MurphyA/hacker-news huggingface dataset:
Ask HN: What invariants matter most to prevent drift in AI-modified SaaS apps?
by RobertSerber | 2026-02-21 18:19:15+00:00
Hi HN,

I’m experimenting an AI-native runtime for long-lived CRUD/workflow/dashboard apps where the LLM proposes changes, but the backend compiles them before anything is applied. The big pain isn’t first-generation code — it’s the 2nd/3rd iteration where “valid JSON” still breaks the system over time.

What we’re enforcing so far (opinionated + compiler-style):

No broken joins when entities evolve (canonicalized model + link/type-check; cross-refs must remain valid)

Repeatable migrations across tenants (migration preview + deterministic plan; append-only history; rollback path)

No RBAC drift: any permission change that widens scope is classified as semantic-breaking and requires explicit acknowledgement

No data drift for UI bindings: components bind to named datasets/metrics (semantic IDs) rather than ad-hoc queries; contract mismatches fail fast or require mapping

Semantic diffs surfaced (meaningful change summaries) instead of raw JSON diffs

This feels less like “no-code” and more like solving a lifecycle problem: making schema evolution and invariants a first-class workflow — almost a domain OS for vertical SaaS. Not really an ai no-code rather than a no-drift

Questions:

Which invariants are worth enforcing at runtime vs CI/evals? (metrics meaning, workflows/stages, permissions scope, etc.)

For “semantic drift”, what’s a robust pattern to represent meaning so it’s machine-checkable? (semantic IDs + versioning? fingerprints?)

Any prior art / systems that got this right (schema evolution workflows, semantic diffing, policy normalization)?

Looking for patterns and failure modes from people who’ve shipped long-lived systems.
by dingaling | 2026-02-21 18:19:42+00:00
> I'm incredibly angry about having lost freedom of movement.

I think this was indicative of much of the thinking on both sides of the debate though; focusing tightly on a single, subjective aspect for or against.

"Why the EU is important / abhorrent to me right now?" rather than something like "What is the anticipated future nature of the EU and what does that mean for the UK?"
Show HN: Hmem – Persistent hierarchical memory for AI coding agents (MCP)
by Bumblebiber | 2026-02-21 18:19:47+00:00
My Claude told me to post this here :D

AI coding agents have two memory problems that CLAUDE.md and Rules files don't solve: (1) long conversations get compressed and context silently disappears — the agent forgets decisions made 2 hours ago in the same session, and (2) memory is locked to one tool on one machine. Switch from Claude Code to Cursor, or from your laptop to your desktop, and everything is gone.

I built hmem to fix both. It's an MCP server that gives AI agents persistent, hierarchical memory stored in a local SQLite file. The same .hmem file works across Claude Code, Cursor, Windsurf, OpenCode, and Gemini CLI — on any machine. Your agent's knowledge is portable.

The key idea is borrowed from how human memory works: you remember rough outlines first and recall details on demand. hmem has 5 depth levels. At session start, the agent loads only Level 1 summaries (~20 tokens). It drills deeper into specific memories only when needed — L2 for context, L3-L5 for raw details. Unlike a flat MEMORY.md that gets injected wholesale (3000-8000 tokens every time), hmem loads only what's relevant.

Install: `npx hmem-mcp init` (interactive setup — detects your installed tools and writes the MCP config).

This is beta software. I've been using it in production across two machines with 100+ memory entries and it's been stable, but the API surface may still change. Would appreciate feedback.

GitHub: https://github.com/Bumblebiber/hmem
npm: https://www.npmjs.com/package/hmem-mcp
License: MIT
by roryirvine | 2026-02-21 18:20:08+00:00
It seems overkill for what is actually a pretty tiny company - I doubt they would be big enough to trigger those sort of incentives, at least for the UK and Singaporean entities (Latvia or Turkey might, I suppose, be different - but then why bother routing it through the UK?).

I'd guess that the happy case is going to be that, yes, this structure was forced on them as a by-product of sanctions or similar negative trade policies. But I'd be worried that the software business is actually a front for something else, which would suggest that OnlyOffice might be more vulnerable to changes in legal climate than most other projects of that size.
by alsetmusic | 2026-02-21 18:20:13+00:00
> The algorithm takes that post and shows it to randomly selected men who often interact with pictures of attractive female teenagers, even though none of your other posts get shared like this outside of your connections.

What evidence suggests this?

I don't use any Meta services and I absolutely hate them and consider them evil. I know they do awful, terrible things and if someone has evidence of this I will believe it given Meta's track record. But this is far enough outside my current understanding of the awful things that they do, or people claim they do, that it needs a source.
by mistercheph | 2026-02-21 18:21:12+00:00
You said, "There is just no reasonable way that the open source community can compete with a $3.8T company." But, Linux has completely decimated Microsoft's presence in the server and embedded markets. Look at what Microsoft was doing in the mid-2000's, they had a healthy server OS business, and they were spending billions trying to get Windows in embedded stuff (https://en.wikipedia.org/wiki/Windows_Embedded_Automotive)and it was a total failure because they could not compete with open source software, in the end, it wasn't even close.

These are markets far bigger than the consumer desktop licensing market where Microsoft can't even make a dent into Linux's dominance, this represents >$100B in annual lost revenue for microsoft. So yes, Linux already won, and it won big time, despite going up against the MSFT behemoth as you say.

Global Linux desktop usage is at about ~5% and growing while Windows is bleeding out and dying. And Microsoft doesn't care, go read their earnings reports to see why, their consumer desktop business does not matter except for it's ability to generate leads and demand for their actual core products. And geopolitical levers are also in Linux's favor, I'll highlight EU's straining relationship with the US: dependence on US software in general is a threat to European independence, and stifles Europe's domestic software industry, the moves European governments were already taking away from US tech products while funding domestic (often open source) alternatives is going to continue to accelerate:

- https://cordis.europa.eu/project/id/101135795

- https://nlnet.nl/project/index.html

- https://www.linuxjournal.com/content/denmarks-strategic-leap...

- https://www.theregister.com/2025/10/15/schleswig_holstein_op...

And to answer your original question again, yes, open source software can compete, and it often can compete with a comical fraction of the resources of its closed source competitor. It's not a surprise: The open source model works extremely well and is the most efficient way to build software and technology that we know of; human beings have been sharing technology in this way for the duration of recorded history.
by skybrian | 2026-02-21 18:21:24+00:00
It’s good that it’s voluntary, but that’s not really what I’m getting at. People voluntarily spend money in Vegas and buy meme coins too.

This doesn’t tell us all that much about whether a price signal is a valuable source of information. Often, people have varied interpretations of what a price movement means. The price doesn’t tell you how to interpret it. The obvious interpretation can be wrong.
by joe_mamba | 2026-02-21 18:21:30+00:00
NO you see, we have to hate Chinese companies because they are unfair competitors who get state funding from the Chinese government, unlike Intel, Micron, TSMC, ASML, Samsung who don't get state funding from the US, EU, Taiwan, ROK ... oh wait.

Scratch that, we have to hate Chinese companies because they do business with the Chinese military, unlike Intel, Nvidia, Samsung who don't do business with the US and ROK military ... oh wait.
by adrian_b | 2026-02-21 18:21:33+00:00
That older spelling is the reason why "w" is called "double u".

Had the word been written "wif", I don't think that there would have been any need for you to search the word, as the relationship with "wife" would have been obvious.

Between then and now, in this word only the pronunciation of "i" has changed, from "i" like in the European languages to "ai".
by DrewADesign | 2026-02-21 18:22:02+00:00
Like denying that more efficiency without a commensurate increase in product demand means the demand for labor goes down, which means fewer jobs, and lower salaries? You don’t pay people what they’re actually worth, you pay people what they’ll work for. Requesting more money because you’re making the company more money is only viable if there aren’t qualified people lining up for the chance to take your role. Even without more money, well-paid people tend to regrettably get laid off in those circumstances.
by array_key_first | 2026-02-21 18:22:06+00:00
The main problem I have this with real-world analogies we use for hacking is we assume that, like a home owner, these companies ultimately care about security and are in good-faith trying to make secure systems.

They're not. They're malicious actors themselves. They will expose the absolute maximum amount of data they can with the absolute maximum amount of parties they can to make money. They will also collect the absolute maximum amount of data. Your screen is 1920 by 1080? Cool, record that, we can sell that.

All the common sense practices we were taught in school about data security, they do the opposite. And, to top it off, they don't actually want to fix ANYTHING because doing so threatens their image, their ego, and potentially their bottom line.
by shablulman | 2026-02-21 18:22:08+00:00
It’s interesting to watch the growing tension between the speed of social media amplification and the much slower, deliberate process of official verification. Even with systems like Community Notes, there is a significant technical gap when high-velocity content outruns the capacity for an authoritative correction. It really highlights the challenge of maintaining a shared information baseline when the friction of distribution has essentially vanished, while the friction of verification remains necessarily high.
by joecool1029 | 2026-02-21 18:22:13+00:00
> My iPhone SE (1st gen) ended up being pushed apart from the inside last year because the battery had swelled up.

Let’s put aside that this is a 10 year old phone now and well and truly obsolete, you actually didn’t get the basic maintenance done. Batteries all fail and degrade with time, especially if abused and left in extreme heat.

The original SE had perhaps the most user replaceable battery in an iPhone. No parts serialization, aside from the touchid cable being a little finicky it is an easy and cheap battery swap. Also it was probably degraded for some time so you were getting CPU throttling to keep it from randomly shutting off.

I do not understand people like you. Do you buy a car and never change the oil or tires, then complain it breaks and buy a new one?

It is pretty much a requirement now to either greatly overpay for a battery replacement from Apple or get a service plan from them, or just limp along with worn out shit and hope it doesn’t blow the back off. Can’t DIY or goto a third party repair shop, the battery is paired to the device.

Finally, before we even get into the ‘trivially easy to replace’ end user design, it’s not going to fix the problem of the asshole that won’t pay $10 for a batt in their bulging $500-1200 idevice. I saw this all the time with laptops that did have easily replaceable packs, people just didn’t do it. They’d just live with 20min battery if they were lucky and run it into the ground.

To top it all off you then go onto weird virtue signaling about children breathing recycling fumes, how about you climb off your high horse and maintain your own equipment for a change? Maybe stop fighting against the people that DO want to be able to maintain their own equipment.
by EvanMcCormick | 2026-02-21 18:22:35+00:00
BetaZero is a free web application which allows users to generate, edit, and share board climbs. It currently supports the Kilter, TB2 and Decoy boards, with Moonboard 2016, 2019 and 2024 to be added next week. However, the underlying generative model works on any 2D system board, so long as that board is angled between 0* and 90* and the holds are properly formatted (For reference, this model was not trained on the Decoy board, so it's performance there is indicative of its general performance across home walls of a similar nature).

When I built my first homewall last year, I was psyched. 200 holds I could set however I wanted, and countless potential climbs to project. However, I quickly noticed that something was missing from this experience: Variety. I wanted the joy of opening an app, scrolling to some random climb I'd never have come up with myself, and projecting it.

At first I messaged my friends and asked them to couch-set some climbs for me. But my friends all live in Colorado while I'm stuck in upstate NY. They did send me some climbs, but having never actually climbed on my wall, most of their sets were impossible or too easy. I also tried setting climbs on international boards via Stokt, but with similarly lackluster results.

So... I built a generative model to set climbs on my homewall. It went through a couple of iterations.

V1. ClimbLSTM: LSTM Model trained on my homewall
V2. ClimbDDPM: Diffusion Model trained on the BoardLib dataset
V3. BetaZero, a free web app powered by ClimbDDPM.

Next steps include integration of an account/security system, and allowing users to upload, edit, and set climbs for, their own custom walls. (I already have a functional API for uploading and editing walls; its how I added the current set of boards to the database. However, there is not yet a security/permissions system to control who can edit/see which walls. I also want to improve the scalability of the app, and train an improved diffusion model, based on what I've learned from the prior training run.
by Bumblebiber | 2026-02-21 18:22:58+00:00
Author here, happy to answer questions.

Some background: I run a multi-agent AI system (orchestrator + specialized agents) across multiple machines. Two things kept biting me:

1. *Context dilution:* In long sessions, earlier context gets compressed or dropped. The agent "forgets" decisions made hours ago — not because the session ended, but because the context window silently pushed them out.

2. *Vendor/machine lock-in:* I switch between Claude Code, Gemini CLI, and OpenCode depending on the task. And I work on two PCs. CLAUDE.md only works in Claude Code, on one machine. There was no way to carry knowledge across tools or devices.

hmem solves both: it's a single .hmem file (SQLite) that any MCP-compatible tool can read/write. Same memory, any tool, any machine.

The lazy loading is key — the agent never reads the database directly. It makes tool calls and gets back only what it asked for. A typical session start costs ~20 tokens for the L1 overview. Drilling into one specific topic costs ~80 tokens. Compare that to a MEMORY.md that injects 3000-8000 tokens wholesale every time.

Technical details:
- SQLite backend (better-sqlite3), one .hmem file per agent
- 5-level hierarchy with dot-path addressing (e.g., L0003.2.1)
- Entries are auto-timestamped, support time-range queries
- Full-text search across all levels
- Configurable category prefixes (defaults: P=Project, L=Lesson, E=Error, D=Decision, M=Milestone, S=Skill, F=Favorite)
- Favorites are always loaded at depth 2 (pinned context)
- Includes integrity checks — auto-backup on corruption detection

What's next:
- Cloud sync between machines (encrypted, probably git-based)
- Memory forks — think GitHub repos but for agent memories (fork a curated react-patterns.hmem as a starting point)
- Better onboarding docs and a demo video

This is a genuine beta — I use it daily but it hasn't been battle-tested by others yet. If you try it, I'd love to hear what breaks or what's confusing about the setup.
by e-khadem | 2026-02-21 18:23:27+00:00
People read Shahname[1] regularly in Iran, and it was written at around 1000 CE, but there isn't much before 900 CE that is comprehensible to a modern day Persian speaker.

[1] https://en.wikipedia.org/wiki/Shahnameh

The Shahnameh is a long epic poem written by the Persian poet Ferdowsi between c. 977 and 1010 CE and is the national epic of Greater Iran. Shahnameh is one of the world's longest epic poems, and the longest epic poem created by a single author.
by pbhjpbhj | 2026-02-21 18:24:38+00:00
I don't know what your problem is, your comments so far are all low effort and not really contributing to the conversation.

Your language is not acceptable here.

If you're not already shadow-banned I suspect that's the way you're heading.

Have a word with yourself. (A British idiom, meaning to consider what you're doing, particularly in terms of morality and cultural acceptability.)
by rekabis | 2026-02-21 18:24:45+00:00
Not mentioned, because it’s a direct competitor: CamelCamelCamel.com, which IMO is a much superior product.

Not only does it have a browser extension - making it much easier to start tracking an item - but that extension also shows a graphical price history across three separate categories: sold by Amazon, 3rd party new, and used items.

Sure, it has its warts, with many to most owing to how Amazon has structured its data. For example, it can really only track price before shipping, so 3rd party new and used items can look like a bait-and-switch if the seller is using nosebleed-high shipping to paper over a price discount. Still, that does help a buyer to manually reject such “offers”, with the unfortunate side effect being alerts that they have to ignore.
Execution Containment for Tool-Using AI Agents
by SpaceCypher | 2026-02-21 18:25:00+00:00
I wrote a technical essay defining execution containment as a structural property for tool-using agents.

The core idea is binding runtime authority to a pre-declared execution graph using cryptographic capability tokens.

It focuses strictly on execution containment, not semantic exfiltration or prompt injection.

Full essay:
https://spacecypher.substack.com/p/execution-containment-for-tool-using

Happy to answer questions about scope or limitations.
Show HN: Wiredigg – Real-Time Network Analysis with ML and Ollama Support
by justvugg | 2026-02-21 18:26:54+00:00
I built Wiredigg, an open-source network traffic analysis and security tool written in Python. It combines real-time packet capture, protocol inspection, machine learning-based anomaly detection, and local LLM analysis via Ollama.

The goal is to provide interactive network visibility with AI-assisted threat interpretation, while remaining local-first and easy to run. A Windows executable build is also available.

Repo: https://github.com/JustVugg/Wiredigg

⸻

What it does

Real-time packet capture
• Live traffic sniffing
• Protocol analysis (TCP, UDP, ICMP, HTTP, etc.)
• Filtering by IP, port, and protocol
• Promiscuous mode support

Machine learning anomaly detection
• Detection of unusual traffic patterns
• Threat classification with severity levels
• False-positive marking and incremental retraining
• User-assisted model refinement

Ollama integration (local LLM)
• Sends flagged anomalies to a locally running model via Ollama
• Generates contextual, human-readable explanations
• Adds reasoning on top of statistical detections
• Fully offline if Ollama is local

Threat intelligence & dashboards
• Malicious IP/domain checks
• Interactive tables and traffic statistics
• Graph-based visualizations
• Exportable reports (HTML, JSON, text)

IoT & device analysis
• Device identification and classification
• Behavioral pattern analysis
• Risk evaluation based on traffic activity

Custom packet tools
• Manual packet crafting for testing
• Control over IP, port, protocol, and payload

Running it

From source:

git clone https://github.com/JustVugg/Wiredigg
pip install -r requirements.txt
python wiredigg.py

Administrator/root privileges are required for packet capture.

Alternatively, you can use the provided Windows .exe build.

⸻

Why I built it

Many packet analyzers are either:
• CLI-heavy and technical
• Or large enterprise systems

I wanted something:
• Visual
• AI-augmented
• Local-first
• Extensible in Python
• Usable for labs, small networks, and learning

Happy to get feedback, especially on the ML and Ollama integration approach.
by imiric | 2026-02-21 18:27:30+00:00
Fair enough. Things are always more complicated at scale.

But then again, we don't know whether this company is maintaining this infra themselves, or if they're paying for API access. Besides, if anything, running their own servers is often the more cost-effective option, so the details you mention might not matter in practice.

My incredulity has more to do with the profitability of this type of software, considering that the free options are good enough for the average person, and that the features promoted in the article are hardly innovative.

> There is no money to be made without whoring out your user’s privacy.

Well, I do object to that. It's certainly possible to sustain a profitable business without selling out your users' data. It may not be as profitable as the advertising model, which is often too enticing for companies to ignore. This company explicitly says that their income comes directly from customers, so apparently I'm underestimating the amount of people who find these features valuable enough to pay for them.
by efim_bushmanov | 2026-02-21 18:27:30+00:00
Optical microscopy is even interacting and destroying cell in infrared or don't see small molecules on ~400nm UV because of diffraction.

Raman combination scattering, allows to find moleculas and not interract with them.

Its keystone for make possibility 'to see' live cell with molecules in dynamic, without disrupting it. And make full virtual 3D of live human cell.

--
If technology will be created = problem solved. Investing here i mean, into actions to investigation into current and future possible technology, and to construct it.

Its not about sell something to others, its about make humanity to fight diseases, cancer, aging. And about that you can be part of it. Proudly called youself Investor who help bring humanity to new era.
by jvanderbot | 2026-02-21 18:27:43+00:00
A friend and roomate of mine had his first break after a night like this.

He overindulged on his first use, slept it off, and woke up a paranoid schizophrenic. Paced around the house talking to himself and accusing me of things.

Perhaps unrelated but I find it hard to believe. His parents came and were very mad at me, took him away and I never spoke to him again. His father suffered from it as well I later found out.
by maccam912 | 2026-02-21 18:27:47+00:00
I don't have one going but I do get the appeal. One example might be that it is prompted behind the scenes every time an email comes in and it sorts it, unsubscribes from spam, other tedious stuff you have to do now that is annoying but necessary. Well that is something running in the background, not necessarily continuously in the sense that it's going every second, but could be invoked at any point in time on an incoming email. That particular use case wouldn't sit well with me with today's LLMs, but if we got to a point where I could trust one to handle this task without screwing up then I'd be on board.
by arnvald | 2026-02-21 18:27:58+00:00
IMO Facebook has a bigger problem - I’m a millennial, far closer to a middle aged man than to a teenager, and I don’t want to be on Facebook because it’s so full of garbage. There’s just nothing interesting except for Market.

Surely there’ll be a follow up to TikTok and other trendy apps, but Facebook is where I should want to be, and I don’t