MurphyA/hacker-news huggingface dataset:
Show HN: ChronoGuard – Time-bounded access control for AI agents (open source)
by j-raghavan | 2025-12-16 16:07:21+00:00
- The problem: Compliance teams ask: “Which agent accessed what, and when?” Existing proxies treat all agent traffic the same—no per-agent identity, no enforceable time bounds, weak audit trails.

- What it does - Agent → Envoy (mTLS per-agent cert) → OPA (policy check) → Target - Each agent gets a short-lived cert, rotated automatically - Policies constrain domain + time window; outside-window requests are denied and logged (<5ms median in demo) - Audit logs are hash-chained; here’s how to verify the chain: https://github.com/j-raghavan/ChronoGuard#verify-audit-chain

- Why not SPIFFE/Boundary/etc.? They handle identity; ChronoGuard adds enforced time windows + tamper-evident audit (“agent X can only hit api.example.com 9–5 UTC”).

- Try it (pick one) - Live demo (2 min): https://j-raghavan.github.io/ChronoGuard/ — see 9–5 allowed, after-hours denied, with audit trail - One-click Codespaces: https://codespaces.new/j-raghavan/ChronoGuard — brings up Envoy+OPA; follow the 3-step README - Repo: https://github.com/j-raghavan/ChronoGuard

- Scope - Covers: per-agent identity (mTLS issuance/rotation), time-bounded access control, tamper-evident audit - Not yet: model jailbreak defense, data loss prevention—this is access control + audit

- Looking for contributors Envoy filters/hot-reload certs, OPA policy packs, language SDKs (LangChain/AutoGen), audit verification tooling. Good first issues: https://github.com/j-raghavan/ChronoGuard/labels/good%20firs...

- Best starting point: the live demo. Feedback or PRs welcome.
by anubistheta | 2025-12-16 16:07:34+00:00
That's why I liked catastrophic health care plans. Insurance works best when it covers rare, expensive events. Otherwise, it interferes with the process. My car insurance doesn't cover oil changes or new tires, but if I get I crash and injure someone, it kicks in. Homeowners insurance doesn't cover a routine roof replacement, but it will if there's storm damage. That's how health insurance should work.

A catastrophic health care plan has low premiums and high deductibles. You also get access to a tax advantaged savings account to save up for future events. So you can take the money you saved on premiums and pay for medical expenses tax free. Or let the money accumulate to cover future medical expenses or even retirement!
by SoftTalker | 2025-12-16 16:08:01+00:00
> A family sedan is a suitable tow vehicle for the large flat bed twin axle

You may get away with it but it is not suitable. It doesn't have the brakes or the weight to safely pull a large trailer, and you'll likely burn up the transmission as well. Now, if you're talking about a body-on-frame GM sedan from the 1970s, with a 350 or larger V8 engine, maybe. A 4-cylinder typical family sedan of 2025? Not a chance.
by diggyhole | 2025-12-16 16:08:19+00:00
The weird thing about this sort of stuff is I believe genetics play a role. My father in law has worked in ag his whole life. Specifically spraying fertilizer and pesticides. He is obese and has a terrible diet. One would think he is riddle with cancer and died at 50. He retired at 67 and is overall somewhat healthy for someone who is 300 lbs. Life is weird.
by Noaidi | 2025-12-16 16:08:25+00:00
You are a power user if you are using Arc. I know a few people who do not even really understand what a browser is.

Atlassian bought Arc to put AI in it by the way; "Welcoming The Browser Company to Atlassian Building the AI browser for knowledge workers"

https://www.atlassian.com/blog/announcements/atlassian-acqui...
by quamserena | 2025-12-16 16:08:29+00:00
Not really. Here’s a comparison of different languages: https://notes.eatonphil.com/parser-generators-vs-handwritten...

Most roll their own for three reasons: performance, context, and error handling. Bison/Menhir et al. are easy to write a grammar and get started with, but in exchange you get less flexibility overall. It becomes difficult to handle context-sensitive parts, do error recovery, and give the user meaningful errors that describe exactly what’s wrong. Usually if there’s a small syntax error we want to try to tell the user how to fix it instead of just producing “Syntax error”, and that requires being able to fix the input and keep parsing.

Menhir has a new mode where the parser is driven externally; this allows your code to drive the entire thing, which requires a lot more machinery than fire-and-forget but also affords you more flexibility.
by msandford | 2025-12-16 16:08:32+00:00
I suspect that the parent does in fact pay for any healthcare that they need or that their kids need. They just aren't buying insurance because the price of the insurance far outweighs their normal spending.

This is the real problem with health insurance is that it covers relatively routine and non emergency healthcare services where you can ship around and have market forces encourage people to find efficiency.

I understand the "if I'm dying from a car crash I can't shop around" argument and I agree. But that's very different than shopping for a family doc you like for the half dozen times a year you or your family will need to see someone for a strep test and maybe antibiotics.
by CrazyStat | 2025-12-16 16:08:36+00:00
In a perfect world everybody would be putting careful thought into their desired (acceptable) type I and type II error rates as part of the experimental design process before they ever collected any data.

Given rampant incentive misalignments (the goal in academic research is often to publish something as much as—or more than—to discover truth), having fixed significance levels as standards across whole fields may be superior in practice.
by laurent_molter | 2025-12-16 16:09:03+00:00
https://www.tekushi.com/

I'm building a simulation training to master online self-defense.

I take the principles of martial art and apply it to online safety against all the current threats.

This is a browser-based simulation game where you train and learn detecting threats and dark patterns in a safe environment.

I've build it in Python/Flask as a solo maker.

Any suggestions are welcome!
by ryanm101 | 2025-12-16 16:09:21+00:00
I'm happy to extend, star and raise an issue with a description. This is an alpha spec to get comments like this one.

It's not really for llms so much as its for understanding distributed systems. For example auto updating dependencies in service now so down stream alerts aren't fired for upstream events (today you have to config that manually) I just have to write the tooling
by wvenable | 2025-12-16 16:09:24+00:00
> Reading the code and actually understanding the code is not that the same thing.

Ok. Let me be more specific then. I'm "understanding" the code since that's the point.

> I'm unsure the AI can do the high level understanding since I have never gotten it to produce said understanding without explicitly telling it.

My experience has been the opposite: it often starts by producing a usable high-level description of what the code is doing (sometimes imperfectly) and then proposes refactors that match common patterns -- especially if you give it enough context and let it iterate.

> "Rewrite x.c, y.c, z.c into C++ buildings abstractions to make it more ergonomic" generally won't recognise the DSL and formalise it in a way that is very easy to do in C++, it will just make it "C++" but the same convoluted structure exists.

That can happen if you ask for a mechanical translation or if the prompt doesn't encourage redesign. My point was literally make it well-designed idiomatic C++ and it did that. Inside of the LLM training is a whole bunch of C++ code and it seems to be leaning on that.

I did direct some goals (e.g., separating device-specific code and configuration into separate classes so adding a device means adding a class instead of sprinkling if statements everywhere). But it also made independent structural improvements: it split out data generation vs file generation into pipeline/stream-like components and did strict separation of dependencies. It's actually well designed for unit testing and mocking even though I didn't tell it I wanted that.

I'm not claiming it has human-level understanding or that it never makes mistakes -- but "it can't do high-level understanding" doesn't match what I'm seeing in practice. At minimum, it can infer the shape of the application well enough to propose and implement a much more ergonomic architecture, especially with iterative guidance.

I had to have it introduce some "bugs" for byte-for-byte matching because it had generalized some of the file generation and the original C code generated slightly different file structures for different devices. There's no reason for this difference; it's just different code trying to do the same thing. I'll probably remove these differences when the whole thing is done.
by giantg2 | 2025-12-16 16:09:24+00:00
"but even saving half the premiums in a money market account not only provides a good cushion for that, but if we don't use the money we actually get to keep it!"

Until they require a $50k life flight or $100k brain, heart, etc surgery.

The problem is that insurance was intended to cover the large, infrequent costs - house fires, totaled cars, etc. The deductibles are intended to influence people to pay out of pocket for the smaller expenses.

The problem with health insurance is that the deductibles, premiums, and cost of care are out of control. The laws mandate significant amounts of coverage for a plan. The costs can be as high as a house fire, but happen much more frequently within the population. You can't get a plan that just covers expenses over $10k-20k per year. You can get kind of close with the super high deductibles but it still has to cover some things before the limit. Even if you could get to that, you're still looking at high costs when you consider the odds of something like 1 out of 100 people might need a $100k procedure in a year (made up numbers).
by bpt3 | 2025-12-16 16:09:42+00:00
I don't disagree with anything you said, but the simple answer to your question is that most American households are happy with their current health insurance and don't want it to change, so we keep patching the current (severely flawed) system as "needed" rather than starting over with a new one or making what would be seen as radical changes.

--- Edit ---

For the kneejerk downvoters who seem very confused, this was released yesterday: https://thehill.com/policy/healthcare/5650010-survey-aca-cov...

This has been an issue for decades now, with countless polls to back it up.
by orochimaaru | 2025-12-16 16:10:00+00:00
You’ll probably get downvoted here for mentioning this. But I am with you.

I think we need to get out of this bad mix of insurance and health care being a crisis. But for that to happen, state benefits need to be locked down iron-clad to only us citizens. Not to your general tax payer base but only to US citizens and that includes ACA subsidies. States subsidies should be included in “government assistance” that makes beneficiaries ineligible for citizenship and permanent residency.

That is a problem that shouldn’t need a big discussion to solve in Congress. But given the current political scenarios it won’t.
by kace91 | 2025-12-16 16:10:04+00:00
I do get the benefit of not depending on plugins, really. Long term my current config could rot (abandoned projects, moving dependencies, etc), while a simple config is stable. But I'm happy removing dependencies one at a time.

For example, <leader> ft toggles a terminal in a bottom split. This is familiar enough that I knew I could rely on it whenever needed.

Could I have used :term and manually set splits each time? or learn tmux? or use ctrl+z and fg to move back and forth ? Sure, but that's extra cognitive load.

Maybe I want to focus first on becoming fluid with regex for search and replace, or improving the flow for running unit tests, or get used to using macros as a replacement for multicursor. There's a lot of gaps to cover, each small enough that it's "just do X" for a veteran, but enough when added up that I would much rather pay the cost gradually.
by tqi | 2025-12-16 16:10:13+00:00
This article has such palpable distain for the people who consume these products that it makes me wonder why the author even cares what kind of future they inhabit.

> But what is important to me is to keep the perspective of what consitutes a desirable future, and which actions get us closer or further from that.

Desirable to whom? I certainly don't think the status quo is perfect, but I do think dismissing it as purely the product of some faceless cadre of tech oligarchs desires is arrogant. People do have agency, the author just doesn't like what they have chosen to do with it...
by matt_kantor | 2025-12-16 16:10:38+00:00
Perhaps I should've expanded further to "the specific JSDoc dialect supported by the TypeScript compiler and TypeScript syntax are two alternative ways to …".

Unlike ISO C++ I'm not aware of any standard for what JSDoc is outside of specific implementations. There's a bunch of stuff documented on https://jsdoc.app/ but it only partially overlaps with the JSDoc syntax that TypeScript uses, and is not what the article is talking about.

The situation is not unlike Markdown before the CommonMark standard (except with less pressure to standardize, because most codebases are written with specific tooling in mind). Maybe we should refer to it as "TypeScript-flavored JSDoc".
by zippyman55 | 2025-12-16 16:10:48+00:00
One of our local, private, and financially troubled universities has their department hierarchy on line. I was amazed, while recently looking to get in contact with a person about auditing a class, how many "head of XXXX" positions existed in the university directory. It seems way more complicated that it needs to be, and I can see how they would be in financial dire straits.
by doodlebugging | 2025-12-16 16:10:56+00:00
Social mores are synonymous with morals and it is our social mores or our moral values that form the basis of our legal systems where we use those mores (moral values) to define the actions that fall into the categories of right versus wrong and help us define how we should treat each other and what an appropriate societal sanction should be when someone steps over the line and does something to violate our social mores or does something that we consider immoral.

By comparison it is pretty obvious that most societies have similar moral values - stealing is wrong, murder is wrong, charity is right, etc. in spite of the differences in religious interpretations that end up preventing so many of us from simply coexisting as equals.

To suggest that morals are tied to religion is simply wrong. Morals are simple rules that humans have developed over generations of interactions that allow them to apply reasonable judgements to fellow humans based on observations of how those fellow humans interact with strangers and kin.

Religions likely have as part of their foundations, an explicit acknowledgement or recognition of the societal mores that governed human interactions before any one of our ancestors invented or postulated out loud about phenomena that they all experienced but did not yet have the science or understanding of the natural world to reliably explain, thus compelling them to invent entities that controlled those phenomena. Those who chose to believe in these inventions could rest easier knowing that something somewhere was either looking out for them or they could be wary of angering that entity to prevent bad things from happening to them or their kin.

In short, morals and ethics exist outside of any religious dogma so the suggestion that they are a constraint imposed on any society through religion is simply inaccurate since it is not necessary for any person to be religious in order to hold another accountable .
by rixthefox | 2025-12-16 16:11:34+00:00
I think the difference is really more noticeable if you're on a limited connection. For example, on Starlink I only have 50 GB to play with. It's entirely ineffective if the browser downloads the ads and only scrubs them out of the view after the fact. Same with anybody using a mobile hotspot over LTE. In those situations bandwidth is super limited (I have 5 GB of hotspot data a month) unless you can convince the carriers to zero-rate data pulled for advertisements (they won't) I'll continue blocking ads before they can be loaded.

Edit: and I'm not on some cheap MVNO, I'm paying over $80 a month with AT&T on their post-paid plan. The phone gets unlimited data but any other device I may need to share that connection needs to be as efficient with bandwidth as possible. Only Firefox and derivatives provide proper ad blocking at this time.
by parineum | 2025-12-16 16:11:38+00:00
I can repeat that experience but didn't take me quite as long as I had time to walk through it.

However, just this last update, they added support for a new set of vacuums, Midea/Eureka that don't require that PCB.

https://github.com/Hypfer/Valetudo/releases/tag/2025.12.0
by thenthenthen | 2025-12-16 16:11:43+00:00
Relatable, the crap my PRC friends order EVERYDAY is...more than me in 3 months? And it all comes in a bag, box, wrapping, another box, another baggie etc. Moving to PRC i had thrown ALL my stuff away and it felt great, but I just entered the next level of consumerism...next level as I am afraid this is not even the end boss.
by empressplay | 2025-12-16 16:11:53+00:00
Rather than pointlessly lament the destructive power of fire, we should be spending our time learning how to fire-proof our homes.

These are all natural forces, they may be human forces but they are still natural forces. We can't stop them, we can only mitigate them -- and we _can_ mitigate them, but not if we just stick our fingers in our ears and pretend it's not going to happen.

It absolutely is. Whatever you can imagine. All of it.
by ArkhamMirror | 2025-12-16 16:11:58+00:00
Thanks, glad to hear it!

Short answer - no, not right now.

However, instead of going through locally hosted docker and local LLMs, you could reroute it wherever you like, but I don't have a cloud option set up at this time.

I'm focused on the developing the local, private applications myself, but nothing is stopping someone from hooking it up to stronger cloud-based stuff if they want.

The good news is that my plans for this include making it more modular, so people have better options for what it does and how powerful it is.
Show HN: Picknplace.js, an alternative to drag-and-drop
by bbx | 2025-12-16 16:12:06+00:00
I find that the drag and drop experience can quickly become a nightmare, especially on mobile. To tap, hold, drag, and scroll, all at the same time, is both difficult to achieve, and prone to errors. I've always had in mind this 2-step approach, where picking an element and placing it were two separate steps. So I implemented this basic version to showcase my idea.

While it might take more time than a regular drag and drop, the benefit is for people who struggle with holding down the mouse button. With picknplace.js, you only need two clicks and some scrolling.

This solution is meant as an experiment, so I'm open to discussion.
by jgeada | 2025-12-16 16:12:10+00:00
Markets can remain irrational, or colluding, far longer than you can stay solvent (or even alive).

For example, while the Phoebus cartel only really lasted from 1925 through to 1939, 1000hr incandescent light bulbs remain the standard offering till present day. Profitable market manipulations are sticky.

The whole notion that markets are efficient is just a mathematical construct that has become very dogmatic for people. But if you look into the details, markets are efficient under the assumptions of perfect information and infinite time. Neither of those conditions are present in the real world: we neither have perfect information nor infinite time.
by jack_tripper | 2025-12-16 16:12:13+00:00
>The gig economy is hiding the real employment problem in most of the West.

This. Jobs that were previously contract employment jobs that came with health insurance, workers rights and social security and were mostly taken by youth as part time jobs to fund studies, are now turned into gig jobs where you get none of those things and are mostly taken by migrants who live 10 in an apartment and send the money home.

Gig work used to mean that you have several customers you bounce around for doing part time gigs, not you work full time for the same tax dodging Amsterdam based food delivery company who doesn't want to hire local workers on employment contracts to evade labor laws and liabilities.

How does this benefit society? It only benefits the capital owning class. Why isn't the government regulating this gig industry abuse? It's literally what its job is.
by toomuchtodo | 2025-12-16 16:12:25+00:00
https://usafacts.org/answers/how-many-people-are-on-medicaid...

https://usafacts.org/just-the-facts/do-you-qualify/health/

https://usafacts.org/articles/how-will-the-obbb-impact-medic...

https://www.congress.gov/crs-product/IF11912

https://www.kff.org/racial-equity-and-health-policy/5-key-fa...

https://www.americanimmigrationcouncil.org/blog/undocumented...

> Do undocumented immigrants qualify for federal healthcare benefits?

No. Undocumented immigrants do not have access to federally funded healthcare coverage, including Medicaid, Medicare, or the Children’s Health Insurance Program (CHIP). They are also unable to purchase health insurance coverage from the Affordable Care Act (ACA) Marketplace.
by reactordev | 2025-12-16 16:12:38+00:00
Uber and DoorDash are full…

No, those people aren’t driving for Uber now. Let that sink in for a moment.

Less hospitality jobs, less customer-service jobs, less retail jobs, no mall jobs, no manufacturing jobs, gig economy is full, corporate jobs being replaced by AI, trains going autonomous, trucks going autonomous, this is end game capitalism. Those who own, own it all. Those who don’t, own nothing, will never own anything, will only rent/lease/borrow their lives.
by arijun | 2025-12-16 16:12:57+00:00
> But then he never answers that fundamental question

The fundamental question is “is it economically viable”, and the answer from his model is “not really”

> A constellation of 40,000 satellites with GPUs “infrastructure that makes it easier for humans to keep spreading out”?

I think he’s claiming industrializing larger and more economical power generation in space, as well as the means to put it up there, would make it easier to transition to a theoretical space economy

> But isn’t that precisely what everyone has been saying?

From the article, he claims that people handwave the economics, so at least the people he has interacted with haven’t been saying that.
by giantg2 | 2025-12-16 16:12:59+00:00
"A catastrophic health care plan has low premiums and high deductibles."

Except they don't really exist anymore. You can get really high deductibles, but the premiums are still ridiculous. The plans have to cover many non-catastrophic events now by law.

The other problem is that the cost and frequency of things like auto accidents or home damage is generally much lower than for health events, and generally include much lower caps on how much they will payout.
by jigsawdesigner | 2025-12-16 16:13:07+00:00
You're right that physical context is crucial. However, mathematically, PCB routing is a Graph Theory optimization problem that falls into the NP-hard complexity class (related to the Steiner Tree problem). Traditional solvers rely on heuristics (like A* or annealing) because finding an exact mathematical solution is computationally intractable for complex boards. My point about AI—specifically Graph Neural Networks (GNNs)—isn't about bypassing the learning process. It's about using statistical approximation to handle these high-dimensional topological constraints more effectively than human intuition or standard heuristics can. It's not 'lazy'; it's applying a modern computational lens to an unsolvable deterministic problem.