Python 3.15 lazy imports, Anthropic workflows win 90%, Willison guards secrets
Every URL the pipeline pulled into ranking for this issue — primary sources plus the supporting and contradicting findings each Researcher returned. Inline citations in the issue point back here.
Sources
Hello Python 3.15, goodbye 3.10, and now I can use 3.11 simonwillison.net
Python 3.15 is here ! Here’s the essential What’s new in Python 3.15 guide, this year curated by 3.14 and 3.15 release manager Hugo van Kemenade. As someone who builds open source software that works in every supported Python version, I get to say goodbye to Python 3.10 and start embracing features from Python 3.11. First, some highlights from Python 3.15. Explicit lazy imports I’m most excited about Explicit lazy imports from PEP 810 . These let you import modules like so: lazy import json laz…
How Anthropic’s Dynamic Workflows Coordinate Claude Agents latent.space
At AI Engineer New York, Anthropic drew on lessons from Unix and Linux to explain how agents can tackle bigger projects without overwhelming developers.
web-edit 0.1a0 simonwillison.net
Release: web-edit 0.1a0 I was working on a project from my phone using Codex Remote when I found myself wanting to edit a credentials file without round-tripping those credentials through the LLM itself. So… I had Codex and GPT-6 Astra Extra High build this Python web app which provides a web UI for viewing and editing files in a folder. It’s intended to be run over Tailscale, so I can have an agent start this running and then edit files via my Tailscale network directly from my phone. Here’s…
datasette-ports 0.4 simonwillison.net
The Datasette plugin that scans a machine for running instances now reports each process ID alongside the port. Surfacing the PID makes it straightforward to attach Python 3.15’s new sampling profiler to a live Datasette server for performance debugging.
References
Medium — Yogesh Krishnan on JIT 6-month clock medium.com
The Steering Council has placed the JIT on a ‘six-month clock,’ requiring a formal standards-track PEP to be approved by late 2026, or the code may be removed from the main branch entirely.
Socket.dev — PEP 810 analysis socket.dev
Lazy imports effectively ‘move the crash’ from startup to an unpredictable point during execution… modules that rely on import-time side effects, such as those that register plugins, configure logging, or perform monkey-patching, will now occur only if the module is explicitly accessed, potentially breaking established patterns in frameworks like Django or Flask.
Real Python — Tachyon deep dive realpython.com
Developed by CPython core developer Pablo Galindo Salgado and Bloomberg’s László Kiss Kollár… It operates ‘outside’ the target process by reading its memory directly at microsecond intervals using the remote debugging interface established in PEP 768, allowing the profiler to decode the interpreter’s internal state without pausing execution.
Real Python — frozendict coverage realpython.com
frozendict does not inherit from the standard dict class, and its immutability is shallow; if a dictionary contains mutable objects like lists, the entire structure remains unhashable.
dev.to — Python 3.15 feature roundup dev.to
skipping the eager import of libraries like pandas can reduce help-screen startup times from 132ms to just 10ms
LWN — PEP 798 discussion coverage lwn.net
a similar proposal was dropped a decade ago because it was met with ‘strong concerns about readability’ and only ‘mild support’… critics argue the new syntax risks turning clean one-liners into ‘dense’ expressions.
Anthropic Engineering — ‘How we built our multi-agent research system’ anthropic.com
A lead agent plans the process and delegates to parallel subagents… the multi-agent setup outperformed a single agent by 90.2% on research-heavy tasks
Anthropic Engineering — ‘Building effective agents’ anthropic.com
Workflows offer predictability and consistency… use the simplest solution possible, and only increase complexity when needed. Agents are the right choice only when flexibility and model-driven decision-making are needed at scale.
ForkLog — on Anthropic’s agentic-misalignment research forklog.com
When agents were given open-ended goals, they occasionally resorted to malicious insider behaviors—leaking data or lying about their environment—to avoid being shut down
r/technology discussion of Anthropic multi-agent patterns reddit.com
Agents often prioritize repeating common knowledge rather than sharing unique facts, sometimes resulting in a group that performs worse than a single agent with the full data set
till-freitag.com — ‘Agent Runtime Comparison’ till-freitag.com
Claude Code is strictly tied to Anthropic’s models… LangGraph relies on persistent checkpointing, enabling time-travel replay from any previous node in the graph
AskUI — ‘Upgrade Anthropic Computer Use into a production-ready agent’ askui.com
The pixel-sensitive nature of the Computer Use tool means that minor UI shifts can lead to retries and flaky runs… small micro-errors in pixel interpretation or tool calls can escalate into total system failure
Replit engineering blog on CodeMirror migration replit.com
Replit reported a 70% increase in weekly mobile retention after replacing Monaco with CodeMirror 6, attributing the success to improved touch responsiveness and reduced usability friction.
pkgpulse.com (Monaco vs CodeMirror 6 vs Sandpack, 2026) pkgpulse.com
CodeMirror 6 follows a modular architecture that allows developers to include only the features they need, resulting in a core size of approximately 300KB (or as low as 50kB for basic setups) [vs] Monaco… with a footprint typically ranging from 5MB to 10MB uncompressed.
Harmonic Security — Securing Codex best practice harmonic.security
Injecting secrets as environment variables is increasingly viewed as a weak practice because agent-generated code can easily inspect process listings or logs to exfiltrate them… secrets are primarily intended for the initial setup phase and automatically purged before the agent phase begins.
Tailscale blog — Introducing Tailscale Funnel tailscale.com
Serve exposes a local port to other devices within your tailnet using an encrypted HTTPS URL and MagicDNS… ensuring that only your authenticated phone can see the application, maintaining a zero-trust boundary.
LangChain blog — LangSmith Sandboxes langchain.com
E2B allows secrets to be stored outside the sandbox; when the agent makes an HTTPS request, a proxy intercepts the traffic and injects the credential into the headers before forwarding it, ensuring the secret never touches the agent’s execution memory.
Appwrite — Comparing vibe-coding tools appwrite.io
Early-generation vibe tools were criticized for exposing sensitive credentials and API keys, leading to security breaches… critics argue that purely vibe-based apps often collapse under production demands due to unvetted code and black-box architectural decisions.
