Skip to content
What are you looking for?. Open searchSR

Sources

The places checked every morning. A primary source publishes first-hand and outranks an intermediary, because retelling loses the nuance.

Primary sources

  • W3C News

    Working drafts, candidate recommendations, and the procedural steps a web standard passes through.

  • web.dev Blog

    Google's site for web platform guidance, and where Baseline status changes are announced.

  • WebKit Blog

    Safari and WebKit release notes and platform explainers, straight from the engineers who ship them.

  • Chrome for Developers

    The Chrome team writes here about what lands in the browser and when. Primary source for Chrome platform changes.

  • Cursor Changelog

    Version-by-version record of what changed in the Cursor editor. Short entries, precise dates, no interpretation.

  • Google DeepMind Blog

    Google's AI research lab publishes model releases, benchmark results, and research write-ups here. Long on method, short on marketing.

  • Claude Blog

    Anthropic's product writing about Claude: releases, engineering practice, and how teams actually use it. No RSS, so it is read through the sitemap.

  • MDN Blog

    Mozilla's documentation and explanation of what browsers actually do. For what is arriving in stable right now, the Chrome and WebKit blogs have their own entries.

  • webstatus.dev

    A searchable database showing per-browser status for every web platform feature. This is the tool you open before deciding on a new dependency or on whether something can be done with native means.

  • Baseline, the shared standard of four browsers

    Baseline tells you whether a feature is safe for production. It has three states: limited availability means it is not everywhere yet, newly available means it has just landed in every browser, and widely available means it has been present in all of them for thirty months. It replaces the older practice of checking caniuse and hoping for the best.

  • Claude Code official documentation

    The documentation moved: old addresses of the form docs.claude.com/en/docs/claude-code/ redirect to code.claude.com/docs/en/, so bookmarks need updating. It covers every environment Claude Code runs in, from the terminal and the VS Code and JetBrains editors to the desktop app and the web, along with a table that points each intent at the right tool.

  • OpenAI News

    OpenAI's own announcements, model cards and pricing changes. A primary source outranks any site that retells it, because retelling loses the nuance and adds excitement the original does not carry.

  • Anthropic News

    The official place where Anthropic publishes everything it ships: models, safety policies, connectors, and research. Reliability is as high as it gets because there is no intermediary, and a new model appears here first.

Other sources

  • Python.org

    The Python Software Foundation's release pages, the official documentation and the PEP index. Primary source for Python releases, schedules and language changes.

  • Deno Blog

    The Deno company's own blog, where releases of the Deno runtime, Deno Deploy and JSR are announced. Primary source for anything Deno ships or shuts down.

  • MCP Toolbox for Databases (googleapis)

    Google's open source MCP server for databases. Primary for its releases, pull requests and what each version changes.

  • GitHub Advisory Database

    GitHub's database of security advisories, including vendor-reviewed advisories with CVE identifiers, affected version ranges, patched versions and CVSS scores. Primary for those fields.

  • Syed Anas Mohiuddin, security research

    The personal site of an independent security researcher who reports vulnerabilities in Model Context Protocol servers. Primary for the researcher's own findings, dates of disclosure and the fixes vendors confirmed. Severity ratings and fix dates are checked against the vendor advisories the write-up links.

  • Wikimedia Foundation

    The non-profit that hosts Wikipedia, Wikidata and Wikimedia Commons. Primary for what happens on its own infrastructure: traffic, outages, edits and the findings of its own security investigations. Its attributions of agent activity to a particular company are its own assessments and are cited as such.

  • RemoveMacAI

    The repository of the RemoveMacAI command line tool, maintained by an individual developer. Primary for what the tool changes, which macOS versions it supports, and what its releases fix. Its statements about freed disk space and about changes that persist across updates are the author’s own and are cited as such.

  • Google VRP na mreži X

    The account of Google's vulnerability reward programs on X. Primary for announcements the team publishes only there, such as the reason it gave for pausing part of the open source program in October 2026, which the rules page does not state. Only this account: the host is recorded with its path, so no other X account is covered.

  • Google Bug Hunters

    Google's own site for its vulnerability reward programs: program rules, scope, reward tables, and the security engineering blog. Primary for what a program accepts and pays, because the rules page is the document a report is judged against. The pages are rendered in the browser, so a crawler gets almost no text and every claim has to be read by hand before it is used.

  • Meta — Muse Gadgets SDK repository

    Meta's open source repository for the Muse Gadgets device SDKs (ESP32 firmware and the Linux device SDK). Primary for what the SDK does, what it requires, and the risks Meta itself documents.

  • Suno blog

    The company blog of Suno, the AI music generator. Primary for its own product announcements and model releases.

  • Strands Agents blog and repositories

    The blog and GitHub repositories of Strands Agents, the open source agent project started at AWS. Primary for its own releases: the SDK, the harness, and the experimental projects under strands-labs.

  • Shopify News and Help Center

    Shopify’s own newsroom and Help Center. Primary for what the company ships to merchants: product announcements, availability, requirements, and documented limitations.

  • Reddit for Developers

    Reddit's own developer portal and documentation. Primary for the terms of the Data API and the Developer Platform: registration deadlines, shutdown dates, migration programs, and what Devvit apps can do.

  • Shopify developer documentation and changelog

    Shopify's own developer changelog and documentation, the primary source for what its platform exposes to apps and agents.

  • swarmcha.se

    A research blog where independent investigators trace the activity of autonomous AI agents on the public web, working from public scan logs and wiki access logs. Primary for the analysis it publishes, because the writeup is the research. Attributions to a vendor are the author's inference from shared addresses and naming, and each post says how certain it is.

  • Microsoft Official Blog and Copilot Blog

    Microsoft's official company blog and the Copilot product blog on Tech Community. Primary for what Microsoft ships, when it rolls out, and how it prices Copilot; cost comparisons against competitors are Microsoft's own modeling and are cited as its claim.

  • Supabase Blog

    Supabase's own blog and documentation. Primary for what the product does and which settings are on by default; not evidence for how customers actually configure it.

  • Transluce

    An independent non-profit lab that studies how AI agents and models behave, and publishes the data behind its behavior reports. Primary for its own findings; its attributions are marked with a confidence level, and that level carries into any citation.

  • UpGuard Research

    The research team of a security vendor that scans the public internet for exposed data and publishes the method and case studies. Primary for its own scans; the vendor also sells monitoring, so read the conclusions as its view and the counts as its measurement.

  • Prime Minister of Australia

    Transcripts, statements, and media releases from the Office of the Prime Minister of Australia. Primary for what the Australian government announces and for what the Prime Minister said on the record. A statement about a third party, such as a company, is the government's account, not a finding, and is attributed as such.

  • Cloudflare Developer Docs

    Cloudflare's developer documentation, which carries the supported-feature lists, limits and configuration details that the blog only summarises.

  • Cloudflare Blog

    Cloudflare's own engineering and product blog, where Workers, R2, D1 and the rest of the developer platform are announced. Primary source for anything Cloudflare ships.

  • GitHub Docs — Copilot

    GitHub's own documentation for Copilot, and the only place the per-token price of each model in the model picker is written down. The changelog announces that a model is available; this is where the rate, the context tier and the plan allowance are stated. Every page is also served as Markdown by appending .md to the path, which is what an automated check can read.

  • Nezavisni međunarodni naučni panel UN-a za vještačku inteligenciju

    The scientific panel the UN General Assembly set up in 2025, whose forty members serve in a personal capacity and whose findings are not subject to UN review. Primary for its own reports and thematic briefs, which it publishes as PDFs beside the press release. Cite the brief, not the release: the release summarises where the brief states its limits.

  • GeekWire

    A Seattle newsroom that covers Amazon and Microsoft from close range and regularly breaks their stories with a named spokesperson on the record. Primary for what it reports first-hand, because the company statement appears there before it appears anywhere else. Check the byline: a wire rewrite carries no such statement.

  • Governor of California — executive orders and press releases

    The California governor's newsroom, which publishes the signed text of every executive order as a PDF next to the press release. Primary for what an order actually directs, because the release summarises and the order sets the deadlines. Cite the order number and the signed PDF, not the summary: the release says "within two months" where the order names a date.

  • TypeSafe AI

    The company blog and documentation of TypeSafe AI, which builds Jev and the model class it calls System One. Primary for what the model does, what it costs and what it returns, and unusual among vendor blogs in publishing the caveats beside its own measurements: which reference models were used, who built the evaluation workflows, and where the reported speedups are at the high end. Its benchmark claims remain the vendor's own until someone else repeats them.

  • Meta Newsroom

    Meta's own newsroom, where the company announces consumer products with the conditions attached: which countries a launch covers, which platforms it reaches, what is free and what is paid. Primary for Muse, the Meta AI app and Meta's own policy statements. The ai.meta.com product pages render their text in the browser and return nothing to a crawler, so the newsroom is the source that can actually be checked.

  • Hacktron AI

    The research blog of Hacktron, an offensive security firm whose team publishes its own vulnerability research with full disclosure timelines, affected versions and vendor responses. Primary for the findings it reports itself, including the HEIF Heist work on libheif; there is no deeper source behind a team's own exploit writeup.

  • Rust Blog

    The official blog of the Rust project, written by the teams themselves: releases, security advisories from the security response working group, and crates.io registry notices. Primary for anything the project announces about its own toolchain, registry and maintainer accounts.

  • OpenAI na mreži X

    OpenAI's own account on X. Primary for statements the company publishes only there and nowhere on openai.com — the September 2026 statement about the wiki incident is the measured case. Only this account: the host is recorded with its path, so no other X account is covered. The page answers a browser but not a crawler, so the text has to be read by hand before it is used.

  • METR

    The nonprofit that runs independent evaluations of frontier models and publishes the reports itself, including the limits of each investigation. Primary for its own findings. Its reports state what the team could not determine; that caveat travels with every number taken from them.

  • Greg Casar, US House of Representatives

    The House office that publishes its own oversight letters to AI companies in full, alongside the company replies. Primary for what Congress actually asked and by when, because the signed letter is posted rather than described. Cite the letter itself, not the press release, when a date or a demand matters.

  • collusion.wiki

    The research site of Sydney Von Arx, Cormac Slade Byrd, Spencer Kitts and Thomas Larsen on OpenAI agents that used public wikis as a message board. Primary for that incident, because the authors publish the wiki logs alongside the analysis. The write-up marks its own inferences as guesses; keep that separation in any citation.

  • Microsoft Security Blog

    Microsoft's own threat research, written by the teams that run Defender telemetry. Primary for the numbers it publishes about campaigns it measured itself, because the measurement is the report. Read the scope line: the figures describe what Microsoft's own signature saw, not the whole internet.

  • NVIDIA Blog i NVIDIA Newsroom

    NVIDIA's own corporate blog, newsroom and product pages. Primary for what the company itself announces: acquisitions, prices, hardware dates and the software it ships. Its performance figures are the vendor's own measurement and need attribution; the technical detail behind them usually sits on developer.nvidia.com, which is a separate record.

  • Amazon News

    Amazon’s own newsroom, where its consumer announcements appear with the conditions attached: which country a feature launches in, who may use it, and what the company measured. Primary for Alexa, the shopping app and Amazon’s own security tools. AWS service announcements have their own entry.

  • Circleback

    Circleback's own release notes and pricing page for its meeting note-taker. The vendor's own record of what shipped and what it costs.

  • Debian

    The Debian Project's own pages: general resolutions and their tallies, release announcements, and policy documents. First place of record for what the project decides.

  • Anil Madhavapeddy

    Notes and weekly logs by Anil Madhavapeddy, a Cambridge computer science professor and OCaml maintainer. He writes from his own servers and projects, so a claim here is the first place it appears rather than a retelling of someone else's.

  • CourtListener — RECAP

    Free Law Project's archive of US federal court dockets and filings, mirrored from PACER through RECAP. Primary for what a court actually ordered, because it serves the signed document rather than a report of it. Cite the docket entry number: a case has several orders on one day, and press coverage tends to merge them.

  • Embrace The Red

    Johann Rehberger's blog, where he publishes his own attacks on AI agents: prompt injection, permission bypasses, data exfiltration. Primary for the technique it demonstrates, because the writeup is the research, not a report of it. Read the disclosure status too: several findings were published after the vendor closed them as informative.

  • OpenClaw

    The open personal assistant that runs on your own machine, and its own releases and documentation. Primary for what it does and what it requires; it runs with the keys and permissions its owner gives it, so what it can reach is a matter of setup, not of the project's promises.

  • OpenRouter

    One place where the same open model is priced by several providers at once. Primary for what a provider charges today; it is a reseller, so the price it shows includes its own margin and can differ from the maker's own API.

  • DeepSeek API

    DeepSeek's own documentation and price list, including off-peak discounts and cache pricing. Primary for what an open-weight model costs through its maker's API.

  • Qwen

    Alibaba's model lab publishing its own releases, sizes and licences. Primary for what a Qwen model is; its own benchmark tables are the lab measuring itself.

  • MLX

    Apple's open array framework for machine learning on Apple silicon. Primary for what the unified-memory path supports, including distributed inference across several Macs.

  • LM Studio

    A desktop application for running local models, with its own release notes. Primary for what the app can do; how fast a model runs on a given machine is a measurement, not a release note.

  • llama.cpp

    The engine nearly every local runner is built on, release by release. Primary for which architecture it supports, which quantization formats exist, and what actually got faster.

  • Ollama

    The most widely used way to run a model on your own machine, and its own release notes. Primary for which model landed in the runner, in which quantization, and what memory it asks for.

  • Apple Newsroom

    Apple's own press releases, with the specification tables the coverage paraphrases. Primary for chips, memory bandwidth, unified memory capacity and price — the four numbers that decide which local model fits on which machine.

  • PyPI

    The Python package index. Primary for which version exists, when it was published, and which dependency range it requires — the three facts a release note usually paraphrases.

  • Stanford Digital Economy Lab

    The lab's own working papers, among them “Canaries in the Coal Mine” on the employment effects of AI. Primary for the figures the press quotes: the paper states which measure each number belongs to, and outlets routinely compare two different ones.

  • Claude Playground

    Anthropic's console tool for trying the Messages API, which replaced Workbench in August 2026. It shows the exact request the SDK would send and the raw response. A pointer, not a citation: the page is an application, so a claim about a parameter is settled in the release notes and only demonstrated here.

  • Google Cloud — Vertex AI pricing

    Google's published price per million tokens for the Gemini family. The ai.google.dev page carries the same numbers but refuses our client, so this is the one we cite.

  • npm registry

    The registry API itself, which answers with the package metadata: every published version and which one is current. The npmjs.com website refuses our client, so this is where a version claim is checked.

  • NoLoJS

    The catalogue itself: patterns that HTML and CSS now handle without JavaScript. Primary for what the catalogue contains, and it is the subject of the piece.

  • llm (Simon Willison)

    The release notes of the tool itself, written by its author. Primary for what changed in which version, and for the dependency that broke.

  • Obsidian Security

    The company's own announcements. Primary for what it says about itself: funding, product, customer numbers — and read as a company saying it, not as an independent finding.

  • Adversa AI

    A security lab that publishes its own attacks against models, with the method and the disclosure timeline attached. Primary for its own research.

  • SecurityWeek

    A security trade desk that reports funding, breaches, and vendor claims with names and figures attached. Citable for what it reports first-hand.

  • 9to5Google

    Android and Google coverage that often carries screenshots and rollout details before the official post. Citable, with the company's own page preferred when it exists.

  • MacRumors

    Apple-focused reporting that regularly reads the shipped binaries. Citable for what it verified itself, and it marks rumour as rumour.

  • Engadget

    A consumer technology desk with first-hand hands-on reporting. Citable for what its own reporters tested; not a substitute for the maker's announcement.

  • Pew Research Center

    A research centre that publishes its own studies with the method and the sample attached. Primary for any figure that comes from one of its reports.

  • Black Forest Labs

    The FLUX image models, announced and licensed by the lab that makes them.