K:Dependencies and agent supply chain
Dependencies and agent supply chain
Editorial topic mappings connect related questions across sources and book chapters.
SE@PoliMi bibliography 5
- W037 — After the Party: Growth, Governance, and Security Scanning in the OpenClaw Agent Skill Ecosystem
Xiong · 2026 - W043 — We Have a Package for You! A Comprehensive Analysis of Package Hallucinations by Code Generating LLMs
Spracklen · 2025 - W049 — The Range Shrinks, the Threat Remains: Re-evaluating LLM Package Hallucinations on the 2026 Frontier-Model Cohort
Churilov · 2026 - W053 — Scanning the Harness: Configuration Exposures in AI Coding-Agent Supply Chains
Kapner · 2026 - W157 — ClawVM: Harness-Managed Virtual Memory for Stateful Tool-Using LLM Agents
Rafique · 2026
Addy Osmani 3
- O004 — Audit your Agent files
Addy Osmani · 2026-08-27 - O014 — The Agent Stack Bet
Addy Osmani · 2026-04-18 - O040 — MCP: What It Is and Why It Matters
Addy Osmani · 2025-03-27
The Pragmatic Engineer 8
- P002 — Did Automattic commit open source theft?
Gergely Orosz · 2024-10-18 - P019 — Microsoft’s developer tools roots
Gergely Orosz · 2025-01-21 - P034 — MCP Protocol: a new AI dev tools building block
Gergely Orosz · 2025-04-08 - P076 — Downdetector and the real cost of no upstream dependencies
Gergely Orosz · 2025-12-05 - P077 — Building MCP servers in the real world
Gergely Orosz; Elin Nilsson · 2025-12-09 - P097 — How will AI change operating systems? Part 1: Ubuntu and Linux
Gergely Orosz · 2026-04-28 - P120 — How will AI change operating systems? Part 2: Windows
Gergely Orosz; Ivan Klaric · 2026-09-22 - P124 — Building resilient AI-powered software, and planning for when things go wrong
Gergely Orosz (introduction); Sam Newman (excerpts) · 2026-10-13
Martin Fowler’s website 1
- F016 — Coding Assistants Threaten the Software Supply Chain
Jim Gumbley; Lilly Ryan · 2025-05-13
Earlier Non-Deterministic books 12
- B019 — Tools \& Practices
Enrico Papalini · - B023 — Dynamic Context Engineering: Real-Time Information
Enrico Papalini · - B028 — Security, Compliance \& Governance
Enrico Papalini · - B034 — Implementation Guide and Solutions
Enrico Papalini · - B035 — AI Adoption in the European Union
Enrico Papalini · - B051 — Anatomy of an AI SDD Framework
Enrico Papalini · - B061 — Automation and Extensibility: CLI, Modules, and MCP
Enrico Papalini · - B066 — Installation and Setup
Enrico Papalini · - B080 — Agent Skills
Enrico Papalini · - B092 — Advanced Prompting for Autonomous Systems
Enrico Papalini · - B104 — Non-Deterministic Loop Engineering: A Critical Assessment
Enrico Papalini · - B108 — Building a Full Local AI Loop
Enrico Papalini ·
Software Engineering Practices 10
- PAT:017 — Blast Radius Containment
- PAT:018 — PII and Secret Scrubbing
- PAT:030 — Connectors and Tools: Move Exact Work Outside the Weights
- PAT:034 — Safety and Guardrails: Verification Is Not Authorization
- PAT:037 — Dependency Sweeper: route by risk
- PAT:051 — Security-First Development
- PAT:058 — Acceptable Use Policy
- PAT:077 — Security Pipeline
- PAT:078 — Prompt Injection Scanning
- PAT:079 — Supply-Chain Risk Audit