Security Checks, AI Budgets, Copilot Changes #96

Today's Letter

1. Tailsnitch GitHub doc outlines 52 security checks
2. Vercel AI Gateway adds team and project budgets
3. GitHub Copilot, Gemini 2.5 Pro and Gemini 3 Flash deprecated

Tailsnitch GitHub doc outlines 52 security checks

• GitHub document `docs/CHECKS.md` describes 52 security checks performed by Tailsnitch.
• The reference groups checks by category, including Access Controls with 10 checks and Authentication & Keys with 4 checks.
• Device Security is listed with 13 checks, alongside Network Exposure with 7 checks and SSH & Device Security with 4 checks.
• The provided materials also include extracted numeric rules such as 12-item coverage and thresholds like `>90 days`.
• Source-backed scope here is the CHECKS.md inventory and rule structure, rather than the broader incident framing in the original headline.

Source: github.com
More: tailscale.com · news.hada.io · huggingface-anatomy-of-frontier-lab-model-intrusion.static.hf.space

Vercel AI Gateway adds team and project budgets

• Vercel added AI Gateway spend budgets at team and project scope, alongside existing API key budgets.
• A budget sets a dollar limit for its scope, and the gateway rejects further requests after the limit is reached.
• One request can match multiple budgets at once, and it must pass every applicable budget to succeed.
• Budget scopes cover all team traffic, all requests for one project, or a single API key.
• BYOK spend is excluded from budget metering by default.
• The dashboard Budgets tab shows spend, limits, budget health, and refresh cadence across all scopes.
• Email alerts can notify usage recipients at 50%, 75%, and 100% of a limit within a refresh period.
• Default budgets can be set for projects or API keys without their own explicit budget, and explicit budgets override those defaults.
• CLI commands support setting, listing, and removing team and project budgets, with daily, weekly, monthly, or no refresh period.

Source: vercel.com

GitHub Copilot, Gemini 2.5 Pro and Gemini 3 Flash deprecated

• GitHub deprecated Gemini 2.5 Pro and Gemini 3 Flash across all GitHub Copilot experiences on July 31, 2026.
• The change applies to Copilot Chat, inline edits, ask mode, agent mode, and code completions.
• GitHub lists Gemini 3.1 Pro (Preview) as the replacement for Gemini 2.5 Pro.
• GitHub lists Gemini 3.6 Flash as the replacement for Gemini 3 Flash.
• Existing workflows and integrations should be updated to supported models.
• Copilot Enterprise administrators may need to enable the replacement models through model policies in Copilot settings.
• After a policy is enabled, the model appears in the Copilot Chat model selector in VS Code and on github.com.
• GitHub says no manual action is required to remove the deprecated models.

Source: github.blog

Jocoletter curates AI, software, and product trends for developers and builders.

#GitHub #Tailscale #Vercel

Subscribe to Jocoletter