Field notes on agent engineering, the edge, local ML on Apple Silicon, and the tools built to build things.https://unpopulardev.com/https://unpopulardev.com/posts/version-policy-lost-to-a-cve/https://unpopulardev.com/posts/version-policy-lost-to-a-cve/My rule is to run the latest stable minor that has been out three months. For Astro that points at 6.4.8, which carries an unpatched critical RCE. The rule and the security floor cannot both hold, so one of them gives.Tue, 22 Sep 2026 00:00:00 GMTtoolingastrosupply chain