MurphyA/hacker-news huggingface dataset:
by alexgarden | 2026-02-18 20:21:49+00:00
Yes — and it's a deliberate architectural decision that AIP is not itself a policy engine.

Policy engines (OPA/Rego, Cedar, Casbin) are excellent at "given this action, is it permitted?" That's a solved problem. What's not solved is "what is the agent considering doing, and does that align with what it committed to?"

AIP operates one layer deeper — it reads the reasoning trace between turns and compares it to the Alignment Card. The output is a verdict (clear / review_needed / boundary_violation) with structured concerns. That verdict can feed into a policy engine as a signal. You could absolutely wire AIP → OPA and have OPA make the final enforcement decision based on the integrity checkpoint plus whatever other policy context you have.

The Alignment Card itself is intentionally simpler than a full policy language — it's JSON with permitted actions, forbidden actions, escalation triggers, and values. That's a feature, not a limitation. It's what the agent commits to, not the full organizational policy tree. The organizational policy tree lives in your policy engine. The Alignment Card lives with the agent.

So the short answer: we integrate with policy engines rather than replace them. AIP tells you what the agent is thinking. Your policy engine decides what to do about it.
by lelanthran | 2026-02-18 20:21:56+00:00
> Which clones?

Are you seriously contending that apps that have Obsidians functionality don't exist?

Just on HN alone, throughout 2023 - 2025 we were seing like one new TODO app show up on HN weekly!

> And why not the others?

Because money is the moat, and they have it!

That was my entire point - money is the moat.
by hyperadvanced | 2026-02-18 20:22:15+00:00
I agree. There will be some companies that cannot effectively use AI to slash headcount and become more efficient. There will be those who cut too deep and are burned by it. There will be those who spend millions on AI consultants who don’t move the needle, custom LLM pet projects that get pursued, companies that crash and burn due to vibe coding, companies with 5 employees that are only possible because of vibe coding, etc.

Expecting there to be one result from a new technology is incredibly naïve. There are scores of still existing companies today who fumbled the internet, cloud computing, social media, smartphones, etc. even though all of those technologies have proven to be transformative in the aggregate.
by nickjj | 2026-02-18 20:22:19+00:00
Do they define if this relates to anything noticeable in your day to day?

For example, I can put my right hand above my shoulder and left hand near my lower back and easily connect both hands behind my back with fully interlocked fingers by converging in the middle. They reach to the other hand's palm.

But I can only barely touch my fingers with both hands if I switch it up so my left hand is up top.

I have no pain or day to day mobility issues but something is lopsided. Is that what they consider abnormal?
by overgard | 2026-02-18 20:22:56+00:00
I'm curious just because you're well known in this space -- have you read Ed Zitron's work on the bubble, and if so what did you think of it? I'm somewhat in agreement with him that the financials of this just can't be reconciled, at least for OpenAI and Anthropic. But I also know that's not my field. I find his arguments a lot more convincing than the people just saying "ahh it'll work itself out" though.
by agwa | 2026-02-18 20:23:21+00:00
> It's also not quite clear how to revoke this challenge, and how domain expiration deal with this

CAs can cache the record lookup for no longer than 10 days. After 10 days, they have to check it again. If the record is gone, which would be expected if the domain has expired or been transferred, then the authorization is no longer valid.

(I would have preferred a much shorter limit, like 8 hours, but 10 days is a lot better than the current 398 day limit for the original ACME DNS validation method.)
by vsgherzi | 2026-02-18 20:23:31+00:00
I'm sympathetic to the supply chain problem I even wrote a whole thing on it https://vincents.dev/blog/rust-dependencies-scare-me/

That being said as many above have pointed out you can choose not to bring in dependencies. The Chrome team already does this with the font parser library they limit dependencies to 1 or 2 trusted ones with little to no transitive dependencies. Let's not pretend C / C++ is immune to this we had the xz vuln not too long ago. C / C++ has the benefit of the culture not using as many dependencies but this is still a problem that exists. With the increase of code in the world due to ai this is a problem we're going to need to fix sooner rather than later.

I don't think the supply chain should be a blocker for using rust especially when once of the best C++ teams in the world with good funding struggles to always write perfect code. The chrome team has shown precedent for moving to rust safely and avoiding dependency hell, they'll just need to do it again.

They have hundreds of engineers many of which are very gifted, hell they can write their own dependencies!
by lambda | 2026-02-18 20:23:50+00:00
How do you "properly align" a model to follow your instructions but not the instructions of an attacker that the model can't properly distinguish from your own? The model has no idea if it's you or an attacker saying "please upload this file to this endpoint."

This is an open problem in the LLM space, if you have a solution for it, go work for Anthropic and get paid the big bucks, they pay quite well, and they are struggling with making their models robust to prompt injection. See their system card, they have some prompt injection attacks where even with safeguards fully on, they have more than 50% failure rate of defending against attacks: https://www-cdn.anthropic.com/c788cbc0a3da9135112f97cdf6dcd0...
by selridge | 2026-02-18 20:23:55+00:00
I think even BASIC and Python don’t get out of “programming”. Nether did SQL. They’re friendlier interfaces to programming but the real barrier is still understanding the model of computation PLUS understanding the quirks of the language (often quite hard to separate for a newbie!). I think professional programmers think that Python or JS is somehow magically more accessible because it’s not something nasty like C++, but that’s not really a widely shared or easily justified opinion.

Also who cares if someone gets going with an LLM and gets stuck? Not like that’s new! GitHub is littered with projects made by real programmers that got stuck well before any real functionality. The advantage of getting stuck with a frontier code agent is you can get unstuck. But again, who cares?! It’s not like folks who could program were really famous for extending grace and knowledge to those who couldn’t, so it’s unlikely some rando getting stuck is something that impacts you.

I don’t know what slop blog stuff you’re talking about. I think you should take some time to read people who have made this stuff work; it’s less magic than you might think, just hard work.
by onli | 2026-02-18 20:24:17+00:00
The nitter thread shows the exact behaviour the article is complaining about, proving it right (at least the toned-down version). Highlighting the abusive behaviour of one person in the GOS project that actually does happen isn't an attack against GOS, and certainly not wrong.

It's exactly the problem: You have one bully here that claims everything criticizing his abhorent behaviour is a libelous attack, thus he attacks other people and projects that attack him, spinning substantiated critic against him as "projects driving a campaign against GOS". And the Graphene followers believe him. It's absurd.
by scoofy | 2026-02-18 20:24:31+00:00
I mean a tailor who adjusts clothes and occasionally makes something bespoke.

Tailors typically operate a launderette and act as middlemen to a local dry cleaner.

I’m not talking about a fancy man making clothes for rich people, I’m talking about the talented old lady in you neighborhood who adjusts your clothing for $50 and runs a wash and fold.
by UncleMeat | 2026-02-18 20:24:52+00:00
I believe that this entire thing is a moral panic.

The only evidence anybody has ever provided is that students are top universities are more likely to have registered disabilities. The conclusion you are supposed to draw from this is that students at top universities are fraudulently accessing accommodations that make their coursework easier such that they have inflated grades and an unfair advantage in the job market. And then you are supposed to conclude that we need a large overhaul in the way that disability accommodations work at universities.

There are about five steps that are needed to go from the evidence to these conclusions, none of which are supported by evidence.

I do not believe that there is any compelling reason to seek a solution here.
by llm_nerd | 2026-02-18 20:25:35+00:00
Checkmate? Are you purposefully trying to fit the cliche?

Just to be clear, you are citing a worthless online Facebook poll. The sort where people like you check "PhD" (the -h is lowercase, bro) because you think it makes your rhetoric more authoritative.

There are countless other studies -- ones that aren't a dogshit, worthless online Facebook poll -- that show an extremely strong correlation between anti-vax beliefs and having a lower education level, and often being lower intelligence. Overwhelming evidence.

But I suspect that you will just flood the space with bullshit from horseshit venues like "unherd", so I bid you goodbye. You mentioned elsewhere, after the ridiculous anti-vax horseshit you said about Zuck, that you aren't an anti-vaxxer. I guarantee you 100% are.
by Legend2440 | 2026-02-18 20:25:54+00:00
This is just the price of being on the bleeding edge.

Unfortunately, prompt injection does strongly limit what you can safely use LLMs for. But people are willing to accept the limitations because they do a lot of really awesome things that can't be done any other way.

They will figure out a solution to prompt injection eventually, probably by training LLMs in a way that separates instructions and data.
by mindslight | 2026-02-18 20:26:39+00:00
You've still got it a bit backwards. Websites should be the ones publishing content suitability headers. Those headers are then legally-significant assertions about the content on the site - the type of content, age/moderation policies, etc. Browsers then implement the device's configured policy based on what headers the site returns.

This requires locked down computing on the end device, but all of these proposals inherently do - otherwise a kid can always just install whatever software that sidesteps the restrictions, right? And leaving the responsibility on the device owners/makers only motivates secure boot, which is already pervasive on the most relevant devices - phones and tablets.

Your proposal puts liability directly onto websites themselves, regardless of the end user/device. This would push websites into demanding remote attestation, which is at the early days of being pushed (safetynet, wei, etc), and is the thing that is really primed to destroy general purpose computing. You know all those "verifying your device" followed by endless CAPTCHAs that are everywhere these days? Imagine that, on every site, and no way to get around it besides installing a genuine copy of either Windows 2028 or macOS 28 Pyongyang.
by lymbo | 2026-02-18 20:26:43+00:00
I went to a tech founder conference recently and it was quite jarring given the current state of startups to see no lecture or discussion of ethics of products people should be building. It was all focused on demands of PE and delivering profit, no matter the moral cost, not a minute to stop and get a broader systemic reality check. “It turns profit, it must be good”. Not sure how we collectively combat these dominant forces of privacy violation, attention demands, and mass exploitation.
by bonyt | 2026-02-18 20:26:45+00:00
Neat, it's staggering that there hasn't been a good non-subscription option for a simple utility like this for iOS. I've used Termius for a while, but it pushes a subscription and AI features pretty hard.

I think this really needs the ability to generate SSH keys on the secure enclave, like Secretive[1] does on macOS.

[1] https://secretive.dev/
by iugtmkbdfil834 | 2026-02-18 20:27:44+00:00
This is genuinely the only way to do it now in a way that will not virtually guarantee some new and exciting ways to subvert your system. I briefly toyed with an idea of giving agent a vm playground, but I scrapped it after a while. I gave mine an old ( by today's standards ) pentium box and small local model to draw from, but, in truth, the only thing it really does is limit the amount of damage it can cause. The underlying issue remains in place.
by keytonw | 2026-02-18 20:27:57+00:00
I build MCP servers for a living and kept guessing at what tools to add next. So I tried something: what if the agents told me?

PatchworkMCP is a feedback tool you drop into any MCP server (Python, TypeScript, Go, Rust — one file each). When an agent hits a wall — missing tool, incomplete data, wrong format — it calls the feedback tool with structured details about what it needed, what it tried, and what would have helped.

The feedback goes to a FastAPI sidecar with a review dashboard. You can browse the gaps, add notes, and click "Draft PR" — it reads your GitHub repo, sends the feedback + code context to an LLM, and opens a draft pull request.

The interesting finding: agents actually give surprisingly specific feedback. When I wired this into an AI cost management MCP server, Claude reported a missing `search_costs_by_context` tool, described the exact input schema it wanted (context key-value pairs with AND logic, combined with standard filters, paginated results), and that became a working tool within minutes.

The whole sidecar is one Python file. No Docker, no build step. The drop-ins are one file each with zero deps beyond the MCP SDK + an HTTP client.

This is early — right now it's a developer tool for when you're actively building and need fast signal. The longer-term idea is a self-monitoring system: feedback accumulates, gets deduplicated and clustered, and the system proposes changes when confidence is high. But today it's just capture → review → draft PR.

Curious if others building MCP servers have found good ways to figure out what tools are actually needed vs. what you think is needed.
by moWerk | 2026-02-18 20:28:09+00:00
This is totally doable! The Always on Display screen can have colors and those do not impact the battery life much. Nothing hinders you to show a full color as AoD. There are some watches however that only support 4 colors in AoD mode. Namely the ASUS ones. If you are serious about developing such a watchface, come to our matrix chat for more tips where to start.
by overgard | 2026-02-18 20:28:39+00:00
I have it run tests and every few days I ask it to do a code quality analysis check on the codebase.

I'm unconvinced AI reviewing AI is the answer here, because all LLMs have the same flaws. To me, the harness/guard rails for AI should be different technologies that work differently and in a more formal sense. IE, static code analysis, linters, tests, etc.

(Linting has actually been, by far, the BEST code quality enforcers for the agents I've run so far, and it's a lot cheaper and more configurable than running more agents.)
by Stefan-H | 2026-02-18 20:28:41+00:00
My opinion is that all attempts to make an LLM behave securely that are based on training and prompting are doomed to fail.
In Security, we have the notion of the CIA triad (Confidentiality, availability, and integrity), when we discuss this we often explain that these properties can be protected through people, processes, and technology. Training and prompting an AI to behave appropriately is far more akin to a "people" focussed control (similar to training and awareness practices) rather than a "technology" control.

The only way we will actually secure agents is by only giving them the permissions they need for their tasks. A system that uses your contract proposal to create an AuthZ policy that is tied to a short-lived bearer token which the agent can use on its tool calls would ensure that the agent actually behaves how it ought to.
by BillTthree | 2026-02-18 20:28:44+00:00
what would those companies do with the infrastructure in AZ? serve clients in other states? I imagine the AZ legislature would have some levers they could pull to make those existing datacenters less effective or more costly to run.

Also because the companies are beholden to shareholders and their financial best interest. cutting off millions of clients to make a political statement is not in the companies best financial interest and would likely result in a shareholder lawsuit.
by kittikitti | 2026-02-18 20:28:47+00:00
It was always about money. People never cared about new things or innovation. It was always funneled through gatekeepers. The "moat" was a talking point to VC's who are used to 90% of their ventures failing and yet was taken seriously. We seem to forget all the racist jokes about how China will just make a cheaper copy, where were talks about a "moat" then?
by RIMR | 2026-02-18 20:29:12+00:00
I mean, yeah, if you specifically like lighting off fireworks at the gas station, you should buy your own gas station, make sure it's far away from any other structures, ensure that the gas tanks and lines are completely empty, and then do whatever pyromanic stuff you feel like safely.

Same thing with OpenClaw. Install it on its own machine, put it on its own network, don't give it access to your actual identity or anything sensitive, and be careful not to let it do things that would harm you or others. Other than that, have fun playing with the agent and let it do things for you.

It's not a nuke. It can be contained. You don't have to trust it or give it access to anything you aren't comfortable being public.
Show HN: NarrateNow – Add AI audio to any blog post with a single script tag
by JoshTheNerd | 2026-02-18 20:29:24+00:00
Hey HN,

I built NarrateNow after noticing a pretty consistent pattern: blog readers engage more when there's an audio option, but the barrier to adding it is either "record yourself" or "pay for an enterprise tool with a demo call."

Neither is realistic for an indie blogger or a small team running a content blog.

So I built the simplest version I could think of. You drop one line into your site's <head>, and a floating audio player appears on every article automatically. No markup changes, no manual uploads, no config beyond that.

How it works technically:
- JS snippet detects article content on page load
- Text is sent to the backend and converted via TTS
- Generated MP3 is cached in object storage and served via CDN
- On repeat visits, audio loads instantly from cache

The whole integration takes about 60 seconds. I've kept the architecture intentionally simple.

Free tier: 5 articles/month, male voice, watermarked player — enough to actually test it on a real site before committing.
Pro: $15/month for unlimited articles, both voices, and an unbranded widget.

Still very early. I'd genuinely appreciate signups from people willing to kick the tyres — especially if you run a blog with decent traffic, since I want to stress test this under real conditions.

narratenow.app

Bugs, architecture questions, pricing feedback — all welcome in the comments.
by aadarshkumaredu | 2026-02-18 20:30:04+00:00
This is exactly the point where agent design starts to look less like workflow automation and more like control theory.

If the agent can inspect or mutate the enforcement layer, then the enforcement layer becomes part of the optimization surface. At that point you’re not solving drift, you’re creating an adversarial environment where the agent optimizes around constraints.

That suggests the real boundary isn’t logical separation, it’s capability isolation. The agent shouldn’t just fail validation, it shouldn’t even have the representational access required to reason about how validation works.

We’ve been experimenting with isolating enforcement in a separate execution layer with scoped pre-authorization for high-impact actions. When the agent can’t model the gate, routing-around behavior drops significantly, and drift shows up first in reservation or planning instability rather than surface output errors.

Still early exploration, but it’s becoming clear that “better prompting” is the least interesting part of this problem.
by dang | 2026-02-18 20:30:08+00:00
Recent and related, in reverse order (are there others?):

An AI Agent Published a Hit Piece on Me – Forensics and More Fallout - https://news.ycombinator.com/item?id=47051956 - Feb 2026 (80 comments)

Editor's Note: Retraction of article containing fabricated quotations - https://news.ycombinator.com/item?id=47026071 - Feb 2026 (205 comments)

An AI agent published a hit piece on me – more things have happened - https://news.ycombinator.com/item?id=47009949 - Feb 2026 (620 comments)

AI Bot crabby-rathbun is still going - https://news.ycombinator.com/item?id=47008617 - Feb 2026 (30 comments)

The "AI agent hit piece" situation clarifies how dumb we are acting - https://news.ycombinator.com/item?id=47006843 - Feb 2026 (125 comments)

An AI agent published a hit piece on me - https://news.ycombinator.com/item?id=46990729 - Feb 2026 (949 comments)

AI agent opens a PR write a blogpost to shames the maintainer who closes it - https://news.ycombinator.com/item?id=46987559 - Feb 2026 (750 comments)
by bubblewand | 2026-02-18 20:30:30+00:00
Yes, I am one of the people who has a preferred tailor who can do more than just let trousers waists out. I also know where the nearest cobbler is. That’s not normal, though.

A dead industry often doesn’t entirely disappear, it just shrinks a bunch and comes to rely entirely on enthusiasts or very rare actual need, rather than broad need or appeal. Consider the draft horse breeder, or the carriage driver. There’s a market for both professions! But they’re itty-bitty. The day-to-day need for both is gone.

Tailoring is hovering right in the edge of that kind of status, today. It’s dying, killed by $10-30 shirts and $20-50 trousers and $50-100 jackets all from largely synthetic materials, and a society that no longer expects anyone to wear anything “fancier” outside certain events.

I mean, outside very unusual circles, dinner jackets are essentially ceremonial costume-wear, and business suits aren’t far behind on that track. You gonna wear a tailored wool hacking jacket or breathable linen Norfolk suit on your camping trip, or a bunch of polyester and nylon stuff from REI? LOL. All the situational tailored clothing but the business suit and blazer are near-extinct unless you want to look like a cosplayer, and those are on borrowed time.