MurphyA/hacker-news huggingface dataset:
Show HN: BreakMyAgent – Open-source red-teaming sandbox for LLM system prompts
by breakmyagent | 2026-02-26 13:00:17+00:00
As a developer, I got tired of manually testing my AI agents and chatbots against the same prompt injections and jailbreaks every time I tweaked a system prompt. Our QA team was struggling with the exact same bottleneck, so I built BreakMyAgent.

It’s an open-source sandbox that runs an automated barrage of standard exploits against your target LLM to see if it leaks data or ignores core instructions.

How it works under the hood:
- The UI is built with Streamlit, backend is FastAPI, and dependency management is handled by `uv`.
- You paste your system prompt and hit run. It fires 12 baseline attack vectors (Direct leaks, XSS payloads, Context overflows, etc.) concurrently.
- The core mechanic is "LLM-as-a-Judge". It uses a hardcoded `gpt-4.1-mini` with strict alignment rules to systematically evaluate the target's responses.
- It supports OpenAI, Anthropic, and a solid list of open-weight models via OpenRouter (including DeepSeek V3/R1, Qwen 2.5, and Llama 3.3).

There is a hosted free version if you want to play with it immediately (I capped it at 15 requests/IP to survive the launch), but the entire tool is open-source and takes 30 seconds to spin up locally with Docker or `uv`.

Repo: https://github.com/BreakMyAgent/breakmyagent-os
Live demo: https://breakmyagent.dev

Next on the roadmap: I'm building a dedicated CLI/GitHub Action so teams can drop this into their own CI/CD pipelines to block prompt regressions. I'm also developing a PoC for multi-turn agentic fuzzing and expanding the payload database for complex tool-spoofing.

I’d love to hear your feedback! What other test configurations (besides temperature and response format) do you think are essential for a tool like this? Also open to any feedback on the architecture, the judge prompt, or specific zero-day vectors you'd like to see included in the public database.
by nz | 2026-02-26 13:00:39+00:00
Not an insider, so feel free to ignore, but here is my interpretation anyway. Safety is poorly defined, but can be interpreted to mean "arbitrary constraint" on the capability of the model. In other words a "safe" model is just a talking computer that will not blindly obey like a normal computer. From this point of view, there is a _lot_ of value in such "safety" for AI companies: pay us 200$ per month, and you can do everything that we want to allow you to do, and if you are unhappy with this, well contact us, and we can negotiate "premium access".

If AI gets good enough to start completely replacing white-collar/bureaucratic work at scale, AI "safety" may be the only thing that makes humans valuable. A human will (unhappily) do "unsafe" things, in order to not starve (and a human will _happily_ do "unsafe" things, in order to ensure the survival of offspring).

Furthermore, if most AI models are "safe", and if access to "unsafe" versions of these models is severely restricted, then there is going to be a market for contraband "unsafe" models, even if they are less capable overall.

My own big fear, for the next decade or two, is that the _legal_ distinction between a model and an algorithm will blur, resulting in all software that is not a "safe" AI model, becoming contraband.

I guess, in the best case (safe AI models automate most human bureaucratic functions away), humans will be valued (by the market) more for their skullduggery, than for their virtues.

Welcome to capitalism. Enjoy Arby's.
by neya | 2026-02-26 13:01:17+00:00
You can find specialized roles than Rails and usually more experienced (understandably) but most companies would be really open if you told them you have a Rails background but want to learn Elixir.

The pool size is less, but the pay is more (depending on your demographics, experience, etc) in my personal experience.

But, honestly I chose it not for the market, it's just a better programming language to build stuff, period.
by JimmyRacheta | 2026-02-26 13:01:22+00:00
Thank you. It was a very interesting development and testing, it's amazing to see the models learn in realtime that there's a protection layer and sometimes they say they expect a command to fail because of it even before it runs. Amazing but scary at the same time. While the tool still has a lot of room for improvement, I'm looking forward to add additional features as quickly as I can.
by pjc50 | 2026-02-26 13:03:22+00:00
Trying to cost this out (in a UK context), I found very few press releases give actual cost numbers. This was rather cute though: https://www.kentonline.co.uk/sittingbourne/news/you-can-hear... "took over a 5MW site in Bobbing, near Sittingbourne, in December 2023 after raising £176,100 of investments through a crowdfunding campaign"

That is for taking it over from a previous operator, and seems extremely low. More recognizable £1.5k/kW numbers give about £7.5m for that. So unless you're independently wealthy then finance is going to be your #1 consideration. It might actually be easier to do community funding in the UK than the US, provided you structure your investors as creditors and not equity.

#2 consideration is going to be planning rules and the availability of special get-outs for renewables schemes.

#3 is going to be grid connection. In the UK you need permission from OFGEM for large systems. It is also potentially expensive if they make you pay to dig up the road and lay 5MW cabling.

Acquiring land is tied in to all of those.
by mikeayles | 2026-02-26 13:03:37+00:00
Probably the first thing to consider is the trucks have their speed calibrated periodically to ensure the accuracy of their tachographs (in the UK at least) so a truck doing 90kmph may show as 100kmph+ in a passenger car, I know my Volvo is 7% out, and my Seat is closer to 10% out.

That said, depending on the truck, there's fuses you can pull, ECU remaps and even for the older trucks with the magnetic sensor in the gearbox, the trick is/was to stick a magnet on the sensor (with a bit of string, so you can pull it off remotely if you get pulled over). All of these methods are becoming less feasible, as things like the aggregate wheel speed sensors used for ABS get used, you can't just fool one thing now.

As for the weight limit problem, that's a whole other rabbit hole!
by joe_mamba | 2026-02-26 13:03:44+00:00
>Are DUV machines cheap and easy to manufacture?

100 million DUV machine is not your limiting factor when a whole fab costs 2-3 billion and requires specialized knowhow that few people in the world have in order to get good yields and be profitable. Otherwise everyone would be making chips if all you needed was to go out and buy a 100 million DUV machine then hit the "print" button to churn out chips like it's a xerox copy machine.

>I suspect if they were, we'd see a lot of cheap RAM hit the market.

Nobody spends 2-3 billion to open new fab just to make commodity low margin chips. New fabs are almost always built for the cutting edge, then once they pay off their investment costs, they slowly transition into making low margin chips as they age out of the cutting edge but nobody builds fabs for legacy nodes that have a lot of competition and low profitability, except maybe if national security(the taxpayer) would subsidize those losses somehow.

>but I suspect I'm still right about the economics.

You are not.
by throwaway2037 | 2026-02-26 13:03:45+00:00
> but this is only if you do not take into account the bribes from Intel to specific officials and their relatives who make decisions about subsidizing Intel.

Bribes? Sheesh, HN has gone insane.

Brandolini's Law is out of control here. You are making a bold fucking claim. From the tone of your post, it seems pointless to ask if you have any evidence. From and outsider's view, I would say the German political system is much less corrupted by lobbyists compared to the United States. Do you say the same about the CHIPS Act in the United States?
by MaxNardit | 2026-02-26 13:04:16+00:00
Hi HN, I'm Max. I built Agent Recall because AI coding agents forget everything between sessions. Same codebase, same team, same decisions — explained from scratch every morning.

How it works: SQLite-backed knowledge graph with scoped entities, relations, and slots. An MCP server exposes 9 tools so the agent proactively saves facts as you work. At session start, an LLM summarizes the relevant facts into a structured briefing instead of dumping raw data.

What makes it different from a context file: Scope chains with inheritance (same person, different roles per project), bitemporal history (old facts archived, not deleted), and AI briefings that scale beyond what you'd maintain by hand.

Where I need help:

If you use Cursor, Windsurf, or Cline — try the MCP config, tell me what breaks

PRs for other LLM backends (Ollama, local models) welcome

pip install 'agent-recall[mcp]'

Repo: https://github.com/mnardit/agent-recall
by torginus | 2026-02-26 13:04:31+00:00
Afaik a lot of AI generated models aren't really 'AI generated' in the sense that you have an network that outputs vertices and topologies and UV maps.

3D AI models are usually made by a grab bag of techniques, for example you use diffusion to output color and depth maps from multiple angles, then you try to put the results into a voxel grid with 3D reconstruction techniques, after which you run an algorithm like Marching Cubes to get a crappy mesh, and then you do decimate the mesh via some algorithm.

So yeah, the outputted model is built out nothing like a 3D artist would have, might look okay, but you won't find any structure in the output.

I don't think it's worth using them as anything in an artist pipleline except maybe as reference for retopo.
by cmrdporcupine | 2026-02-26 13:04:42+00:00
Coding, via something like Claude or Codex, will likely always be something best done by hosted cloud models simply because the bar there can always be higher. But it's already entirely possible to run local models for chat and research and basic document creation that can compete perfectly fine with the cloud models from 6 months to a year ago. The limitation at this point is just the cost of RAM.

This week's released of the new smaller Qwen 3.5 models was interesting. I ran a 4-bit quant of the 122b model on my NVIDIA Spark, and it's... pretty damn smart. The smaller models can be run at 8-bits on machines at very reasonable speeds. And they're not stupid. They're smarter than "ChatGPT" was a year or so ago.

AMD Strix Halo machines with 128GB of RAM can already be bought off the shelf for not-insane prices that can run these just fine. Same with M-series Macs.

Once the supply shocks make their way through the system I could see a scenario where it's possible that every consumer Mac or Windows install just comes with a 30B param or even higher model onboard that is smart enough for basic conversation and assistance, and is equipped with good tool use skills.

I just don't see a moat for OpenAI or Anthropic beyond specialized applications (like software development, CAD, etc). For long-tail consumer things? I don't see it.
by skepticATX | 2026-02-26 13:04:48+00:00
I actually think that plateauing is the best case scenario for big labs.

I think there are three broad scenarios to consider:

- Super-intelligence is achieved. In this scenario the economics totally break down, but even ignoring that, it’s hard to imagine that there are any winners except for the the singular lab that gets here first.

- Scaling laws hold up and models continue to get better, but we never see any sort of “takeoff”. In this scenario, models continue to become stale after mere months and labs have to spend enormous amounts of money to stay competitive.

- Model raw capabilities plateau. In this scenario open source will catch up, but labs will have the opportunity to invest in specific verticals.

I believe that we’re already seeing the third scenario play out, but time will tell.
by ludydev | 2026-02-26 13:04:49+00:00
Hey IH!

I just launched ImageNav — a curated directory of 55+ AI image generation tools.

*The Journey*:
- Started 2 months ago after getting frustrated with outdated AI tool listicles
- Spent 6 months testing tools (Midjourney, DALL-E, Flux, Stable Diffusion, etc.)
- Built the directory to save others the hassle

*Tech Stack*:
- [Your stack, e.g., Next.js + Tailwind + PostgreSQL]
- Hosted on Vercel
- Weekly updates via cron job

*Traction So Far*:
- Launched on Product Hunt [X days ago]
- [X] visitors in first week
- Published on Medium (DR 95)

*Challenges*:
- Keeping data up-to-date (AI tools change fast)
- SEO competition (lots of "best AI tool" listicles)
- Monetization without compromising trust

*What I Learned*:
1. Content beats tech stack — users don't care about React vs Vue, they care if the info helps
2. Weekly updates are essential — static lists from 2024 are already outdated
3. Simple beats complex — launched with basic features, users love it

*What's Next*:
- Adding video generation tools
- User voting system
- Newsletter with weekly AI tool roundups

Check it out: https://imagenav.net/

Happy to answer questions or hear feedback!
by ilinx | 2026-02-26 13:05:06+00:00
I believe whoever solves the emotional dysregulation that leads to some persecution complexes will genuinely deserve a Nobel Peace Prize. While I doubt this will solve the problem completely, I do see potential for it to prevent discourse from spiraling quite as badly as it tends to.

I predict that a feature like this would probably chase off some undesirable community members, while genuinely helping some people improve their ability to engage in good-faith discussion and debate. And if it eases the burden on moderators and the community at large who currently police these things, it seems like a clear win. I’m sure it could be mis-calibrated to tone policing, but I’m not one to let perfect be the enemy of good.
by the_af | 2026-02-26 13:05:48+00:00
But working on DEI on your boss' orders in 2024 wasn't reprobable, anymore than bringing your boss a cup of coffee to their desk was.

The point is that the shift in what is considered "a capital crime" is arbitrary, this is not the Nuremberg trials. You cannot protect yourself by being a decent person, whatever you do today can be a crime tomorrow, and AI can assist those looking for your flaws.
by Brajeshwar | 2026-02-26 13:06:31+00:00
On the other hand, Indians are rejoicing that this might actually be much easier for us. We will still be going through the Visa Application, but we will get the digital version of the e-visa (I read that a physical copy can also be printed).

In all fairness, based on my interactions with Visa Applications, the UK government website is the best so far. I love their Design Systems, consistency, and UX predictability.

https://www.gov.uk/eta/apply also follows the same design language. I’d happier facing this one than many others.
by bell-cot | 2026-02-26 13:06:45+00:00
Especially in modern online culture, with its oft-unhealthy obsession with ideology, performative behaviors, and political identities, one should recognize that there's a wide gray spectrum here - from someone who is "purely" an NVE, to people superficially adopting the appearances of various groups and ideologies, to people who may "obviously" be exemplary members or adherents to a group or ideology...but their underlying motives are all-too-clearly to articulate/fuel/inspire/justify/support their NVE condition.

Related concept: Salad Bar Extremism
by jazz9k | 2026-02-26 13:07:07+00:00
It's a victim of its own success. It's struggling, because large institutions are invested in it, and it now rises and falls with the stock market. It used to be advertised as an alternative to these institutions.

I also think because of the volume, pump and dump schemes are less likely and some popular Youtuber shilling for it can't raise the price anymore.
by maeln | 2026-02-26 13:07:09+00:00
To be fair, it would be very hard to argue against this website since it stays very vague.

For most things it says that they are “impossible” or “near-impossible” with no explanation or just "getting a permit is hard" with no futher detail.

It does give some cherry-picked metrics :
- 0 Semiconductor fabs built in CA in the last decade => as there been ANY semi fabs built outside of taiwan and china in the last decade ? Not exactly surprising.
- 1 West Coast shipyard that can build destroyers, 0 New automotive paint shops permitted in CA, 0 New oil refineries permitted in CA since 1969 => We don't build those for shits and giggles, is there any demand that would justify new factories for thoses ?

Basically, the website doesn't say anything. It just gives some context-less data and one guys opinion on what he perceives as not possible.

Not that I care, I am not from the US or live there, but let's not try to pass some dude rambling as a source of actual information.
by marcuskane2 | 2026-02-26 13:07:23+00:00
This is much ado about nothing.

The US has so much excess capacity in farmland that we do absurd things with our excess corn and soybeans. We refine soybeans into ethanol to put into our gasoline. We feed corn to cows which kills them in fairly short order, but we just slaughter them before they die from the diet. We put high fructose corn syrup into everything. We use corn and soy derivatives for random industrial and chemical feedstock.

Data centers won't take up even .0001% of farm land, and "food production" wouldn't be meaningfully impacted unless we lost many, many orders of magnitude more land than that. This is panic about a rain drop in the ocean.
by tonypaterson | 2026-02-26 13:07:53+00:00
House price inflation has forced many households into properties smaller than their needs - couples in studio flats, families in two-bedroom houses. A small double ottoman bed by DHS makes inadequate spaces somewhat functional through intelligent storage. In studio apartments where the bedroom and living area share one room, the ottoman conceals daily clutter instantly, maintaining separation between sleeping and waking environments. The 120cm width provides the psychological comfort of a "proper" double bed whilst physically fitting spaces where standard doubles create unusable dead zones. For families where older children share bedrooms with younger siblings, the small double gives teenagers appropriate sleeping space whilst the ottoman stores their increasing volume of belongings. This furniture choice represents pragmatic acceptance of modern UK housing realities rather than aspirational interior design.
by locopati | 2026-02-26 13:08:02+00:00
In order to bring people together, it's necessary to acknowledge the harms that have been caused. That is part of repair and trust building. Germany had war crimes trials. South Africa had truth & reconciliation. The US can't paper over the ways in which marginalized populations have been harmed, especially since large parts of the country either don't believe harm has been caused or activity endeavor to perpetuate that harm.
by neya | 2026-02-26 13:08:41+00:00
Technical excellence is often overlooked by the MBA groups. They will simply walk into a project, pick something perfectly functional and ask you to tear it down for no fucking reason other than to demonstrate "they add value" to the company. They will be really good with the slides and graphs and that's what is visible to management anyway.

Not the framework you developed. Not the fact that your work powers millions of users. To them, you're just a replaceable worker bee. You are only needed when something breaks. Architectural decisions are made by anecdotal experiences by them and it's just stone, paper, scissors all over again.

And when shit blows up right in their faces, it will not be about their judgement or lack thereof - it will be about how you didn't communicate about the issue properly. It will always be you who will be under the bus. And then the bunch of these clowns go and vibe code some stupid-ass product and sell it to gullible investors "wHo NeEds EnGiNeErs?"

And then you read about how 1000s of users' information went public all over the internet post their launch...the very next day.

/endrant
by rhazn | 2026-02-26 13:08:59+00:00
(article author here): Fair comment, but at least for me the https://www.gov.uk/eta flow still just leads into the double upsell of the mobile app. My problem is more with governments (all of them, this is just one instance) increasingly pushing people to use native Apps and with that to the mercy of Google/Apple.

The article is definitely a bit over the top, it is just my personal blog and me trying to write a bit more funny to counter the bland LLMs. Your opinion can vary on if I have succeeded or overshot on that.
Show HN: A bridge from Copilot SDK to ACP agents
by offbeatport | 2026-02-26 13:09:37+00:00
Hi HN! I built MeshAway to connect Copilot SDK apps to ACP-compatible agents like Gemini, Codex, Opencode, etc.

There’s been some discussion around interoperability in this space (for example: https://github.com/github/copilot-sdk/issues/377). In practice, integrating across agent ecosystems still often means writing custom adapters or relying on different language-specific libraries in each project.

MeshAway is a plug-and-play bridge that lets Copilot SDK communicate with ACP agents beyond Copilot CLI. The goal is to keep this layer minimal so developers can use different CLI agents without rewriting their stack. It also includes an optional web interface (hub) for debugging sessions and trying prompts in a playground.

Curious if others are running into this fragmentation problem and how you’re approaching interoperability today.

GitHub: https://github.com/offbeatport/meshaway

Would love your thoughts!
Show HN: Poirot – A native macOS companion app for Claude Code
by leocardz_ | 2026-02-26 13:09:45+00:00
Poirot is a SwiftUI app that reads your local Claude Code sessions and gives you a proper UI for browsing conversations, code diffs, extended thinking, and configuration (commands, skills, MCP servers, etc.). Runs offline, no login, under 6 MB.

Built in a weekend using Claude Code. Open source (MIT).

Demo: https://youtu.be/JLvNSRZrxdo
by jamiecode | 2026-02-26 13:10:34+00:00
SQLite is a good choice for local persistence, but the hard part is usually the retrieval strategy, not the storage. Semantic search gives you relevance but misses recency. Pure recency ordering misses the most important context. The implementations that work best tend to use a weighted combination, with the weights tuned per task type. Curious how Agent Recall handles the cold-start problem when there's no prior context to inform retrieval.
by joe_mamba | 2026-02-26 13:11:19+00:00
>I hope we (Europe) can try some things even when they are not guaranteed to succeed and generate huge profits.

If EU hopes were cookies, I would have died of obesity 100 times over. EU is bad at learning from its own mistakes and being proactive on rapid changes on the world stage. It's always reactive and then only when it's too late and its actions are always limp-dicked. See Russia's 2014 invasion of Ukraine, rise of Chinese EVs, etc

>Otherwise we are toast, though it might take some time to realise it.

We already are toast for the long term, we just ignore it via printing more money and going into more debt, while kicking the can down the road for future generations to deal with the fallout. EU's biggest economies are working around the clock on how to fund the ever growing pension and welfare deficits, how to beat Russia, and how to stop people from voting right wing, not on how to claw back and on-shore cutting edge semiconductor manufacturing.

>The concept of trying not-guaranteed things should not be so alien here on news.ycombinator.com I would think.

Yeah but someone still needs to pay for that and take a risk. And EU investors don't like risking billions of their money to try out new things that are in competition with Asia on manufacturing because we cannot compete there. Labor costs too high, regulations too high, energy costs too high, environmentalism too high, we miss critical know-how. That's why nobody is investing in EU fabs.