Thoughts on AI, the tech stack, and the indie hacker journey.
On June 24, Micron reported 16 strategic customer agreements worth about $100B in minimum contracted revenue, with pricing floors engineered to lock in record margins — and the CEO said he has no idea when the RAM crunch ends. Every 'self-host to save money' spreadsheet a solo builder runs just got a worse input.
On June 17, AWS gave Amazon Quick autonomous agents on top of an assistant that already plugs into Google Workspace, Microsoft 365, Slack, Zoom, and Salesforce. A week after Microsoft Work IQ went GA, the platform's built-in agent crossed from answering to acting. If you sell the generic version of that, read this.
Novee Security disclosed Cordyceps on June 24 — a class of GitHub Actions misconfigurations where pull requests get more power than they should. A scan of ~30,000 high-impact repos found 300+ fully exploitable. This one isn't a dependency CVE. It's the workflow file you let an agent scaffold and never read. Here's the 15-minute Saturday audit.
OpenAI and Broadcom unveiled Jalapeño on June 24 — OpenAI's first custom inference chip, taped out in nine months and deploying late 2026. The story is silicon. The consequence for a solo operator is the direction of your single biggest variable cost.
On June 24, Qualcomm agreed to acquire Modular — the company behind the Mojo language and the MAX inference platform — in an all-stock deal worth about $3.9 billion. Here's the lesson for a solo operator who never wrote a line of Mojo: neutrality is a strategy, not a property, and it transfers with the cap table.
A 2026 index of solo-founded companies claims AI-augmented founders reach $1M ARR at several times the rate of those without. Take the most optimistic number at face value and it still argues for the opposite of what the 'AI squad replaces your team' crowd is selling.
On June 15, Arcade raised a $60M Series A to be the secure action layer that proves which agent took which action on behalf of which user. If wiring up agent auth and permissions was going to be your billable niche, a funded platform just put a clock on it. Here's where the durable work actually is.
AutoJack is a three-bug chain Microsoft disclosed June 18: a browsing agent loads a malicious page, the page reaches a privileged localhost service, and a process spawns on the host. No login, no clicks. The root cause is an assumption every solo dev makes — that localhost is trusted.
On June 22, OpenAI published guidance on long-running work with Codex: treat it as a persistent workspace, break goals into verifiable steps, keep a human gate. Good advice. But the economics of a four-hour autonomous run are the part a solo operator has to do the math on alone.