Tech Radar: KV-Cache Isolation, Go 1.27.3 Urgent, A2A
Tech Radar: KV-Cache Isolation, Go 1.27.3 Urgent, A2A Answer-first: This week’s radar is dominated by one uncomfortable lesson and two consolidation waves. The lesson: KV-cache sharing inside LLM inference engines is now a proven cross-request data-leak class — Cloudflare disclosed that a config/pool-size mismatch in Workers AI GLM-5.3 let decode steps attend over stale cache pages of earlier requests (155 affected responses since the Aug 27 launch), and vLLM shipped three releases in four weeks fixing two more cross-request cache/mask leaks. The consolidation waves: Go shipped its first-ever URGENT release (1.27.3/1.26.10, under 7.5 hours from notification) against forged eMudhra TLS certificates, and agent protocols (A2A, MCP, AGENTS.md, agentgateway) consolidated under the Linux Foundation’s Agentic AI Foundation with A2A past 150 organizations. Below: 12 verified briefings for senior backend/platform engineers, each with its source, plus a ring matrix and this week’s action list. ...