In The Observatory, the MoTaverse community shows up to share links they are reading all the time.
The value is not only in the links shared in the moment, but also in the accumulation of links that become searchable knowledge over time.
There are currently 3073 searchable links.
From Traditional to AI-powered Quality: Introducing Katalon True Platform
🤖 From traditional to AI-powered quality: a free live webinar with a Katalon True Platform demo and Q&A 💻 Nov 4 🗓️
🎉 Featured link of the week:
Shifting code review "left", and why we need humans involved — Antony Marcano
Is Removing the Human-in-the-Loop from PR Reviews a Good Idea?
I was recently invited to an online roundtable that asked: could AI perform 90% of code reviews? This question could mean several things, but the discussion focused on agents approving 90% of pull requests (PRs) without a human in the loop.
Top links from the Observatory this week:
Manual of Me, 2026 — Jesper Ottosen
Manual of Me is a personal user manual – a document that helps others understand how they can work best with you.
Bringing Code Review to Claude Code — Claude
Practical guidance on how to structure agent tasks using three common workflow patterns, with tradeoffs and benefits for each.
How to test for Clickjacking vulnerability — Kasturi Rajamanikkam
Clickjacking is a cyberattack where a malicious attacker tricks an authenticated user by placing a layer over a link or a button to take you to a fake site embedded inside the real one or to authorise an action that could cause you harm. Think of it as the cyber equivalent of putting a card reader over an ATM. It tricks you into clicking or entering information into something added instead of what you should be.
Stop re-pasting context into AI prompts — Katalon
Katalon True Platform's September updates are here. Anh Chu (True Platform team) walks through what's new, including a Knowledge Base for Katalon AI: upload your project docs and glossary once, and stop pasting the same background notes into every prompt.
“Impossible to Hide Secret …”: Uncovering Security and Privacy Issues in LLM-Native IDEs — Stack Overflow
LLM-native IDEs (LIDEs) increasingly allow AI agents to read repositories, execute commands, and modify code, introducing significant security and privacy risks. Developers regularly report incidents on Reddit involving leaked API secrets, unauthorized access to system files, and file deletion on live servers. In one case, despite configuring both .gitignore and .copilotignore to exclude a secrets file, Copilot read and attempted to modify it while debugging a database connection issue, exposing live API keys and credentials. This study systematically analyzes such incidents and develops a taxonomy to characterize the reported security and privacy risks.
Disyearnment: the yearning for more discernment in an age of domentum — Simon Tomes
I like a made up word. Particularly a portmanteau. Recent favourites include ’persevilience’ and ‘domentum’.
AI minister warns 'likely' UK's cyber defences will be breached — BBC
The UK's AI minister has warned it is "likely, if not inevitable" the country's cyber defences will at some point be breached.
Bug turns one of the biggest fears about Ray-Ban Meta smart glasses into reality — Ars Technica
Some Ray-Ban Meta smart glasses were recording people’s conversations without the wearer knowing. The recordings occurred without users saying the prompt phrase (“Hey, Meta”), in a bug that Meta says has been fixed.
Fridge hack costing millions and sparking fires stemmed from poor security — Ars Technica
Incident hitting 700 supermarkets exploited outdated devices exposed to the Internet.
How Much Testing Is Enough? The Stoic Case for Knowing When to Stop — Stephen Platten
There is a question we are often asked throughout our careers in software testing, and despite all the advances in automation, tooling and now artificial intelligence, I don't think we are any closer to having a universally accepted answer.
Explore all Observatory links…
Closing the Test Automation Gap: Practical Solutions for Advanced QA Teams
Complex workflows, flaky tests, fragmented tools, and AI-driven pressure are making it harder for QA teams to keep up.
