Erlend Sogge Heggen

I tried to write down things that surprised me while writing my own PDS.

Here it goes:

blog.sgo.to/2026/03/06/t...

screenshot of the one-pager version of the servo readiness report

How do we get to more than just three web engines owned by three US companies?

It's a gargantuan question, with no easy or right answer.

I've put together a draft report, thinking about it through a very specific approach - please enjoy:

Servo Readiness Report

webtransitions.org/servo-readin...

Another thing is that these tools are not free. By pivoting the software field to focus on AI-first workflows we are, intentionally or not, leaving those who do not have the means to pay for the hardware or cloud AI models behind.

"AI Assisted" is one thing, pivoting entirely is neglectful.

The US military has drooled over AI robots and weapons for 60 years, and have been the primary funders of it's development. Here is Alan Kay's recount of meeting generals in the 60's...

www.youtube.com/live/GmnBTCK...

Weeknote 09, 2026 My weekly journal-ish entry for week 09 of 2026.

#weeknotes: Comet proof-of-concept is in progress. ovyerus.com/weeknotes/20...

From ZK-first to AT Protocol — our path to DDS | Agora Citizen Network We've been building Agora — a platform for public deliberation using Polis-style clustering — for a while now. Along the way, we've written about what we think about Nostr, AT Protocol, Polis, Communi...

From ZK-first to AT Protocol — our path to DDS | Agora Citizen Network | WhiteWind blog
whtwnd.com/agoracitizen...

A GitHub Issue Title Compromised 4,000 Developer Machines A prompt injection in a GitHub issue triggered a chain reaction that ended with 4,000 developers getting OpenClaw installed without consent. The attack composes well-understood vulnerabilities into so...

I am convinced we are on the verge of the first "AI agent worm". This looks like the closest hint of it, though it isn't it quite itself: an attack on a PR agent that got it to set up to install openclaw with full access on 4k machines grith.ai/blog/clineje...

welcome @doctorow.pluralistic.net!

on your own PDS host (bsky.pluralistic.net), using did:web (did:web:pluralistic.net), and self-controlled domain handle.

looks like things are working/interoperating; let us (the atmosphere ecosystem) know if you run in to any issues

@chadtmiller.com also did one of those: tangled.org/chadtmiller....

Hi! I'm the new Head of Communications @bsky.app.

I've been watching the open social web evolve over the past couple of years. Bluesky represents what I believe the future of the internet should look like: built on principles that put people first.

New post building on this idea, if you are feeling blue as a developer, build your own stuff. It won't fix everything but it can fix some things. vickiboykis.com/2026/03/04/a...

"By letting lower court rulings stand, the Court effectively solidified a 'Human Authorship' requirement."

"If the code is truly a 'new' work created by a machine, it might technically be in the public domain the moment it’s generated [...]."

Kind of wild

Honestly not sure yet, will happily hear ideas. I think we’re gonna want to figure out a way to have a ‘common ToS’ of some sort, but similar to how there are just a few default Codes of Conduct to choose between for specific repos on GitHub.

Is your monthly $ spend going down too?

npmx: converging communities The story of the many people and communities that converged to build npmx together

Congrats on the alpha launch @npmx.dev! Y'all are amazing ❤️

Let me tell you an open source story. A very personal one. A story of growth, downward spirals, and recoveries. Of a multitude of converging communities building tools for themselves. A story of collaboration and trust. And hope.

It's been a pleasure to work with @zicklag.dev, @meri.garden and @erlend.sh on adding events to @roomy.space . We're just getting started! Feedback is already generating fixes and features.

Roomy Events, by OpenMeet While Roomy is now quitely operational with a growing handful of pilot spaces, before we make a grander reveal about that particular milestone we have another exciting Report from the Atmosphere to sh...

@roomy.space provides spaces for groups to chat and collaborate. OpenMeet is a Meetup Alternative, and has an an API for managing calendar events for groups.

We mashed up our services to give Roomy a group calendar feature: blog.muni.town/roomy-events...

Cross-App Authentication on AT Protocol: How Roomy and OpenMeet Share Identity The free, open-source alternative to Meetup. Create groups and events for your community — no fees, no ads, community-owned forever.

If you wanna go deeper on some of the tech don't miss Tom's companion post about how he's allowing our two apps to effectively log into one another seamlessly, without added steps.

What is currently an auth-trust webring of two could probably grow way past that once we see the collective UX win.

Roomy Events, by OpenMeet While Roomy is now quitely operational with a growing handful of pilot spaces, before we make a grander reveal about that particular milestone we have another exciting Report from the Atmosphere to sh...

Building in the atmosphere means you don't have to go it alone.

We know organizers, and the groups-of-coordination they facilitate, require digital infrastructure for events planning. Ergo @roomy.space needs Events.

@tompscanlan.bsky.social agreed and magicked @openmeet.net straight into Roomy.

So the @ec.europa.eu has accepted the validity of a European Citizens Initiative entitled "European social media platform". 🧵of interest perhaps to @eurosky.social , @sebastian.eurosky.social and all our friends currently *building* European social media platforms...

Aye! Though that’s still something for me and the algorithm to figure out together, rather than the data being wiped preemptively.

On the one hand I really like that. But I also like the thought of any new For You algorithm, like the new one form Graze, being able to check out my likes history and have a go at serving me stuff I like based on those historical records.

We need to structurally separate user data from applications so that applications become *users* of data rather than *containers* for it.

Online communities are always reduced to the same structure: Stewards as Landlords

Part 3 of Composable Trust wields ATProto to architect a solution: decomposing communities into 3 sovereigns—Members, Rosters, and Venues—each with full jurisdiction over their own domain, and none over each other’s.

I reckon even some of the big outlets like @404media.co @aftermath.site @caseynewton.bsky.social & @molly.wiki could find this useful.

For WordPress there is Wireservice by @tylerjfisher.com

Afaik that kind of plug-in isn’t a possibility for Ghost though, so native seems like the way to go.

How to set up the Ghost → ATProto Bridge (standard.site support) Hey everyone, I’m sharing a quick setup guide for the Ghost → ATProto bridge, including publishing to standard.site. What this does Connects any Ghost blog to ATProto Publishes posts as standard.si...

@chefkene.bsky.social wrangled together a proof-of-concept, but by far the ideal solution here would be a native integration that sites can opt to enable.

Major congrats! Happy Ghost user here 😊

While you’re stopping by John, have you caught word of @standard.site yet?

It’s a very straight forward way for websites to participate in the Atmosphere and be discoverable to other sites, which I’d really like my own ghost blog to be part of as well.

It’s a standard browser feature

developer.chrome.com/docs/identit...

web.dev/articles/sam...

Ooh, yeh shared autofill across domains would be super handy.

In the other case I wasn’t suggesting any changes to domain names but rather just consolidating all oauth ops onto a single domain like bsky.app whilst the PDS domain bsky.social remained intact.