Infra and tooling led today: Cloudflare now signals DNSSEC bypasses with EDE 33 after the .AL rollover, Next.js shipped a 16.3 canary with a new Request panel and a React upgrade, and Claude Code tightened tool UX and isolation. Papers probed LayerNorm mechanics, kernel-model privacy, and adversarial purification, while Lobsters’ SQLite move and a Bloomberg report on OpenAI’s screenless device rounded out the pulse.