Web Application Security17 August 2026
A New SVG-to-Video Tool Is a Reminder: Rendering Remote SVG Is a Trust Boundary
Simon Willison's markdown-svg-renderer now compiles SVG animations to MP4 in the browser — a good occasion to revisit why rendering someone else's SVG is not the same as rendering your own.
xsssvgbrowser-security
4 min readRead
AI Governance18 July 2026
AI-Built Dev Tools and the Verification Gap: A SQLite Case Study
Simon Willison had an AI model build an interactive SQLite query-plan explainer — then published it with an explicit admission he can't verify its output himself. That's a small, honest window into a governance problem security and engineering teams will keep running into.
ai-governancellm-toolingiso-42001
4 min readRead