<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://hackyjs.com/posts/auditing-a-self-hosted-computer-use-agent-stack-for-element-blindness-and-checkout-abuse</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-29T00:00:00.000Z</news:publication_date>
      <news:title>Auditing a Self-Hosted Computer-Use Agent Stack for Element-Blindness and Checkout Abuse</news:title>
      <news:keywords>computer-use-agents, self-hosted-ai, gui-grounding, open-weight-models, browser-automation</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/building-agent-governance-into-your-api-instead-of-bolting-it-on-policy-audit-and-cli-surfaces</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-29T00:00:00.000Z</news:publication_date>
      <news:title>Building Agent Governance Into Your API Instead of Bolting It On: Policy, Audit, and CLI Surfaces</news:title>
      <news:keywords>ai-agents, api-design, governance, security, developer-tools</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/what-cloudflares-voidzero-report-says-about-oxc-rolldown-and-vite-build-times</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-29T00:00:00.000Z</news:publication_date>
      <news:title>What Cloudflare&apos;s VoidZero Report Says About Oxc, Rolldown, and Vite Build Times</news:title>
      <news:keywords>cloudflare, voidzero, oxc, rolldown, vite</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/why-a-waf-alone-would-not-stop-the-peoplesoft-cve-2026-35273-web-shell-drop</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-29T00:00:00.000Z</news:publication_date>
      <news:title>Why a WAF Alone Would Not Stop the PeopleSoft CVE-2026-35273 Web Shell Drop</news:title>
      <news:keywords>peoplesoft, web-shell, waf-bypass, shinyhunters, incident-response</news:keywords>
    </news:news>
  </url>
</urlset>
