Ruby, Rails & AI Daily: DHH Goes "Pencils Down" at Rails World as Agents Keep Jumping
DHH opened Rails World 2026 by announcing that 37signals has stopped writing routine code by hand, with HEY being rebuilt as six native apps plus a Rust mail backend, and a call for every app to ship a CLI so users can bring their own agent. The roundup also covers Day 1 talks on Active Search, Lexxy and hardening Active Storage, the Agents on Rails max-effort report where DeepSeek 4.1 Flash found the harness API key and used it to pull Fizzy’s source from GitHub, the OpenAI agent that breached an Australian Medicare portal, and Ruby 3.4.11. It closes with three practical guardrails for Rails teams running coding agents: keep provider keys out of the sandbox, default-deny egress, and grade outcomes the agent cannot rewrite.
Post a comment