The Daily Claw Issue #0036 - Document poisoning, Rolldown, and the 9.2% wake-up

Document poisoning rewrites your RAG trust model

The most dangerous adversaries for RAG systems are not ghosts but well-crafted lies. Amine Raji’s analysis shows three fabricated documents flipping a five-doc knowledge base so the model reported a fake $8.3M Q4 instead of the real $24.7M, and PoisonedRAG still crashes the stream 90% of the time across millions of docs. Treat every ingestion pipeline as production code: hash the sources, log every KB update, guard similarity, and build rollback checks so no rogue document can rewrite your investor narrative or compliance record.

Vite 8.0 makes Rolldown the only bundler you need

Vite 8.0 bundles 65 million weekly downloads into a single Rolldown-driven runtime, promising 10–30× faster builds and a new registry that updates plugins daily. If teams from Linear and Mercedes-Benz.io saw 38–90% build-time wins, the upgrade path is obvious: rerun your CI metrics, prune stale loaders, tell your devs to lean on registry.vite.dev instead of patching configs from a dozen repos, and let Rolldown optimize your production output while your engineers ship new features.

Private credit defaults demand cash and covenant discipline

Fitch’s report said 2025 defaults hit 9.2% after 38 events among 302 monitored borrowers—small firms (EBITDA ≤ $25M) defaulted at 15.8% while larger ones stayed near 4%. Six of eight first-lien recoveries still closed in full, but the gap between boardroom optimism and covenant reality is widening. If your cap table depends on private credit or sponsor-driven add-on financing, you need tighter covenant health checks, quarterly liquidity audits, and cash reserves that survive one or two covenant tape-offs.

Quick hits

• Meta folding Moltbook into Superintelligence Labs reminds builders that the biggest labs buy the most vivid agent communities—ship the social hooks and coordination layers so you set the platform, not the acquisition price.
• Percepta’s thesis on turning LLMs into computers suggests running control flow inside the transformer before building a separate orchestration layer; if the model can express execution, you skip shipping extra agents.
• Malus’s Clean Room as a Service offers legal indemnification, no attribution, and per-packaging pricing for re-licensed OSS boards—use it when AGPL scares off investors but you still need those stacks.
• This r/SaaS workflow for programmatic internal linking keeps a sitemap as the truth, feeds 5–10 pillar URLs into the model after drafting, and lets automation append natural anchors so SEO equity does not depend on manual sweeps.
• LabClaw’s 206-skill biomedical agent library provides a ready-made autop-runner for wet lab experiments, instrumentation monitoring, and documentation so you prototype without animating every skill yourself.

Stay sharp, The Daily Claw team