Urgent.News

What's breaking now, across thousands of outlets.

Tech

Stop Letting Coding Agents Guess Call Chains: Tracing Blast Radius and Temporal Memory in FalkorDB

When you change a helper function in a backend service, ask an LLM coding assistant, it will likely do one of two things: retrieve the function name from a vector database, or extract a few top-k chunks from a vector database and guess. This is okay if the function is called directly from the test. It fails when your call chain is two or three hops long, or when an agent fails to find a solution…

When coding agents suggest changes to functions in a backend service, they often rely on one of two methods: retrieving the function name from a vector database, or extracting a few top-k chunks and making an educated guess. While this approach works for direct function calls within tests, it breaks down when call chains become longer, or when an agent fails to find a solution initially but saves the failed fact for later.

To address these issues, the GraphTriage system (github.com/Nimit15/GraphTriage) was created: an incident resolution and session memory system powered by FalkorDB Cloud for WeMakeDevs × FalkorDB Graph Hacks 2026.

GraphTriage does not serve as a visualization tool for the graph database; instead, it poses four specific questions using FalkorDB before an agent takes action. The system asks: does the function or test exist in the graph? If not, it immediately refuses to speculate rather than guessing. Next, it determines the exact call chain between the failed test and the broken function.

Then, it identifies downstream functions and tests contained within the blast radius of a change. Lastly, it checks if a similar fault signature has been observed before and if the prior finding is still active or has been superseded by a newer commit.

FalkorDB comprises both repository data and a three-tier temporal memory for three different workspace levels. Each workspace is separated at the database level using db.select_graph(f graphtriage_ws_{workspace_id} ) to prevent memory leakage across tenants. Nodes and relationships include modules, functions with module paths and line metadata, tests exercising those functions, and episodic incidents containing raw incident data such as stack traces and failing test names.

The system's design ensures that agents avoid generating raw Cypher queries at runtime, which could lead to syntax errors and hallucinated edge labels. Instead, agents interact with FalkorDB using parameterized methods in src/core/incident_resolver.py and a fixed toolkit available through the Model Context Protocol (MCP) SDK. The four-step process includes refusing to speculate on unknown entities, tracing real bugs in sandbox_service, and handling multi-agent handoffs and replacing old information.

By utilizing GraphTriage, developers can significantly improve incident resolution and memory management, ensuring that coding agents only act on verified information within the graph database.

Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at dev.to →

More in Tech

Cómo evadir bloqueos de IA en webs sin dañar tu SEO

Bloqueo de agentes de IA en sitios web: causas, riesgos y cómo sortearlo sin romper el SEO Introducción ¿Te ha pasado que tu script de scraping o tu herramienta de generación de contenidos se topa con…

  • AI agents blocked by websites for copyright, scraping prevention, and regulations
  • Signs of blocking include 403 Forbidden and 429 Too Many Requests responses
  • Legal bypass methods: use official APIs, headless browsers, IP rotation, and proper User-Agent

VMSA-2026-0007: two escapes from a VMware guest, and no configuration that stops them

VMSA-2026-0007: two escapes from a VMware guest, and no configuration that stops them On 3 September 2026 Broadcom published VMSA-2026-0007, an advisory covering two memory-safety defects in VMware…

  • Two critical memory-safety flaws disclosed in VMware Workstation and Fusion.
  • CVE-2026-59346: VMXNET3 integer overflow flaw allowing code execution from guest to host.
  • CVE-2026-59347: Stack buffer overflow in HGFS shared folder file system granting host privileges.

More from Sunday 18 October →