> Canonical URL: https://codingcat.dev/newsletter/purrfect-dispatch-issue-1

# The Purrfect Dispatch #1: Anthropic's $518B IPO Math Doesn't Work

![The Purrfect Dispatch #1: Anthropic](https://cdn.sanity.io/images/hfh83o0w/production/d1d83d596ce5899d797cd3aaf1bd0142038f282a-1376x768.jpg?w=1200&q=82&fit=max&auto=format)

Hey friends, Alex here from [**CodingCat.dev**](https://codingcat.dev). Anthropic just filed its Form S-1 for a Nasdaq IPO revealing **$518B in take-or-pay cloud commitments**  to Google, AWS, and Microsoft, and when you trace where that money actually comes from, the math gets wild. Welcome to **The Purrfect Dispatch #1**! Every week I stop chasing the AI hype laser pointer long enough to share the exact engineering news, architecture trade-offs, [**Blog Posts**](/blog), [**Podcasts**](/podcasts), and [**Courses**](/courses) that actually matter when you are shipping purrfect production software.

This week had more drama than a cat spotting a cucumber behind its food bowl: alongside Anthropic's S-1, AI models clawed open a decade-old RCE in PHP affecting 70% of the web, edge providers are racing to handle agent-scale SQLite and search workloads without coughing up a hairball, and we just launched [**34 hands-on 2026 Courses**](/courses) on CodingCat.dev. Grab your catnip and let's get right into it.

## 1. News of the Week That Matters

Here are the highest-signal Web Dev and AI stories from our Trend Radar this week, paired with how I am thinking about them as a Solutions Architect:

### 1. GitHub Incident with Actions, Pages, and Webhooks

When GitHub Actions, Pages, and Webhooks cough up a hairball at the exact same time, every CI/CD pipeline coupled to a single webhook queue grinds to a halt. Keep your production deploy artifacts reproducible from local CLI (`wrangler deploy`) so you always land on all four paws when an upstream webhook outage strikes. ([GitHub Status Incident Report](https://www.githubstatus.com/incidents/pwxsjgnvrk6b) | Related Blog Post: [Dockerless Serverless GPUs with RunPod Flash](/post/dockerless-serverless-gpus-fast-cheap-ai-saas-with-runpod-flash))

### 2. Send BLE Air Quality Data to Cloudflare D1 with Python

Streaming edge IoT or sensor telemetry directly into Cloudflare D1 over HTTP bindings keeps your ingestion pipeline lean, serverless, and purrfectly simple. Pair D1 with a scheduled Worker cron to roll up older rows so your SQLite storage stays clean. (Related Episode: [Firebase SQL with Data Connect](/podcast/firebase-sql-with-data-connect))

### 3. BLA (Blind LLM Agents): Adversarial Defense Shield for JS Bundles & Binaries

Autonomous agents with file-system and reverse-engineering claws can now shred through shipped client bundles and Electron binaries in seconds. Treating client-side JavaScript or desktop bundles as opaque is dead; keep secrets, proprietary business logic, and auth verification strictly on the server or edge. ([GitHub: qybaihe/bla](https://github.com/qybaihe/bla) | Related Episode: [How OAuth, MCP, and the OpenAI Apps SDK Power Interactive AI Experiences](/podcast/how-oauth-mcp-and-the-openai-apps-sdk-power-the-next-generation-of-interactive-ai-experiences))

### 4. Cloudflare Launches Web Search API for AI Agents in Beta

Giving AI agents live web search used to mean duct-taping third-party SERP scrapers onto your Worker and praying your rate limits held up like a cat clinging to a screen door. Cloudflare moving Web Search directly into the edge runtime cuts out an entire network hop and makes tool execution a purrfect fit inside the same isolate boundary as your MCP server. (Related Episode: [Identity in AI Agents](/podcast/identity-access-management-for-agents-with-tobin-south))

### Architectural Trade-Off Matrix: Agent Data & Search Infrastructure

DimensionAhead-of-Time Knowledge Base (Sanity Context MCP)Ephemeral Per-Agent SQL (Cloudflare D1 / Branching)Live Edge Web Search API (Cloudflare Workers)Primary Use CaseVerified company canon, docs, and multi-source policiesPer-session agent state, sandboxes, and structured tablesReal-time external facts and live web verificationConflict ResolutionBuild-time diffing with human sign-off before deploySchema constraints and transactional isolationQuery-time ranking (LLM must reconcile conflicting pages)Latency & Token CostCompact initial_context outline + targeted path reads< 5ms edge SQLite reads with zero connection pool bloatNetwork-bound fetch + higher token cost for raw snippetsFailure Mode to WatchStale context if scheduled source drift checks are disabledUnbounded database sprawl without TTL auto-purgePrompt injection from untrusted third-party web pages

## 2. Blog Posts & Breakout Videos You Might Have Missed

- [**Anthropic's $518B IPO Math Doesn't Work**](/post/anthropic-s1-ipo-circular-ai-economy-etf-risk): Anthropic filed its Form S-1 for a Nasdaq IPO under ticker ANT, revealing $518B in take-or-pay cloud commitments to Google, AWS, and Microsoft. Here is how the circular revenue machine works and what happens to your S&P 500 ETF if it stalls. [**Read Post →**](/post/anthropic-s1-ipo-circular-ai-economy-etf-risk)
- [**The 14 Open-Source Repos Powering Code-Driven Video in 2026: How We Built 3D AJ the Cat**](/post/14-open-source-repos-code-driven-video-how-we-built-3d-aj): How we combined Remotion, HyperFrames, GSAP, Three.js, Blender MCP, Chatterbox, faster-whisper, and FFmpeg contact-sheet critics to build 3D AJ and our automated Course Factory. [**Read Post →**](/post/14-open-source-repos-code-driven-video-how-we-built-3d-aj)
- [**AI Just Found a 10-Year-Old Bug in 70% of the Web (PHP2Shell)**](/post/php2shell-cve-2026-109618-ai-php-security-scramble): Two critical pre-authentication RCE flaws in PHP (CVE-2026-109618 and CVE-2026-109619) sparked a global patching scramble across 70% of the web. [**Read Post →**](/post/php2shell-cve-2026-109618-ai-php-security-scramble)
- [**Why Naive Vector RAG Breaks in Production (Sanity Knowledge Bases)**](/post/sanity-knowledge-bases): Eliminate query-time guessing in your AI agents with ahead-of-time compiled Sanity Context Knowledge Bases. [**Read Post →**](/post/sanity-knowledge-bases) | [Watch on YouTube ↗](https://www.youtube.com/watch?v=jm5Vq60qYTk&list=UUnKZ8gEb78zXKMi1ns-IQ2g)

## 3. New 2026 Course Spotlight

We just launched [**MCP in Production: Building & Securing Model Context Protocol Servers**](/course/mcp-in-production) alongside our full 2026 curriculum ([The Zero-Cold-Start Edge Stack](/course/zero-cold-start-edge-stack), [Sanity Content Operating System](/course/sanity-content-operating-system), and [Full-Stack AI Agents in TypeScript](/course/full-stack-ai-agents-typescript)). Every course includes dark-mode Architecture Diagrams, copy-paste TypeScript implementations, S/A/B/C/D Architectural Tier Lists, and video walkthroughs.

## 4. AJ's Pro-Tip of the Week: Always Strip Stega Characters Before External Parsers

> AJ Pro-Tip: When you enable Visual Editing in Sanity Studio, string fields can carry invisible zero-width stega characters for click-to-edit overlays. Always run stegaClean() before passing URLs to external email clients, OpenGraph tags, or URL constructors.

Copied! 🐾📄 src/lib/sanity/clean-cdn-url.tstypescript

```
import { stegaClean } from "@sanity/client/stega";

export function toEmailImageUrl(rawUrl: string, width = 1200): string {
  const url = new URL(stegaClean(rawUrl).trim());
  url.searchParams.set("w", String(width));
  url.searchParams.set("auto", "format");
  url.searchParams.set("fit", "max");
  return url.toString();
}
```

🎓 Featured Course Spotlight

## [MCP in Production: Building & Securing Model Context Protocol Servers](/course/mcp-in-production)

Move beyond toy local Stdio scripts. Learn how to architect, secure, and deploy remote Model Context Protocol (MCP) servers on Cloudflare Workers with OAuth 2.1, Better-Auth, WebMCP (RFC 9727), and Sanity Context Knowledge Bases.

[Start Course →](/course/mcp-in-production)

## Favorite Cat of the Week 🐱

![CodingCat.dev Favorite Cat of the Week judging your production deploy](https://cdn.sanity.io/images/hfh83o0w/production/ba517a755a50e314e67aac57db52d06ca0fceeb7-500x333.jpg?w=800&fit=max&auto=format)

Me watching a junior agent run DROP TABLE in production right before a Friday 4:59 PM deploy, then calmly knocking my coffee mug off the desk.