The Blog

AI and Code

Practical writing on building with AI agents and LLMs, from architecture decisions and model choices to inference costs and the code behind them. On-site and Medium, all in one place. Back to the blog.

OpenAI's 948 Linux Root Exploits (November 2026): What AI-Found Kernel Bugs Mean for Your Servers

OpenAI says an upcoming cyber model found 948 distinct Linux kernel privilege escalation bugs in one mid-October run, with working root exploits, for about $1.2 million in API credits. Here is what actually happened, why it changes the old assumption that a low-privilege foothold is contained, and the eight changes I'd make to a startup's servers, containers and CI this week.

·10 min read

Kimi K3.1 Pro Open Weights (November 2026): Should Your Startup Use It, Self-Host It, or Skip It?

Moonshot AI put the full Kimi K3.1 Pro weights on Hugging Face this week: a 2.8T-parameter MoE with 104B active, a 1M-token context and API pricing of $2 / $10 per million tokens. Here is what actually shipped, what the licence allows, why 1.56 TB of weights rules out self-hosting for almost every startup, how it compares on cost with Claude Opus 5.5, and a one-week evaluation plan before you switch anything.

·10 min read

Self-Hosting an LLM vs Using an API in 2026: When Open-Weight Models Actually Save a Startup Money (Break-Even Math)

Is it cheaper to self-host an open-weight LLM or pay per token? I ran the 2026 numbers: two rented H100s cost about $5,560 a month at any volume, which only beats a mid-tier API above roughly 214,000 requests a month and a hosted open model above roughly 594,000. Here is the break-even math, what it leaves out, and when self-hosting is right anyway.

·10 min read

RAG vs Fine-Tuning for Startups in 2026: Which One Your AI Product Actually Needs (and Why It's Usually Neither, Yet)

RAG vs fine-tuning, explained for founders by someone who runs a multi-LLM platform: retrieval gives a model the facts, fine-tuning changes how it behaves, and most AI startups should exhaust prompting first. Here is how to decide, what each one really costs, when to fine-tune an LLM, and the mistakes that make AI products expensive to change.

·10 min read

Gemini vs Claude vs Grok vs ChatGPT (and DeepSeek) APIs for Business: A Step-by-Step Setup Guide for 2026

If your business is building on AI, use the providers' APIs directly from their developer consoles, not the chat apps. Here is how Gemini, Claude, Grok, OpenAI (ChatGPT) and DeepSeek compare on price, data handling and fit, and the exact steps to set each one up safely: org account, billing limits, scoped keys, your first call, data controls, and a switchable architecture.

·14 min read