<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://hackyjs.com/posts/scoring-partial-progress-in-agent-evals-a-gdpx-inspired-harness-in-javascript</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-02T00:00:00.000Z</news:publication_date>
      <news:title>Scoring Partial Progress in Agent Evals: A GDPx-Inspired Harness in JavaScript</news:title>
      <news:keywords>ai-agents, evals, javascript, benchmarking, llm-tooling</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-your-stacks-gatekeeper-dependencies-before-eu-dma-cloud-and-ai-enforcement</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-02T00:00:00.000Z</news:publication_date>
      <news:title>Auditing Your Stack&apos;s Gatekeeper Dependencies Before EU DMA Cloud and AI Enforcement</news:title>
      <news:keywords>eu-dma, cloud, ai, compliance, platform-engineering</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/tightvnc-pre-auth-rce-reading-the-public-poc-and-verifying-your-own-exposure</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-02T00:00:00.000Z</news:publication_date>
      <news:title>TightVNC Pre-Auth RCE: Reading the Public PoC and Verifying Your Own Exposure</news:title>
      <news:keywords>tightvnc, remote-code-execution, windows-security, vulnerability-research, poc-analysis</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/splitting-router-and-worker-roles-in-a-nodejs-coding-agent-lessons-from-dsh-superagent</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-02T00:00:00.000Z</news:publication_date>
      <news:title>Splitting Router and Worker Roles in a Node.js Coding Agent: Lessons from dsh-superagent</news:title>
      <news:keywords>node-js, coding-agent, architecture, typescript, open-source</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/why-parallel-agent-orchestration-can-cost-more-tokens-than-it-saves-testing-deepseeks-super-agent</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-01T00:00:00.000Z</news:publication_date>
      <news:title>Why Parallel Agent Orchestration Can Cost More Tokens Than It Saves: Testing DeepSeek&apos;s Super-Agent</news:title>
      <news:keywords>deepseek, ai-agents, orchestration, token-efficiency, parallel-computing</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/threejs-r187-and-the-tooling-gaps-between-browser-3d-and-native-rendering</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-01T00:00:00.000Z</news:publication_date>
      <news:title>Three.js r187 and the Tooling Gaps Between Browser 3D and Native Rendering</news:title>
      <news:keywords>threejs, webgpu, webgl, browser-3d, graphics-tooling</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/why-prompt-injection-boundaries-fail-once-your-agent-can-run-shell-commands</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-01T00:00:00.000Z</news:publication_date>
      <news:title>Why Prompt-Injection Boundaries Fail Once Your Agent Can Run Shell Commands</news:title>
      <news:keywords>prompt-injection, ai-agents, llm-security, shell-execution, sandboxing</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/verifying-a-patched-brotli-decoder-in-nodejs-and-net-without-trusting-the-changelog</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-01T00:00:00.000Z</news:publication_date>
      <news:title>Verifying a Patched Brotli Decoder in Node.js and .NET Without Trusting the Changelog</news:title>
      <news:keywords>nodejs, dotnet, brotli, security, compression</news:keywords>
    </news:news>
  </url>
</urlset>
