stack_baseline.md

Stack baseline — 2026-2027

Updated 17 min read source
On this page14
  1. Python
  2. Python tooling
  3. Web / backend
  4. Data stores
  5. Infra / platform
  6. Frontend
  7. AI / LLM
  8. Compliance / security
  9. Data engineering
  10. Domain: quant / fintech
  11. Domain: healthcare / regulated
  12. AI-assisted development
  13. How to use this file
  14. Sources

Stack baseline — 2026-2027

Single source of truth for versions and facts used across these notes. Every content edit checks claims against this table. Web-verified 2026-08-08; Vue, data-engineering, quant, healthcare and AI-tooling rows verified 2026-08-10; Python and the ML/LLM library rows re-verified 2026-08-12; agent-framework and eval-tooling rows added 2026-08-13; Python 3.15, PostgreSQL, DRF, Celery, Docker, OAuth 2.1 and OpenAI API rows re-verified 2026-10-06/07; Python, web, AI/ML and MLOps package rows re-checked on PyPI and python.org/postgresql.org 2026-10-15 (where a row’s own note says an earlier date, the version cell is the 2026-10-15 value).

Rule: when a note states a version, it either matches this table or explicitly says why an older version matters (“Django 4.2 is where X was introduced”). Never leave a bare unversioned claim that was true only in 2023.

Python

Item Current Notes for notes
Python 3.14.8 (2026-09-30; 3.14.0 GA 2025-10-07) Baseline for all examples. 3.13 acceptable where a feature needs it.
Python 3.15 3.15.0 (2026-10-09, final) Verified 2026-10-11 on python.org. 3.14 stays the baseline for examples; say “new in 3.15” for its features. Headlines: explicit lazy imports (PEP 810), a frozendict built-in (PEP 814; not a dict subclass, hashable), UTF-8 as the default encoding (PEP 686).
Security-only 3.10-3.12 3.10 goes EOL 2026-10. 3.9 already EOL (2025-10-31).
Free-threading Official (PEP 779) in 3.14 No longer experimental. 3.13 was experimental. Build is still opt-in (python3.14t). Rewrite every GIL note around this.
JIT Experimental (copy-and-patch) Say “experimental”, not “coming”.
Subinterpreters PEP 734, stdlib interpreters in 3.14 New concurrency option alongside threads/async/processes.
t-strings PEP 750 in 3.14 Template strings. New topic — safe SQL/HTML interpolation angle.
Deferred annotations PEP 649 in 3.14 from __future__ import annotations story changed. Update typing notes.
compression.zstd PEP 784 in 3.14 Minor; mention in stdlib note.
EOL 3.9 EOL Oct 2025 Anything referencing 3.7/3.8/3.9 as “modern” is wrong.

Python tooling

Item Current Notes for notes
Package manager uv The 2026 default. Repo mentions it in 3 files — should be the primary answer in packaging/CI/Docker notes, with pip/Poetry as context.
Lint + format Ruff 800+ rules; replaces flake8 + black + isort + pyupgrade + bandit. Used by FastAPI, LangChain, HuggingFace.
Type checker mypy (established), ty (Astral, newer) mypy is still the safe interview answer; mention ty/pyright as the moving edge.
Config pyproject.toml only uv, Ruff, mypy, pytest, coverage, build all live there. setup.py/setup.cfg/.flake8/mypy.ini are legacy.
Base image python:3.14-slim Repo Docker notes should not pin 3.11.

Web / backend

Item Current Notes for notes
FastAPI 0.143.1, fastapi[standard]; runs on Starlette 1.8.0 Verified from the wheels 2026-10-14. Starlette’s TestClient uses httpx2 (plain httpx deprecated); BaseHTTPMiddleware streams, it does not buffer. Teardown after yield runs after the response by default since 0.118; Depends(..., scope="function") since 0.121. OpenAPI 3.1. Still the default Python API framework. Starlette passed 1.0, so “Starlette 0.x” is stale.
Pydantic v2 (2.14.1, 2026-10-11) Verified on PyPI 2026-10-15. v1 only as migration context. 5–50× faster validation.
PgBouncer 1.26.1 (2026-10-14) Verified 2026-10-15 on pgbouncer.org. Protocol-level prepared statements in transaction mode since 1.21; on by default since 1.24.0 (2025-01-10, max_prepared_statements = 200). Transaction mode still breaks session SET, session advisory locks, LISTEN/NOTIFY, WITH HOLD cursors, SQL PREPARE. Covered in backend/08_databases/sql/09_connection_pooling.md.
Synapse (Matrix) 1.163.0 (2026-10-14), Python 3.10+, AGPL, by Element Verified 2026-10-15 on PyPI. Native Simplified Sliding Sync (MSC4186) on by default since 1.114. Room version 12 (Matrix 1.16, Sept 2025): State Resolution v2.1 (CVE-2025-49090), room ID = create-event hash, creators with unlimited power. Workers share PostgreSQL and replicate over Redis. Covered in backend/12_protocols/matrix/01_matrix_and_synapse.md.
Sygnal (Matrix push gateway) 0.17.0 (2025-11-05), Python 3.10+, now element-hq/sygnal Verified 2026-10-15. FCM via api_version: v1 + service account; APNs via .p8 token auth or certificate. Push gateway contract: POST /_matrix/push/v1/notify, homeserver must delete pushers whose pushkeys come back in rejected. Covered in backend/12_protocols/matrix/02_sygnal_push_gateway.md.
coturn upgrade to 4.16.0+ Verified 2026-10-15 (advisory aggregators). denied-peer-ip bypasses: CVE-2026-27624 (IPv4-mapped, fixed 4.9.0), CVE-2026-53450 (loopback, 4.13.0), CVE-2026-73213 (IPv6 ranges, 4.16.0). Synapse’s guide: use-auth-secret, no-tcp-relay, deny private ranges, user-quota=12. Covered in backend/28_networking/19_stun_turn_and_coturn.md.
OpenResty 1.31.1.1 (2026-05-13) Verified 2026-10-15 on openresty.org; no current Windows build (last win32 zip is 1.9.15.1). Cosockets disabled in set/header_filter/body_filter/log and init phases. Covered in backend/12_protocols/nginx/15_openresty.md.
FCM / APNs FCM HTTP v1 only; firebase-admin 7.x Verified 2026-10-15. Legacy FCM APIs deprecated 2023-06-20, shutdown began 2024-07-22. firebase-admin 7.0.0 (July 2025) removed send_all/send_multicast (use send_each*). Android tokens inactive 270 days are expired by FCM. Covered in backend/12_protocols/push_notifications/01_fcm_and_apns.md.
Cloudflare proxy facts Verified 2026-10-15 in Cloudflare docs. Proxied HTTPS ports 443, 2053, 2083, 2087, 2096, 8443 (not 8448). Error 524 after 125 s (Enterprise up to 6,000 s). No HTML/JSON caching by default; Set-Cookie, private, no-store, no-cache, max-age=0 are not cached. Covered in backend/28_networking/20_cloudflare.md.
SQLAlchemy 2.1 (2.1.4, 2026-10-07), AsyncSession Verified on PyPI 2026-10-08. The 2.0-style select() API carries on unchanged in 2.1. Sync SQLAlchemy blocks the event loop — that’s the interview point.
Django 6.1 (6.1.2, 2026-10-06; 6.1.0 2026-08-05); 6.0 Dec 2025 5.2 is the LTS. Repo says 4.2 — stale.
DRF 3.18.x (3.18.3, 2026-10-06); 3.17 shipped 2026-03-18 Verified on PyPI 2026-10-08. 3.17 added Django 6.0 and Python 3.14 support and removed coreapi. Views are still synchronous - check the async story at edit time.
Celery 5.6.3 (2026-03-26); 5.7 in pre-release Verified 2026-10-06. Say “5.6” for current behaviour; do not describe 5.7 as released.
ASGI ASGI 3; uvicorn 0.54 (2026-09-25) Granian/uvicorn/hypercorn landscape. Verified on PyPI 2026-10-08: uvicorn supervises --workers itself, and --ws auto uses the websockets sans-I/O implementation.
websockets 17.2 (2026-10-03) Verified on PyPI 2026-10-08. The Python library behind uvicorn’s WebSocket support; ping_interval / ping_timeout default 20 s each.

Data stores

Item Current Notes for notes
PostgreSQL 18.6 (18 GA Sep 2025); 19 in beta (Beta 4 2026-09-24; still not GA on postgresql.org 2026-10-15) Verified 2026-10-06. PG18: async I/O, UUIDv7, virtual generated columns, OAuth auth, B-tree skip scan, EXPLAIN ANALYZE includes buffers by default. Say 19 is “due”, never “current”; six features (SQL/PGQ among them) were pulled from its beta.
Redis 8.x (8.10.2 tested 2026-10-14); license changed 2024, AGPLv3 added in 8.0 (May 2025) Redis 8.0 built in JSON, the Query Engine, TimeSeries, probabilistic types and Vector Sets. io-threads defaults to 1. The license split is itself an interview topic. Covered across backend/09_caching/redis/ (01 model, 04 persistence, 05 HA, 06 streams, 07 Python).
Valkey Linux Foundation fork of Redis 7.2; 8.x Multi-threaded I/O is the real technical divergence. Covered in backend/09_caching/valkey/01_valkey.md.
Kafka 4.x (4.0 Mar 2025; 4.3.1 Jun 2026) ZooKeeper fully removed — KRaft only. Repo says 2.4/2.8 — badly stale. Also: queues for Kafka (KIP-932 share groups: early access 4.0, production-ready in 4.2, March 2026, per-record ack; 4.2.1 fixed a share-group deadlock), faster rebalances (KIP-848, GA in 4.0). Verified 2026-10-15.
RabbitMQ 4.x Verified 2026-10-15. 4.0 (Sep 2024) removed classic queue mirroring (ha-mode policies now do nothing) and gave quorum queues a default delivery limit of 20; native AMQP 1.0. Streams (append-only, offset replay) since 3.9. Celery on Kafka is kombu’s experimental confluentkafka transport, one worker per Celery’s docs. Covered in backend/10_message_queues/00_broker_comparison.md.
MongoDB 9.0 (9.0.0 GA 2026-09-28; 9.0.2 tested) Verified 2026-10-13. Default write concern w: "majority" since 5.0. 9.0 caps open multi-document transactions at 10,000 and stores time-series collections as one namespace. Python: PyMongo 4.18 with the native AsyncMongoClient (4.13+); Motor deprecated May 2025, end-of-life 2026-05-14. Covered in backend/08_databases/nosql/mongodb/01_mongodb.md.
Elasticsearch 9.x AGPLv3 added as a licence option Aug 2024 — “Elasticsearch isn’t open source” is out of date.
OpenSearch 3.x; Apache 2.0 Verified 2026-08-18. Forked from ES 7.10 in 2021; donated to the Linux Foundation Sep 2024, so it is no longer “an AWS project”. elasticsearch-py 8+ refuses to talk to it (product-verification header) — use opensearch-py. Covered in backend/08_databases/nosql/elasticsearch/07_opensearch_and_the_fork.md.
Qdrant Rust engine, Apache 2.0 Verified 2026-08-18. Filterable HNSW (filters applied during traversal, not post-hoc), named dense+sparse vectors on one point, prefetch + RRF/DBSF fusion in a single query_points call, scalar/binary quantisation with always_ram. Covered in ai_ml/09_rag_embeddings/12_qdrant_in_production.md.
pgvector 0.8.6 Verified 2026-08-12. HNSW (m, ef_construction, query-time hnsw.ef_search) and IVFFlat (lists, ivfflat.probes). Operators <-> L2, <=> cosine, <#> inner product; the index opclass must match the operator or it is silently unused. Also halfvec, binary quantisation and sparsevec. Covered in ai_ml/09_rag_embeddings/10_pgvector_in_production.md.

Infra / platform

Item Current Notes for notes
n8n Community edition under the Sustainable Use License Verified 2026-08-18. Source-available, not OSI open source — same shape as Redis/Valkey and Terraform/OpenTofu. Queue mode (Redis + workers) is in the community edition; multi-main needs Enterprise. Use Postgres, never the default SQLite, and set the execution-data pruning variables or the disk fills. Covered in ai_ml/10_agents_orchestration/20_n8n_and_low_code_automation.md.
Kubernetes 1.3x (verify at edit time) Gateway API is GA and replaces Ingress for new work — 0 mentions in repo.
Docker Docker Desktop 4.94.0, Engine 29.8.2 Verified 2026-10-07 (installed release). Multi-stage + distroless; BuildKit is the default builder and buildx does multi-platform builds.
nginx mainline 1.31.6 (2026-09-15); stable 1.30.x Verified against nginx.org CHANGES 2026-10-08. 1.29.7 (2026-03-24) changed proxy defaults: upstream keepalive on, proxy_http_version 1.1, and the Connection header no longer sent. Notes that say you must set proxy_http_version 1.1 and clear Connection for upstream keepalive describe pre-1.29.7 nginx; WebSocket proxying still needs Upgrade/Connection set explicitly.
Terraform 1.x; BSL license since 2023 → OpenTofu fork License split is an interview talking point. 0 mentions.
Node.js 24 LTS (22 maintenance) Repo mixes node10/14/16 with 22/24.
OpenTelemetry GA for traces/metrics/logs Also OTel GenAI semantic conventions for LLM spans — near-zero coverage.

Frontend

Item Current Notes for notes
React 19.2.7 (Jun 2026) No React 20 announced. Repo mixes 15/16/17/18/19.
React Compiler 1.0 stable (2025-10-07) Default assumption for new projects. Auto-memoization means useMemo/useCallback advice in the repo is outdated guidance, not just an old version number.
Next.js 16 (2025-10-21): Cache Components (cacheComponents + "use cache"), Turbopack default, middleware.ts renamed proxy.ts, stable reactCompiler option Repo mentions 13 and 15.
TypeScript 5.x
Vue 3.5.41 stable; 3.6.0-rc.2 (2026-07-22) 3.6 = Vapor Mode feature-complete (opt-in, no VDOM, compiles SFCs to direct DOM ops) + @vue/reactivity rewritten on alien-signals. Still RC as of 2026-08 — do not write “3.6 shipped”. Vue 2 EOL since 2023-12-31.
Vue ecosystem Vue Router 5.2, Pinia 3/4, Pinia Colada 1.4, Nuxt 4.5 Nuxt 4.5 ships Vite 8 + Rspack 2; Nuxt 3 EOL during 2026. Radix Vue renamed Reka UI (2025).

AI / LLM

Item Current Notes for notes
Frontier models Claude Opus 5.5, Sonnet 5.5, Haiku 5.5, Fable 5.1 (Mythos 5.1 limited); OpenAI gpt-6-astra, gpt-6.1-sol, gpt-6-luna (the 5.6 family ships only with suffixes such as gpt-5.6-sol, so a bare gpt-5.6 is not a valid id); Gemini 3 / 3.1 Pro; Grok 4 (Claude and OpenAI rows checked 2026-10-14 against their docs and pricing pages) Repo says GPT-4 (33×), GPT-4o (14×), Llama-2, claude-sonnet-4-5. All stale.
Model strategy Routing across models by task complexity 2026 production norm — cheap model for simple, frontier for hard. This is now a design-interview answer, not a footnote.
OpenAI API surface Responses API (Mar 2025) plus the Conversations API (Aug 2025); Chat Completions still supported; Assistants API shut down 2026-08-26 Verified 2026-10-06. Any note teaching threads/runs/assistants endpoints is describing a dead API - rewrite it around Responses.
MCP spec 2026-07-28 Landmark revision: stateless protocol core, session management removed from transport, multi-round-trip requests, header-based routing, cacheable list results, authz hardening, extensions framework. Tasks moved to an extension. Repo’s MCP note predates all of this.
LangChain / LangGraph LangChain 1.4.5, LangGraph 1.2.15 (both 2026-10-12); langgraph-checkpoint-postgres 3.1.3; both 1.0 GA Oct 2025. There is no LangGraph 1.3 (the old row’s “1.3.11” was LangChain’s version) Verified on PyPI 2026-10-14. LangGraph’s default recursion limit is 10,007 (25 until 1.0.5) and create_agent pins 9,999; durability defaults to async. LangGraph Platform is now LangSmith Deployment. Requires Python 3.10+. Splitters moved to langchain-text-splitters, integrations to their own packages (langchain-openai, langchain-neo4j). Any from langchain.llms/embeddings/text_splitter import is pre-1.0.
Pydantic AI 2.56.0 (2026-10-13); 1.0 GA Sep 2025; durable execution via Temporal/DBOS/Prefect/Restate/Lambda Verified on PyPI 2026-10-15. API is Agent(model, instructions=, deps_type=, output_type=), tools via @agent.tool with RunContext, result on result.output. Pre-1.0 result_type= / result.data are gone. Requires Python 3.10+.
Agent frameworks Microsoft Agent Framework 1.0 (GA Apr 2026) — AutoGen + Semantic Kernel merged, both now maintenance-only; CrewAI 1.15.15 (2026-08-12, Python 3.10-3.13); OpenAI Agents SDK 0.23.1 (2026-10-02, PyPI checked 2026-10-14; max_turns defaults to 10, tracing exports to OpenAI by default); Google ADK 2.6.3 (2026-08-07); AWS Strands Python 1.42.0 Verified 2026-08-12. Naming AutoGen or Semantic Kernel as separate live projects dates you by a year. Covered in 10_agents_orchestration/18_multi_agent_frameworks.md.
Eval / observability Langfuse 5.0.1 (2026-10-14, MIT, self-hostable, OTel-based SDK, get_client() + @observe); DeepEval 4.2.8 (2026-10-02); Ragas 0.4.3 (2026-01-13); LangSmith, Phoenix, Braintrust, promptfoo Verified 2026-08-12. Covered in 13_evaluation/05_eval_tooling.md. RAGAS’s four metrics split retrieval (context precision/recall) from generation (faithfulness/answer relevancy).
LLM tracing platforms Langfuse (MIT, self-hostable; acquired by ClickHouse 2026-01-16, MIT + self-hosting committed to); LangSmith (LangChain first-party, self-host is Enterprise-only, per-trace pricing); Logfire (Pydantic, OTel-first, SQL over spans) Verified 2026-08-18. All three ingest OpenTelemetry, so instrument with OTel and treat the backend as swappable. Covered in ai_ml/15_mlops_llmops/06_tracing_platforms.md.
Claude Agent SDK claude-agent-sdk / @anthropic-ai/claude-agent-sdk Claude Code packaged as a library — built-in Read/Write/Edit/Bash/Glob/Grep/WebSearch/WebFetch, subagents, skills, hooks. Harness only; you deploy it. Distinct from the API Tool Runner (your tools, no built-ins) and Managed Agents (Anthropic hosts the loop and sandbox).
Serving vLLM 0.31.0 (2026-10-05), TGI; speculative decoding, continuous batching Verified 2026-08-12. Covered in 08_inference_serving/02_batching_and_serving_engines.md — continuous batching, PagedAttention, prefix caching, chunked prefill.
Transformers 5.19.0 (2026-10-06) Verified 2026-08-12. HuggingFace’s model-definition framework.
Embedding models text-embedding-3-small / -large still current — no OpenAI successor as of 2026-08; 1536 / 3072 dims, Matryoshka truncation supported. Cohere Embed and Voyage have shipped newer generations Verified 2026-08-14. ada-002 is the deprecated one. Changing the model means re-embedding the whole corpus — see ai_ml/09_rag_embeddings/02_what_are_embeddings.md.
Classical ML scikit-learn 1.9.1 (2026-09-10, needs Python 3.11+), XGBoost 3.4.1 (2026-08-15), LightGBM/CatBoost Verified 2026-08-12. sklearn is the default answer for structured data; gradient boosting beats deep learning on tabular.
Deep learning PyTorch 2.14.1 (2026-09-30), TensorFlow, JAX Verified 2026-08-12. PyTorch ships wheels for Python 3.10-3.14 including free-threaded 3.14t, which is a good free-threading talking point.
Tuning Optuna 5.0.0 (2026-09-07, a major release: check API changes before quoting 4.x code); AutoGluon, PyCaret, FLAML Verified 2026-08-12; AutoML coverage added 2026-08-21. Both in 01_ml_foundations/07_hyperparameter_tuning.md - the row previously claimed AutoML was covered there and it was not. Optuna is the default tuning answer (TPE sampler, pruning). AutoML is a baseline, not a final answer: it searches the model class too, and is silent on label definition, split and leakage.
MLOps MLflow 3.17.1 (2026-10-13) — safest first answer; now also prompt logging, eval and tracing for GenAI Verified 2026-08-12.

Compliance / security

Item Current Notes for notes
EU AI Act phased obligations in force 0 mentions. Relevant to any AI-facing role.
Passkeys / WebAuthn mainstream 2 mentions.
OAuth 2.1 still an Internet-Draft (draft-ietf-oauth-v2-1-16, 2026-09-03; IESG submission milestone Dec 2026), not an RFC Verified 2026-10-11. Say “the OAuth 2.1 draft”. The normative guidance today is RFC 9700, the OAuth 2.0 Security BCP (Jan 2025): PKCE MUST for public clients and RECOMMENDED for confidential ones, password grant MUST NOT, implicit SHOULD NOT, public-client refresh tokens rotated or sender-constrained. Browser apps: RFC 10017 (BCP 212, Aug 2026) - BFF, token-mediating backend, browser-based client.
PyJWT 2.15.1 (2026-09-28) Verified 2026-10-11 on PyPI and its changelog. 2.0 (2020-12-22) made algorithms= mandatory; 2.10 (2024-11-17) validates sub and jti as strings; 2.13 (2026-05-21) closed an algorithm-confusion gap and keeps the cached JWK set when a fetch fails; 2.14 (2026-09-11) hardened HMAC keys against public-key material, throttles unknown-kid refetches and rejects JWKS redirects. python-jose fixed CVE-2024-33663/33664 only in 3.4.0 (2025); FastAPI’s docs use PyJWT.
SBOM / SLSA standard supply-chain asks thin.
Prompt injection OWASP LLM Top 10 #1; lethal trifecta framing (Willison, 2025); CaMeL dual-LLM design (Google DeepMind, 2025) Verified 2026-08. Covered as an Article in ai_ml/14_guardrails_safety/01_prompt_injection.md. No defence makes an agent holding all three trifecta legs safe against an adaptive attacker — say so rather than listing mitigations.

Data engineering

Verified 2026-08-10.

Item Current Notes for notes
Apache Airflow 3.3.2 (2026-09-17) Airflow 3 rearchitected execution with task isolation, new UI, DAG versioning. Do not describe Airflow as 2.x.
dbt dbt Core v2.0 open-sources the Rust Fusion engine (Apache 2.0) State-aware runs skip unchanged models. Big parse-time speedup.
dbt Labs / Fivetran Merger completed 2026-06-01 (all-stock) Fivetran also acquired Census (2025) and Tobiko Data / SQLMesh. Consolidation is the 2025-26 story.
Apache Iceberg v3 GA across major platforms, H1 2026 The interoperable lakehouse table format; Polars can now sink to Iceberg.
Polars 1.42 (2026-07-02) Optimizer improvements in 1.40-1.42 speed queries with no code change.
Data mesh widely partial adoption Data contracts and domain ownership transferred to mainstream; full mesh purity did not. Say that rather than advocating.

Domain: quant / fintech

Verified 2026-08-10.

Item Current Notes for notes
vectorbt actively developed; OSS core + commercial PRO The vectorized screening tool.
Backtrader effectively unmaintained Fine to maintain an existing codebase, wrong choice for a new one. Naming it unqualified dates you.
QuantConnect / LEAN actively developed C# engine, Python API, managed multi-asset point-in-time data, one path to live.
NautilusTrader actively developed Rust core, Python API; the high-fidelity event-driven option.
Zipline original is dead; zipline-reloaded is the maintained fork

Domain: healthcare / regulated

Verified 2026-08-10.

Item Current Notes for notes
FHIR R4 normative and what 95%+ of certified EHRs implement; R5 published with limited adoption; R6 in ballot (v6.0.0-ballot4, May 2026), expected 2026-2027 Build against R4 and say so. Claiming R5/R6 in production is a tell. US Core is being built on R6 next.
HL7 v2 still the hospital interface workhorse MLLP over TCP, ACK/NAK, Z-segments. Not going away.
OMOP CDM the analytics model (OHDSI) Distinct from FHIR: exchange format vs analytics model.
CDISC SDTM/ADaM FDA submission standard Active work on SDTM-to-OMOP conversion.
FDA validation CSA (Computer Software Assurance) is the current risk-based guidance Supersedes the binder-heavy CSV interpretation; accepts automated test evidence.
EU AI Act Art. 50 transparency + GPAI enforcement + penalties in force 2026-08-02; high-risk delayed to Dec 2027 / Aug 2028

AI-assisted development

Verified 2026-08-10.

Item Current Notes for notes
Agentic IDEs Kiro (AWS, spec-driven), Antigravity (Google, agent-first), Codex (OpenAI), Claude Code, Cursor, Windsurf, Copilot, Cline The axis that matters is how much structure the tool imposes, not the vendor.
AI-DLC AWS open-source methodology: Inception / Construction / Operations, in “bolts” (hours-days) replacing sprints Human validation at each step is the load-bearing principle.

How to use this file

  1. Before editing any note, check the technologies it names against this table.
  2. If a claim here is older than ~3 months, re-verify with a web search and update this file in the same commit.
  3. Date every claim that will rot: “As of 2026-08, …”.
  4. When this file changes, the notes that cite the changed row get flagged in PLAN.md.

Sources