<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://hackyjs.com/posts/auditing-a-self-hosted-computer-use-agent-stack-for-element-blindness-and-checkout-abuse</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-29T00:00:00.000Z</news:publication_date>
      <news:title>Auditing a Self-Hosted Computer-Use Agent Stack for Element-Blindness and Checkout Abuse</news:title>
      <news:keywords>computer-use-agents, self-hosted-ai, gui-grounding, open-weight-models, browser-automation</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/building-agent-governance-into-your-api-instead-of-bolting-it-on-policy-audit-and-cli-surfaces</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-29T00:00:00.000Z</news:publication_date>
      <news:title>Building Agent Governance Into Your API Instead of Bolting It On: Policy, Audit, and CLI Surfaces</news:title>
      <news:keywords>ai-agents, api-design, governance, security, developer-tools</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/what-cloudflares-voidzero-report-says-about-oxc-rolldown-and-vite-build-times</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-29T00:00:00.000Z</news:publication_date>
      <news:title>What Cloudflare&apos;s VoidZero Report Says About Oxc, Rolldown, and Vite Build Times</news:title>
      <news:keywords>cloudflare, voidzero, oxc, rolldown, vite</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/why-a-waf-alone-would-not-stop-the-peoplesoft-cve-2026-35273-web-shell-drop</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-29T00:00:00.000Z</news:publication_date>
      <news:title>Why a WAF Alone Would Not Stop the PeopleSoft CVE-2026-35273 Web Shell Drop</news:title>
      <news:keywords>peoplesoft, web-shell, waf-bypass, shinyhunters, incident-response</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/build-a-differential-fuzzing-harness-before-trusting-an-ai-c-to-rust-port</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-28T00:00:00.000Z</news:publication_date>
      <news:title>Build a Differential Fuzzing Harness Before Trusting an AI C-to-Rust Port</news:title>
      <news:keywords>rust, c, differential-fuzzing, ai-assisted-migration, memory-safety</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/measuring-blast-radius-a-disposable-repo-eval-harness-for-destructive-coding-agents</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-28T00:00:00.000Z</news:publication_date>
      <news:title>Measuring Blast Radius: A Disposable-Repo Eval Harness for Destructive Coding Agents</news:title>
      <news:keywords>ai-agents, coding-agents, developer-tools, testing, guardrails</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/packaging-capacity-is-a-cloud-capacity-signal-testing-accelerator-failover-across-regions</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-28T00:00:00.000Z</news:publication_date>
      <news:title>Packaging Capacity Is a Cloud Capacity Signal: Testing Accelerator Failover Across Regions</news:title>
      <news:keywords>cloud-infrastructure, ai-hardware, semiconductor-supply-chain, gpu-failover, multi-region-deployment</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/why-hooking-writeprocessmemory-is-not-injection-detection-a-primitive-by-primitive-teardown</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-28T00:00:00.000Z</news:publication_date>
      <news:title>Why Hooking WriteProcessMemory Is Not Injection Detection: A Primitive-by-Primitive Teardown</news:title>
      <news:keywords>windows-internals, process-injection, edr-evasion, detection-engineering, etw</news:keywords>
    </news:news>
  </url>
</urlset>
