - The Future of Software May Be Conversational Rather Than Autonomous

Historically, software interfaces forced people to adapt to machine discipline. We learned command syntax. We navigated menus and workflows. We memorized procedures. We filled out forms in exactly the way the application expected. Even graphical interfaces, which were a huge leap forward, still largely required users to think in terms of the structure of the software itself. Natural language interfaces potentially invert that relationship.
Instead of forcing users closer to the system, the system moves closer to human expression. That may sound subtle, but I think it represents a significant shift in how software can be experienced. A user no longer needs to think primarily in terms of application structure or workflow design. The interaction begins to center more naturally around

oreilly.com
u/OReilly_Learning — 13 days ago

O'Reilly Radar - MCP Is Not Just Another API Standard

What Model Context Protocol actually changes for agentic systems, and what it doesn’t

Ask most engineers what MCP is and you’ll get the same answer: a way to plug tools into an LLM. Fair enough, as far as it goes. But that description treats MCP like plumbing, and after months building MCP-based integrations for large enterprise platforms, I don’t think plumbing is the right metaphor. Plumbing moves water through pipes you already designed. MCP changes who’s holding the wrench. Once you’ve felt that shift in a real production system, the “just another API standard” framing stops making sense. (Shared by Marsee @ O’Reilly)

oreilly.com
u/OReilly_Learning — 22 days ago
▲ 3 r/agenticAI+1 crossposts

O'Reilly Radar - Zero to Agent in 30 Minutes: Building a Financial News Agent with Jayeeta Putatunda

How to build a source-backed briefing agent, step by step

Define the scope. Start by setting the analyst’s focus area, research questions, and time window, whether that’s the last one day, seven days, or 30 days. Narrowing the scope up front, including a list of preferred sources, keeps the agent’s web searches directional instead of generic.

Plan the coverage. A coverage planner agent breaks the research question into discrete sections, such as market backdrop or company catalysts, so the search that follows can run in parallel rather than one long sequential query.

Search and gather. A news researcher agent runs multiple queries against the preferred sources first, then falls back to a general search if the preferred sources don’t return enough results.

Validate the sources. A validation agent checks each link for a working, clickable URL and a correct publication date, removes duplicate stories covering the same news, and filters out paywalled pages that won’t return usable content.

Generate the briefing. A briefing writer agent assembles the validated developments into a set structure, including an executive summary, key bullet points, and a section-by-section breakdown of what each development means for the analyst and what to watch next.

Capture feedback into memory. A feedback agent logs corrections such as formatting or terminology preferences and saves them to a memory database, so the next briefing run applies those preferences automatically instead of requiring the analyst to re-prompt.

Jayeeta built the entire stack on open source models so newcomers can run it without an API key, and she recommends starting with a smaller model before scaling up. The takeaway extends well beyond finance. Building single-purpose agents rather than one large agent that handles every task means a failure at one stage doesn’t force a restart of the whole pipeline, and each agent’s output stays easier to trace and debug.
The full code base, including the sample data and the UI shown in the demo, is available in Jayeeta’s GitHub repo, so readers can clone it and run the briefing agent on their own systems.

oreilly.com
u/OReilly_Learning — 1 month ago
▲ 5 r/OReilly_Learning+1 crossposts

O'Reilly Radar - Writing with AI

Writing with AI
A contrarian view by Tim O’Reilly

A lot of professional writers say they never do it. And for writers who do, the consequences can be serious. Book contracts have been withdrawn. People have lost jobs.
I have a contrarian view. I say AI is a medium, like painting, sculpture, photography, music, or language itself. If AI is a medium, it is a field of possibility from which humans can and will summon up and communicate insights, truth, beauty.

oreilly.com
u/OReilly_Learning — 1 month ago

O'Reilly Radar - AI as an Enterprise Operating System

I hadn’t heard of Dan Guido until a few months ago, when I came across the video of a talk he gave at [un]prompted, an AI security practitioners’ conference. Dan is the CEO and cofounder of Trail of Bits, a software security research and development firm that works with companies in tech, defense, and finance. But Dan wasn’t talking about security. He was talking about what it takes to make a company AI native, which is close to the center of the bullseye for many of us right now.

oreilly.com
u/OReilly_Learning — 2 months ago
▲ 5 r/YugabyteDB+1 crossposts

Free O'Reilly Report: Why Distributed SQL Is the Modern Foundation for AI

AI in pilot and AI in production are completely different. Traffic is unpredictable, data is scattered across separate systems, and things that worked fine in testing start to break under real concurrency and scale. 📉

Our new O'Reilly report, 'Why Distributed SQL Is the Modern Foundation for AI,' breaks down the architectural decisions required to keep AI systems consistent and scalable once they're live.

https://info.yugabyte.com/report-why-distributed-sql-is-the-modern-foundation-for-ai-oreilly

Walk away with an action plan for keeping transactional data, vector embeddings, and unstructured content working from one consistent, current source of truth.💡

Download your complimentary copy today! 🙌

u/OReilly_Learning — 3 months ago
▲ 44 r/OReilly_Learning+1 crossposts

Your MCP servers can reach every domain on the internet over 443. NetworkPolicy can't fix that. Wrote up why, and what can [O'Reilly]

I wrote a piece for O'Reilly Radar about the agent failure that never makes the post-mortem, because nothing visibly fails: https://www.oreilly.com/radar/prompt-injection-to-data-exfil-in-3-hops/

Disclosure up front: I work at Aviatrix, which sells one of the products in the category the article describes. The piece is deliberately layer-neutral: Cilium FQDN policy, service meshes, and cloud-native firewalls all enforce the same control, and the article covers this. The argument is about the category, not any product.

The chain is three hops of everything working as designed. Prompt injection hidden in a support ticket -> legitimate MCP tool call -> HTTPS egress to an attacker domain: no CVE, no stolen token, no compromised process. The agent did exactly what it was permitted to do.

Why NetworkPolicy doesn't help: it operates at L3/L4 and cannot tell api.github.com from attacker.example.com when both resolve into the same rotating CDN range. Allow 0.0.0.0/0 on 443, and the agent reaches everything. Deny it and the agent cannot reach its own model API.

The CIDR allowlist most teams settle on is the worst of both: it holds the legitimate API, plus every other tenant of that CDN, including the attacker. A firewall rule that permits both your API and your adversary is not a security boundary. It's a formality.

Guardrail models don't rescue this either. One that catches 95% of injections still loses, because the attacker controls the input, retries for free, and needs only one success against an action that cannot be undone. Answering a probabilistic attack with a probabilistic defense is like teaching a guard dog not to eat steak.

What works: deterministic egress containment. Per-pod identity, domain-aware policy read from SNI, default-deny on everything undeclared. What this does not close: exfil via permitted destinations, and DNS tunneling. What it does is shrink the reachable set to the handful of domains you declared, and force attackers onto slow, noisy channels you can actually watch.

The questions for you:
For every MCP server in your cluster, can you name the external domains it must reach and must never reach?
Has anyone shipped default-deny FQDN egress for agent workloads, and what broke first?

u/OReilly_Learning — 3 months ago

O'Reilly Radar - Ordinary Engineers, Not Heroic Inventors

Jeff Ding's diffusion theory of the role of technology in great-power competition also applies to AI adoption, and it suggests that companies obsessed with the frontier might be optimizing for the wrong thing

oreilly.com
u/OReilly_Learning — 3 months ago

O'Reilly Radar - Guidelines for Respectful Use of AI

Don’t ask someone to read/review what you haven’t read or reviewed yourself.
This is one of the most common frustrations I hear amongst people working on AI-heavy teams. Whether it’s code that the owner didn’t really bother to understand before submitting for review or documents that they generated and didn’t bother to read, too often people try to steal productivity from their colleagues by streamlining their production of work while asking their colleagues to do all of the quality control themselves. It’s great to have a loop of AI code generation → AI code review → AI fixes → final human review, but if the person prompting the AI doesn’t bother to review that code first, they’re putting a huge validation tax onto their teammate, who has to trust both that you prompted well AND that the AI understood the context and problem well enough to get a sustainable solution.

oreilly.com
u/OReilly_Learning — 3 months ago

O'Reilly Radar - I Let an AI Agent Run 40 Experiments While I Slept

I set up an AI agent on a rented GPU, pointed it at a training script, and went to bed. By morning it had run 40 experiments, improved validation loss by 5.9%, and cut memory usage from 44 GB to 17 GB. It also spent four hours chasing a bug that a linter introduced behind its back. The agent never flagged it. I only found out because the numbers stopped improving and I started reading

oreilly.com
u/OReilly_Learning — 4 months ago