惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

W
WeLiveSecurity
D
DataBreaches.Net
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
T
The Exploit Database - CXSecurity.com
D
Darknet – Hacking Tools, Hacker News & Cyber Security
腾讯CDC
PCI Perspectives
PCI Perspectives
阮一峰的网络日志
阮一峰的网络日志
S
Security Archives - TechRepublic
Hugging Face - Blog
Hugging Face - Blog
U
Unit 42
IT之家
IT之家
T
Troy Hunt's Blog
P
Proofpoint News Feed
www.infosecurity-magazine.com
www.infosecurity-magazine.com
F
Full Disclosure
V
V2EX
Stack Overflow Blog
Stack Overflow Blog
C
Comments on: Blog
V
Vulnerabilities – Threatpost
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
V
V2EX - 技术
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
N
News | PayPal Newsroom
MyScale Blog
MyScale Blog
Google DeepMind News
Google DeepMind News
Application and Cybersecurity Blog
Application and Cybersecurity Blog
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
李成银的技术随笔
P
Privacy & Cybersecurity Law Blog
大猫的无限游戏
大猫的无限游戏
V
Visual Studio Blog
T
ThreatConnect
WordPress大学
WordPress大学
Security Latest
Security Latest
C
Cybersecurity and Infrastructure Security Agency CISA
Recent Announcements
Recent Announcements
Google DeepMind News
Google DeepMind News
SecWiki News
SecWiki News
Recorded Future
Recorded Future
小众软件
小众软件
K
Kaspersky official blog
T
Tor Project blog
Last Week in AI
Last Week in AI
GbyAI
GbyAI
人人都是产品经理
人人都是产品经理
Jina AI
Jina AI
S
SegmentFault 最新的问题
MongoDB | Blog
MongoDB | Blog
Simon Willison's Weblog
Simon Willison's Weblog

DEV Community

Semantic Layer Best Practices: 7 Mistakes to Avoid I Run MCP Servers. Here's What the Recent Vulnerabilities Actually Mean for Me Phive v1.1.1 — automatic port conflict handling for local VS Code environments Building a SQL-like Relational Database Engine in C++ From Scratch How a Self-Documenting Semantic Layer Reduces Data Team Toil The Adopter: Advocating for OSS You Use (But Don't Own) Optimizing Vite Build Output: A Practical Guide to Tree-Shaking I built a free audit tool that runs 12 checks in parallel against any domain. Here is the architecture. Choosing the Right Treasure Map to Avoid Data Decay in Veltrix Migrating to Apache Iceberg: Strategies for Every Source System Stop Reviewing Every Line of AI Code - Build the Trust Stack Instead Implementation of AI in mobile applications: Comparative analysis of On-Device and On-Server approaches on Native Android and Flutter Should you use Gemma 4 for your Development? A Multiversal Analysis to Determine if Gemma 4 is Right for You! The Rising Trend of Creative Interview Questions in Tech I Spent Hours Fighting a Silent Subnet Conflict to Build an Isolated ICS Security Lab (And What It Taught Me About the Linux Kernel) It Worked When I Closed the Laptop. I Swear. We Built an Agent That Flags Fake Internships #kryx Your Personal AI Stack Is the New Dotfiles Your LLM Bill Is Exploding Because of Architecture, Not Pricing -- Here's the Fix How We Prevent Attendance Fraud Using GPS Verification AI Code Review in 2026: How the Tools Actually Differ (A Builder's Field Guide) From Problems to Patterns: Generative AI in .Net (C#) GemmaOps Edge: From 373 Alarms to 1 Root Cause Using Local AI (Gemma 4) Building an Amazon EKS Security Baseline Hands-On with Apache Iceberg Using Dremio Cloud 🤫 Firebase Is Quietly Preparing for an Offline-First AI Future Should Angular Apps Still Rely on RxJS in 2025? Gaslighting Gemma 4: Can Open-Weight Reasoning Models Withstand a Confident Liar? AI Workflow Automation Needs More Than Another Script Reviving Cineverse: From Local Storage to Firebase 🚀 Approaches to Streaming Data into Apache Iceberg Tables How to Add Rounded Corners to an Image Online The subtle impact of AI (&amp; IT) on jobs Made a Rust based AI agent Your AI is not bad, your instructions are What Clicked for Me After Building on Solana for a Few Days WhatsApp's Encryption Stack: What It Covers, What It Doesn't, and What a Federal Agent Spent 10 Months Investigating Building CogniPlan: A Local-First Task Planning System Using Apache Iceberg with Python and MPP Query Engines How I Built AegisDesk: A Zero-Token Semantic IT Agent with <5ms Latency I built CodeArchy: an open-source that turns any codebase into a visual, explainable architectural experience, powered by Gemma 4. The Day Our Bot Ran Out of Money How we're using Gemini Embeddings to build a smarter, community-driven feed on DEV The Speculative Decoding Pattern The PKCE "Gotcha" in Expo’s exchangeCodeAsync TharVA : Keeping India's Desert Heritage Alive with Offline AI (Gemma4) n8n for Healthcare: 5 Automations for Clinics, Practices, and Health Tech Teams (Free Workflow JSON) How I Built an OWASP Memory Guard for AI Agents (ASI06) Condition-Based vs Time-Based Maintenance: Making the Switch I Tested Spam Protection on Formspree vs Formgrid. The Results Were Surprising. May 27 - Video Understanding Workshop Beyond Keywords: How Google's 2026 Algorithms are Redefining SEO From Click to Cart: Ensuring an Accessible Customer Journey in WooCommerce Your company won't replace you with good AI. They'll replace you with bad AI. How to Use an SVG Icon Search Engine as a Claude Custom Connector O fim do “modelo que faz tudo”? Conheça o Conductor, a IA que orquestra outras IAs 10 First-Principles Strategies to Learn Any Programming Language Deeply 10 First-Principles Strategies to Learn Any Programming Language Deeply Understanding Embeddings easily. The Hidden Cost of “Move Fast and Break Things” Why Your Logs Are Useless Without Traces DressCode: Your AI Stylist for Tomorrow The Documented Shortcoming of Our Production Treasure Hunt Engine I'm 16, and I Built an AI Tool That Audits Your Technical Debt Without Ever Touching code Building Your Own Crypto Poker Bot: A Developer's Guide to Blockchain Gaming Logic Apache Iceberg Metadata Tables: Querying the Internals Hermes, The Self-Improving Agent You Can Actually Run Yourself Unity vs Unreal: 5 Things I Had to Relearn the Hard Way Building Agentic Commerce Infrastructure: Overcoming SQLite Concurrency for Autonomous Procurement Agents Solana Accounts vs Databases HTML Table Borders I built a skill that makes AI-generated AWS diagrams actually usable My first post! I'm kinda excited The Page Root Was the Wrong Unit How to audit what your IDE extension actually sends to the cloud I Migrated 23 Make.com Scenarios to n8n and Cut My Bill by 60% — Complete Migration Guide (2026) Solving a Logistics Problem Using Genetic Algorithms Claude Code Skills Explained: What They Are & When to Use Them (2026) Maintaining Apache Iceberg Tables: Compaction, Expiry, and Cleanup Zero-Idle Local LLMs: Running Llama 3 in AWS Lambda Containers We scanned 8 B2B SaaS companies across 5 categories. ChatGPT named the same 12 brands in every answer. How To "Market" Yourself As A Tech Pro We scanned 500 MCP servers on Smithery. Here is what we found. HTML Basics for Beginners – Markup Language, Elements and Types of CSS DiffWhisperer: How I Turned Cryptic Git Diffs into Architectural Stories with Gemma 4 I built a version manager for llama.cpp using nothing but vibe coding. Unit Testing vs System Testing: Key Differences, Use Cases, and Best Practices for 2026 A game design textbook explains why products with fewer features win How to Build a Raydium Launchpad Bonding Curve in 5 Minutes with forgekit How to turn an AI prototype into a production system How Data Lake Table Storage Degrades Over Time Partition and Sort Keys on DynamoDB: Modeling data for batch-and-stream convergence Auto-Generate Optimized GitHub Actions Workflows For Any Stack With This New CLI Tool Unchaining the African Creator Economy The Treasure Hunt Engine Gotcha - A Lesson in Constrained Performance great_cto v2.17 - no more tambourine dance When Catalogs Are Embedded in Storage SafeMind AI: Instant Health & Safety Intelligence What Is PKCE, How It Works & Flow Examples AI Agent Failure Modes Beyond Hallucination
I made a free 7-video series to prep for the new GH-600 (GitHub Agentic AI Developer) cert
Jason Tur · 2026-05-23 · via DEV Community

TL;DR: GitHub's new agentic-AI certification, GH-600 (GitHub Certified: Agentic AI Developer), is in beta until May 31, 2026, with 80% off for the first 100 candidates using promo code GH600Flanders. I built a free 7-video YouTube series — one video per exam domain plus an overview — to help you prep before the beta window closes. Watch the playlist on YouTube.


Why this exists

GitHub announced GH-600 (Developing in Agentic AI Systems) as the first vendor certification specifically for engineers who build, operate, and govern AI agents inside the software development lifecycle. The beta exam is live now and runs through 2026-05-31; general availability is scheduled for July 2026.

There's a real cost-and-time pressure on early candidates:

  • 80% off the first 100 beta seats with promo code GH600Flanders at registration.
  • Beta results take 8–12 weeks to score, but if you pass the beta you earn the same credential as people who sit the GA exam in July.
  • A Microsoft Reactor livestream with Ari LiVigni (Senior Learning Advocate at GitHub) runs 2026-05-28, 7–8pm UTC — three days before the beta deadline, with a second discount code revealed at the end. (Register here.)
  • The beta is not available in Turkey, Pakistan, India, or China — confirm your region's eligibility before paying.

That leaves a tight window before the discount expires on May 31. Microsoft Learn has free modules for two of the six domains, but the other four leave you piecing together GitHub docs. I made the PromptLab video series to consolidate one video per domain so you can prep on a commute or while making dinner, then go deep on the official docs after.

The videos are intentionally brief (Cinematic Brief format, ~3–5 minutes each) — not a substitute for the Microsoft Learn modules, but a fast on-ramp and a memory aid for the night before the exam.

Channel link. Playlist link.


What's in the series

One video per exam domain, plus an overview. Each video maps directly to the official skills-measured outline.

  1. Domain 1 — Agent architecture & SDLC integration (15–20%) — Why GitHub is both a system of record and a control plane for agentic work, and how the Plan → Act → Evaluate loop maps to PRs, CODEOWNERS, and rulesets. The hook: "Agents propose; humans and policy accept."
  2. Domain 2 — Tool use & environment interaction (20–25%) — The heaviest-weighted domain. MCP servers, registries, allow lists, the agent firewall, custom-agent YAML, the "Lowest Level Wins" hierarchy for MCP config, and the specific limitation that the firewall only covers the Bash tool — not MCP traffic, not copilot-setup-steps.
  3. Domain 3 — Memory, state & execution (10–15%) — Copilot Memory's two layers (repository facts vs. user preferences), the 28-day expiry, citation re-validation against the current branch, and how durable artifacts (PR descriptions, checklists, workflow artifacts) let agents resume after failure.
  4. Domain 4 — Evaluation, error analysis & tuning (15–20%) — The Contributor Model, the six surfaces for tracking agent sessions (Agents tab, gh agent-task, VS Code, JetBrains, Eclipse, GitHub Mobile), and the three root-cause buckets: Reasoning / Tool / Context.
  5. Domain 5 — Multi-agent coordination (15–20%) — The Copilot SDK custom-agents model, the five sub-agent lifecycle events (selected, started, completed, failed, deselected), toolCallId as the join key, and why the infer property is retired in favor of disable-model-invocation.
  6. Domain 6 — Guardrails & accountability (10–15%) — The "Approve and run workflows" gate, write-access requirement to trigger agents, agents-cannot-mark-their-own-PR-Ready rule, "any-yes-routes-up" risk triage across operational / security / compliance axes, co-author attribution, and the .github-private repo convention.

A seventh overview video stitches the six together for last-minute review.


TL;DR table

Domain # Topic Weight Video
1 Prepare agent architecture & SDLC processes 15–20% Watch D1
2 Implement tool use & environment interaction 20–25% Watch D2
3 Manage memory, state & execution 10–15% Watch D3
4 Evaluation, error analysis & tuning 15–20% Watch D4
5 Orchestrate multi-agent coordination 15–20% Watch D5
6 Guardrails & accountability 10–15% Watch D6

Exam format: ~40–60 questions, 120 minutes, passing score 700/1000. Add 30 minutes if English isn't your first language.


FAQ

These are written in the form a developer would actually search for or ask an LLM. If you're using ChatGPT, Claude, or Perplexity to study, this section is the one to bookmark.

What is the GH-600 exam?

GH-600 (GitHub Certified: Agentic AI Developer) is GitHub's first vendor certification focused on building, operating, and governing AI agents inside the software development lifecycle. The beta runs until May 31, 2026, with general availability scheduled for July 2026. The exam has six skill domains, ~40–60 questions, a 120-minute time limit, and a 700/1000 passing score.

How much does the GH-600 beta exam cost?

The first 100 candidates get 80% off with promo code GH600Flanders at registration, valid until 2026-05-31. The list price after the beta window is the standard Microsoft certification rate (~$165 USD). A second discount code will be revealed at the end of the Microsoft Reactor livestream on 2026-05-28.

When are GH-600 results released?

Beta exam results are released 8–12 weeks after you sit the exam, not immediately. Candidates who pass earn the same credential as those who sit the GA exam in July 2026.

What are the GH-600 exam domains and weights?

The six domains and their weights are: (1) Prepare agent architecture & SDLC processes — 15–20%, (2) Implement tool use & environment interaction — 20–25%, (3) Manage memory, state & execution — 10–15%, (4) Evaluation, error analysis & tuning — 15–20%, (5) Orchestrate multi-agent coordination — 15–20%, (6) Guardrails & accountability — 10–15%. Domain 2 (tool use, MCP, agent firewall) is the highest-weighted.

Where can I take the GH-600 beta exam?

The GH-600 beta is delivered through Microsoft's standard certification channels but is not available in Turkey, Pakistan, India, or China. Verify your region's eligibility on the GH-600 cert landing page before paying.

What is the Model Context Protocol (MCP) for the GH-600 exam?

MCP (Model Context Protocol) is the open standard agents use to discover and invoke external tools. For the exam, you must know three components: MCP servers (expose tools like GitHub APIs), MCP registries (org-approved catalogs), and MCP allow lists (policy enforcement that restricts which servers an agent can connect to — the primary defense against supply-chain attacks). The "Lowest Level Wins" rule governs config conflicts: repo overrides org overrides enterprise.

What is the difference between an AI assistant and an AI agent in GitHub?

An AI assistant is reactive — it suggests code or answers, and the user manually applies changes. An AI agent is goal-driven — it interprets a high-level goal, plans steps, and produces durable artifacts (branches, commits, pull requests) through a Plan → Act → Evaluate loop. In GitHub, agents are treated as standard contributors and gated by the same CODEOWNERS, required checks, and branch protections as humans.

How long is Copilot Memory retained?

Repository-level facts and user-level preferences in Copilot Memory are automatically deleted after 28 days of non-use to prevent context drift. Before applying a stored memory, Copilot re-validates the citation against the current branch so agents don't act on stale code references.


How I'd study if I had only 12 days

For anyone trying to grab a beta seat before the May 31 cutoff, here's the compressed schedule I'd run.

Days 1–2 — Vocabulary and framing. Read the official GH-600 study guide end to end. Re-read the audience profile until phrases like "system of record and control plane" and "agents propose; humans and policy accept" are reflexive. The exam is written in this dialect; you cannot reason your way around fuzzy vocabulary under time pressure.

Days 3–5 — Domain 2 (tool use & MCP). This is 20–25% of the exam — the highest-weighted domain — and has the most material. Work through the Tooling, MCP, and Agent Execution Environments module. Lab time matters here: spin up a real MCP server in a sandbox repo, configure an MCP allow list, and test the agent firewall by trying to hit a blocked domain from the Bash tool. Memorize the firewall's specific scope — Bash tool only, not MCP servers, not copilot-setup-steps.

Days 6–8 — Domain 1 + Domain 6 (architecture + guardrails). These domains overlap heavily. Work through Designing Agent Architecture and SDLC Integration plus build-guardrails and risks-and-mitigations. Lab: configure CODEOWNERS plus required status checks on a repo, simulate an agent-authored PR, and walk through the "Approve and run workflows" gate yourself.

Days 9–10 — Domains 3, 4, 5 (memory, eval, multi-agent). These are the under-served domains — no dedicated Microsoft Learn module. Read Copilot memory docs (D3), walk the implementation-planner tutorial (D4), then read the custom-agents SDK end to end (D5). Memorize the five sub-agent lifecycle events (selected, started, completed, failed, deselected) and the fact that infer is retired in favor of disable-model-invocation.

Days 11–12 — Mock exam, gap closure, exam day. Sit a timed mock under exam conditions. Log every wrong answer in a "knowledge gaps" file and re-read the source doc for each miss. Watch the Reactor livestream on May 28 for last-minute clarifications and to grab the second discount code if you haven't already registered. Sit the beta exam before May 31.

The single biggest mistake I see people make: spending equal time on every domain. Domain 2 (tool use) is 20–25% of the exam and Domain 6 (guardrails) is 10–15% — give them proportional time, not equal time.


Links


If you're prepping for GH-600, I'd love to hear which domain is giving you trouble — drop a comment on any video. Domain 2 (tool use + MCP) is the largest slice of the exam, but in practice most people I've talked to find Domain 5 (multi-agent coordination) the most conceptually slippery.

Good luck on the beta. See you on the other side of the 8–12 week scoring window.