正在加载视频...

视频加载失败

We open-sourced iron-proxy yesterday: a default-deny egress proxy for untrusted workloads. CI is a natural place for this. GitHub Actions runners have unrestricted outbound network access by default. Every dependency, every post-install script, every agent tool call can reach any endpoint on the internet. iron-proxy sits between the runner...

19,276 次观看 • 5 个月前 •via X (Twitter)

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

Introducing the Agent Virtual Machine (AVM) Think V8 for agents. AI agents are currently running on your computer with no unified security, no resource limits, and no visibility into what data they're sending out. Every agent framework builds its own security model, its own sandboxing, its own permission system. You configure each one separately. You audit each one separately. You hope you didn't miss anything in any of them. The AVM changes this. It's a single runtime daemon (avmd) that sits between every agent framework and your operating system. Install it once, configure one policy file, and every agent on your machine runs inside it - regardless of which framework built it. The AVM enforces security (91-pattern injection scanner, tool/file/network ACLs, approval prompts), protects your privacy (classifies every outbound byte for PII, credentials, and financial data - blocks or alerts in real-time), and governs resources (you say "50% CPU, 4GB RAM" and the AVM fair-shares it across all agents, halting any that exceed their budget). One config. One audit command. One kill switch. The architectural model is V8 for agents. Chrome, Node.js, and Deno are different products but they share V8 as their execution engine. Agent frameworks bring the UX. The AVM brings the trust. Where needed, AVM can also generate zero-knowledge proofs of agent execution via 25 purpose-built opcodes and 6 proof systems, providing the foundational pillar for the agent-to-agent economy. AVM v0.1.0 - Changelog - Security gate: 5-layer injection scanner with 91 compiled regex patterns. Every input and output scanned. Fail-closed - nothing passes without clearing the gate. - Privacy layer: Classifies all outbound data for PII, credentials, and financial info (27 detection patterns + Luhn validation). Block, ask, warn, or allow per category. Tamper-evident hash-chained log of every egress event. - Resource governor: User sets system-wide caps (CPU/memory/disk/network). AVM fair-shares across all agents. Gas budget per agent - when gas runs out, execution halts. No agent starves your machine. - Sandbox execution: Real code execution in isolated process sandboxes (rlimits, env sanitization) or Docker containers (--cap-drop ALL, --network none, --read-only). AVM auto-selects the tier - agents never choose their own sandbox. - Approval flow: Dangerous operations (file writes, shell commands, network requests) trigger interactive approval prompts. 5-minute timeout auto-denies. Every decision logged. - CLI dashboard: hyperspace-avm top shows all running agents, resource usage, gas budgets, security events, and privacy stats in one live-updating screen. - Node.js SDK: Zero-dependency hyperspace/avm package. AVM.tryConnect() for graceful fallback - if avmd isn't running, the agent framework uses its own execution path. OpenClaw adapter example included. - One config for all agents: ~/.hyperspace/avm-policy.json governs every agent framework on your machine. One file. One audit. One kill switch.

Varun

142,992 次观看 • 6 个月前

EVERYONE'S TRYING TO SOLVE AI TEAM MEMORY WITH SERVERS, VECTOR DATABASES, AND ORCHESTRATION PLATFORMS. THIS OPEN SOURCE TOOL DOES IT WITH ONE FOLDER IN YOUR REPO. Every dev on your team runs Claude Code. When one agent screws something up, the rest have no idea. They just repeat the mistake next week. It's called teamlore. When your agent gets corrected or breaks something, it writes a small lore file into a .lore/ folder. That file ships with your PR, gets reviewed like normal code, and after merge every teammate's agent automatically recalls it when they touch that part of the repo. No server. No datab No accounts. No SaaS bill. Just a folder in git. Which means code review catches bad lessons before they poison the team, git blame tells you when a rule was added and why, and the whole thing works offline. One command to install: npx teamlore init Companion command: npx teamlore scarmap. Turns your team's history of mistakes into a visual heat map of the codebase. Every red zone is a place your team has been burned before. Which means every red zone is a place your agents should slow down. Here's the wildest part. The teamlore repo's own .lore/ folder contains every mistake Claude made while building teamlore itself. Dogfooded end-to-end. You can literally open the folder and read the receipts. The author's public invitation: "Would love for someone to try and break it." Available on npm. Repo just launched. 100% open source. (link in the comments)

Harman

35,140 次观看 • 1 个月前

Karpathy's Agentic Engineering finally has proper tooling! (built by Google) Karpathy defined agentic engineering as the discipline that separates production agent work from vibe coding. The core skills he listed were spec design, eval loops, and security oversight. The problem has been that practicing this still requires a different tool for every phase: - editor for code - a terminal for scaffolding - a browser for testing - a cloud console for deployment - and a separate framework for evals. Every transition is a context switch. The solution to production-grade Agentic Engineering is now actually implemented in Google’s Agents CLI. It covers the entire workflow in one place for scaffolding, evaluating, and deploying ADK agents. One setup command injects 7 ADK-specific skills into a coding agent's context, which lets it handle scaffolding, evals, deployment, and enterprise registration through natural language. I tested this end-to-end by building a RAG agent from scratch using Claude Code. It scaffolded the full project from the ADK agentic_rag template, generated 20 eval scenarios with LLM-as-judge scoring, and returned a quantitative scorecard. Finally, it also deployed everything to Agent Runtime and registered the agent to Gemini Enterprise, so the entire org can discover and use it. The video below shows this in action, and I worked with the Google Cloud team to put this together. Agents CLI GitHub repo → (don't forget to star it ⭐ ) I wrote up the full build covering all six steps from install to enterprise registration. It includes the eval scorecard, the instruction loophole the eval caught before deployment, and what the deployment process actually looks like end-to-end. Read it below.

Akshay 🚀

258,823 次观看 • 2 个月前

The Visual Studio Code insiders version that just shipped and will ship in the next few days will come with an insane amount of new capabilities. A few highlights: - You can now run sub-agents in parallel. Yes, really. I even attached a video. - Major UX improvements for sub agents, especially visible in the chat window - A new search tool wrapped as a sub-agent that iteratively runs multiple search tools: semantic_search, file_search, grep_search Which connects nicely to the point above: multiple searches running in parallel, efficiently and fast - Anthropic’s Message API is now enabled by default - You can choose the model for the cloud agent (three available, all premium) - Extended thinking support when using the Claude cloud agent This is part of the broader multi-vendor cloud support under AgentsHQ I wrote about a few weeks ago - Tasks sent to the background agent (basically the CLI tool) now always run in isolation, each with its own git worktree - In a multi-repo workspace, assigning a task to a cloud agent prompts you to choose the target repo Same behavior when opening an empty workspace with no repo - Support for building an external index for files not supported by GitHub’s default indexing - UI/UX improvements for starting new sessions and switching between local / background / cloud agents - Skills are now first-class citizens, just like prompt files, with better UX indicating when a skill is loaded - Improved API for dynamic contribution of prompt files New V2 includes skills as part of the model. Curious to see the extensions that will leverage this - Finally, initial support for showing context usage percentage per session - Skills are enabled by default - Resizable chat window and session view. Small thing, but it was driving me crazy 😁 - A new integrated browser meant to replace the old simple browser Maybe the beginning of real browser use? - Better UI/UX for token streaming in chat - Ability to index external files not supported by GitHub There’s a lot more. Some of it hasn’t fully landed yet, but everything that has is already in Insiders. The next stable release should drop in early February. As usual, I’m just shocked by the volume of features this team ships every month. After the holiday slowdown, this one is shaping up to be a wild release.

Oren Melamed

29,555 次观看 • 8 个月前

How ICP Token Holders Can Literally Vote To Upgrade The Internet Computer? Most blockchains rely on developers and node operators to coordinate when the protocol needs a major upgrade. The Internet Computer (DFINITY Foundation) takes a different approach. Its Network Nervous System, or NNS, puts governance directly onchain. Here is how it works: 1. ICP HOLDERS LOCK TOKENS INTO NEURONS internet-computer:native holders can lock their ICP into a “neuron.” A neuron is essentially a governance position that gives the holder voting power over NNS proposals. Voting power depends mainly on: • The amount of ICP locked • The neuron’s dissolve delay • The age of the neuron The longer a holder commits their ICP, the greater their potential voting power. 2. NEURONS VOTE ON NETWORK PROPOSALS The NNS allows neuron holders to vote on proposals affecting the Internet Computer. These can include: • Protocol upgrades • Subnet changes • Network configuration • Node provider decisions • Governance parameters • Changes to the network’s underlying software This is where the system becomes particularly interesting. NNS governance is not simply deciding how a community treasury should spend money. Some proposals can directly affect how the blockchain operates. 3. VOTING CAN TRIGGER ACTUAL PROTOCOL CHANGES A successful proposal can instruct the network to adopt an approved change. For example, NNS proposals can be used to upgrade the replica software running across Internet Computer nodes. Once the proposal is approved, the NNS can coordinate the upgrade across the network. That means token holder voting can ultimately result in the protocol itself changing. 4. HOLDERS DO NOT HAVE TO VOTE ON EVERYTHING The NNS also uses a system known as liquid democracy. Neuron holders can choose to follow other neurons for particular proposal categories. When the followed neuron votes, the follower can automatically vote in the same direction. This creates a delegation system without requiring users to give up ownership of their ICP. In simple terms: • Stake ICP • Create a neuron • Choose your voting preferences • Vote yourself or follow another neuron • Earn rewards for participating 5. GOVERNANCE PARTICIPATION CAN EARN REWARDS The NNS gives users an economic incentive to participate. Neurons can accumulate maturity through governance participation. That maturity can later be used to generate new ICP. This turns governance participation into more than just a voting mechanism. It becomes part of the network’s economic design. 6. THE NNS IS ITSELF PART OF THE INTERNET COMPUTER This is arguably the most important part. The NNS is not simply a website where the community discusses proposals. The governance system itself runs on the Internet Computer. Its rules, proposals, neurons and governance decisions are handled through onchain infrastructure. That allows governance decisions to become executable actions. 7. WHY THIS MATTERS FOR PROTOCOL UPGRADES Traditional blockchain upgrades can require significant coordination. Developers may need to release new software. Node operators need to install it. Validators or miners need to support it. Exchanges and infrastructure providers may also need to update their systems. If coordination fails, competing versions of the blockchain can emerge. The NNS is designed to reduce some of that coordination problem. The community can approve a proposal through onchain governance, and the network can then execute the approved change. 8. IT IS NOT ONE ICP TOKEN, ONE VOTE Simply holding ICP does not automatically give someone governance power. Users need to commit their tokens through a neuron. And voting power is not based solely on the number of ICP held. Factors such as dissolve delay and neuron age also influence voting power. This means the system rewards committed participation rather than treating every wallet as an identical vote. 9. SO WHAT MAKES THE NNS DIFFERENT? The key difference is that governance is built into the protocol itself. On many blockchains, governance can look like: Community discussion → Vote → Developers implement the decision. The Internet Computer aims for something closer to: Stake ICP → Vote through NNS → Proposal passes → Network executes the change. The NNS is designed to make governance part of the Internet Computer’s operating machinery. ICP holders therefore have a direct role in deciding how the network evolves. Under the right proposal, their votes can ultimately determine which software the network runs.

BSCN

18,482 次观看 • 1 个月前