MurphyA/hacker-news huggingface dataset:
Show HN: Open-source KYC plugin for Claude – 95min→27min, £85K→£240/year
by vyayasan | 2026-02-24 21:40:06+00:00
Hi HN,

Just launched an open-source compliance plugin for Claude Cowork after seeing fintech teams pay £60K+ for platforms that orchestrate free public data.

UK fintech pilot (30 days, 5 analysts):
• 95 minutes → 27 minutes per case
• £85K annual platform cost → £240/year (Claude Pro)
• Uses only free data: OFAC, UN, EU, Companies House, OpenSanctions

17 mandatory human-in-the-loop checkpoints. No auto-approvals. Deterministic risk scoring (MLR 2017 formulas). MIT licensed.

Launching today because Claude just announced Cowork plugin updates: https://www.linkedin.com/posts/claude-ai_were-introducing-up...

Testing if foundation models can replace compliance middleware for standard workflows (~70% of cases).

Demo slides: https://github.com/vyayasan/kyc-analyst/blob/main/docs/demo-...
GitHub: https://github.com/vyayasan/kyc-analyst

Happy to answer questions about LLMs in regulated environments.
by jajuuka | 2026-02-24 21:40:36+00:00
I think there was a rush during the early Intel transition because they were dirt cheap computers you can upgrade yourself and even dual boot Windows. I feel like there was another big bump for them as a set top boxes to run XBMC or something. Might be wrong though. M1 release also saw the Mini's be a cheap entry point to seeing what Apple Silicon could do.
by glenstein | 2026-02-24 21:40:40+00:00
>A related approach might be mandatory developer registration for certain extremely sensitive permissions, like intercepting notifications/SMSes...? Or requiring an expensive "extended validation" certificate for developers who choose not to register...?

I think my overriding concern is not nuking F-Droid. I actually think that's a great solution and, interestingly, F-Droid apps already don't use significant permissions (or often use any permissions!) so that might work. Also it would be good if perhaps F-Droid itself could earn a trusted distributor status if there's a way to do that.

Or a marriage of the two, F-Droid can jump through some hoops to be a trusted distributor of apps that don't use certain critical permissions.

I think there have to be ways of creatively addressing the issue that don't involve nuking a non-evil app distribution option.
by gmueckl | 2026-02-24 21:40:45+00:00
Society takes away individual's freedom to choose all the time. You can't choose not to pay your taxes. You can't choose to board a passenger plane without passing a security check. You can't just get a loan without any guarantees to the bank etc.

Education isn't really working at this global scale. It doesn't reach people the way you seem to belive it does. Many, if not most people are generally disinterested in learning new things and this gets amplified when it involves technology.
by jandrese | 2026-02-24 21:40:54+00:00
It depends. Lots of parts are shared by multiple models or even companies so it may be the case that nobody has made for example a new water pump specifically for your car for 10 years, but the design is the same as the 2025 something else so you can just use that one. There are also warehouses with older parts that can last for years. You can also pull replacements from junked cars that have not been crushed yet. In some cases third parties manufacture replacement parts when the supply runs out, but those replacements are often of poor quality and sometimes are only vaguely shaped correctly and require extra work to actually fit on your vehicle. Keeping old cars running is a challenge, especially if the car was obscure when it was new.
by sfink | 2026-02-24 21:41:10+00:00
If I were interviewing people for the position of personal assistant, I would probably find the resume entry "willing to grind up babies for food" to be a negative mark. You?

I'm not about to run OpenClaw, but I suspect similar capabilities will gradually creep in without anyone really noticing. Soon Claude Code will be able to do many of the same things. ("Run python to add two numbers? Sure, that's safe, run whatever python you want.") Given that it is now representing me in the world, yes I would not only like some guardrails, but I would also like to have some confidence that the company making those guardrails actually gives a sh*t and isn't just doing their best to fill in a checkbox. But maybe that's just me.
by maypeacepreva1l | 2026-02-24 21:41:13+00:00
Maybe it is a well researched topic but I had similar thoughts the other day. I felt like AI had its learning inverted as compared to natural intelligence. Life learned to preserve first and then added up the intelligence. For LLMs powered systems, they will learn about death from books. Will it start to dread death just like other living things. Less likely, as there are not nearly as many books on death as there should be that is proportionate to our fear of death.
by WorldMaker | 2026-02-24 21:41:18+00:00
Another in place option is AES-encrypted ZIP. ZIP has the benefits that the Directory at the end of the file can also include piecewise metadata for full file validation.

A part of me wonders if the only real upgrade needed for the next "large file" KDBX relative format is from a GZIP stream of the XML plus attachments to a ZIP container of the XML with attachments in some folder structure combined with the choice of a good piecewise (modern) encryption for the ZIP container. (That is taking more cues from 7zip than from classic, now broken password-encrypted ZIP files.)

(Though as someone who tries to keep my KDBX files small, I think I'd still prefer the option of a whole-file encrypted format.)
by tbrownaw | 2026-02-24 21:41:39+00:00
> A source familiar with the Tuesday meeting says the Pentagon said it would terminate Anthropic’s contract by Friday if the company does not agree to its terms. Pentagon officials also warned they would either use the Defense Production Act against Anthropic, or designate Anthropic a supply chain risk if the company didn’t comply with their demands.

So they're saying they won't use it if it comes with restrictions.

Either (a) it can be offered without restrictions; (b) they can take it; or (c) the government won't use it. That sounds like a comprehensive list of all the possible things that don't involve someone telling the government what it can and can't do.
by ontouchstart | 2026-02-24 21:41:40+00:00
I am not at lecture 9 yet. I would love to follow their journey at human pace just like I did 30 years ago.

I do think your point is valid.
The trend in the industry is putting emphasis on cosmetic qualities (format, workflow, testing), producing huge amount of metadata that consumes huge amount of human and machine energy for the peace of mind.

Complexity, maintainability, modularity have more to do with thinking about the problems at proper abstraction levels.

It seems we ended up spending more time on tools like writers spending more time on sharpening pencils or playing with fonts than writing something meaningful.

A low quality software can have beautiful code just like a low quality book has beautiful fonts.
by dralley | 2026-02-24 21:41:43+00:00
Independent 3rd parties were brought in to verify, though.

I already said I don't condone any instances of legitimate war crimes. I don't think enumerating everything that has ever happened by either side is very useful. But it's a fact that both sides lie flagrantly about atrocities. Lots of the footage in the early days of the war that was claimed to be from Gaza was actually recycled from the Syrian civil war.

If you want me to start listing some BS that Israel has done, fine - the calendar stunt was ridiculous (if you have followed the conflict, you probably have heard of it). What goes on in the west bank is disgraceful. There are plenty of statements by Israeli politicians that are basically genocidal language (though you can play that game with most countries, random US politicians say psychotic shit all the time).
by john_strinlai | 2026-02-24 21:42:01+00:00
amazing comment from a 13 year old account. really embodying the spirit of the HN guidelines. thanks for the warm welcome.

so, what exactly, are you basing your accusation on?

was it me saying "use noscript and reader mode" or maybe "people have different opinions"? or just by nature of having created an account after you created yours?

this sort of accusation is what will drive HN to be a shit community to participate in. just accuse anyone you slightly disagree with as being a bot/ai

im not even sure what your issue, or rezonants issue with me even is! all i said was different people have different opinions, and you two are crawling up my ass about it. lets hope we never have to talk to each other about anything slightly important.
by formerly_proven | 2026-02-24 21:42:21+00:00
> First, the bottom has fallen out of the used market creating significant buyers remorse for early adopters.

The very high deprecation is often noted but the comparison is mostly in relation to sticker price, but the high discounts plus subsidies mean that the average discount for an EV was way higher than on ICE cars. Most of the high depreciation disappears once you take into account what the first buyer would have actually paid for the vehicle (often a five-digit discount), at least in my used car market. Some models seem to actually hold their value remarkably well, particularly those with no/few known issues and no real successors.
by selridge | 2026-02-24 21:42:23+00:00
Honestly, this is good. We were already in a completely unsustainable system. Nobody had an alternative. We still don’t have one but at least now it’s not just merely unsustainable— it is completely fucked in half.

This kind of pattern is gonna get repeated in a lot of sectors when previous practices that were merely unsustainable become unsustained.
by rzerowan | 2026-02-24 21:42:24+00:00
I guess this is the point where Dario and his anti-china , national security position gets told to put up or shut up.

In trying to build a moat by FUD versus the Chines OSS labs and hyping up the threat levels whenever he got a chance, seems hes managed to convince hist target audience beyond his wildest dreams.
Monkey paw strikes again.
by zoogeny | 2026-02-24 21:42:24+00:00
One thing I have been guilty of, even though I am an AI maximalist, is asking the question: "If AI is so good, why don't we see X". Where X might be (in the context of vibe coding) the next redis, nginx, sqlite, or even linux.

But I really have to remember, we are at the leading edge here. Things take time. There is an opening (generation) and a closing (discernment). Perhaps AI will first generate a huge amount of noise and then whittle it down to the useful signal.

If that view is correct, then this is solid evidence of the amplification of possibility. People will decry the increase of noise, perhaps feeling swamped by it. But the next phase will be separating the wheat from the chaff. It is only in that second phase that we will really know the potential impact.
by mwwaters | 2026-02-24 21:42:32+00:00
The legal infrastructure for banking and securities ownership has long had defaults for liability assignment.

For securities, if I own stock outright, the company has to indemnify if they do a transfer for somebody else or if I lack legal capacity. So transfer agents require Medallion Signature Guarantees from a bank or broker. MSGs thereby require a lengthy banking relationship and probably showing up in person.

For broker to broker transfers, there is ACATS. The receiving broker is in fact liable in a strict, no-fault way.

As far as I know, these liabilities are never waived. Basically for the sizable transfers, there is relatively little faith in the user’s computers (including phones). To the extent there is faith, it has total liability on some capitalized party for fraud.

These defaults are probably unknown for most people, even those with large amounts of securities. The system is expected to work since it has been set up this way.

Clearly a large number of programmers have a bent to go the complete opposite direction from MSGs, where everything is private keys or caveat emptor no matter the technical sophistication of the customer. I, well, disagree with that sentiment. The regime where it’s possible for no capitalized entity to be liable for wrongful transfers (defined as when the customer believes they are transferring to a different human-readable payee than actually receiving funds) should not be the default.
by fragmede | 2026-02-24 21:42:37+00:00
Stealing someone's identity and pretending to be them and buying a gym membership with a fake id and a stolen credit card might seem far fetched to you, but Stripe doesn't want to be on the hook for that, especially if the scammer signs up for, say, Equinox and it isn't discovered for year+.
(ex-Stripe; didn't work directly on fraud,
however)
by mhitza | 2026-02-24 21:42:40+00:00
It was a catchy rethorical question. Desired emphasis on the fact that a smartphone is a computing device.

If you like to not be able to run whatever software you want on your computer, and the one your family owns, that's your thing.

Its another pretense, like disabling full disk encryption, where people came with these ideas (instead of other options), because its convenient to them to pretend its the right thing.
by bigyabai | 2026-02-24 21:42:43+00:00
All of them are complicit. You only need ~50 greedy sociopaths to work at Persona, and 10,000 dumb-as-rocks engineers hyped to work at Microsoft/OpenAI and "stop the bad guys" or whatever the boogeyman du-jour is.

We saw it with Bitlocker, we saw it with Client Side Scanning, we see it with Salt Typhoon. Most people that work on weaponized surveillance systems are entirely apathetic, or see themselves as righteous. Even when the system is known to be bugged, obviously flawed, or outright controlled by a foreign adversary.
by crystal_revenge | 2026-02-24 21:42:44+00:00
I honestly don't think that sounds terribly outrageous.

OpenAI and Anthropic aren't building companies that aim to be API endpoints or chatbots forever, their vision is clearly: you will do everything through them.

The gamble is that this change is going to reach deeper into every business it touches than Microsoft Office ever did, and that this will happen extremely quickly. The way things are headed I increasingly think that's not a terrible bet.
by giobox | 2026-02-24 21:42:48+00:00
Cook has repeatedly appeared at the Whitehouse to support Trump's "Made in America" agenda. While it might make economic sense regardless to do this (I've no idea either way), it's hard to separate the politics from all of this, especially when Apple have in the past obtained large tariff exemptions from the administration. The tarrif exemption was directly linked to spending on US manufacturing:

> https://www.bloomberg.com/news/articles/2026-02-24/apple-to-...

> https://appleinsider.com/articles/25/08/06/apple-exempt-from...

etc
by gglitch | 2026-02-24 21:43:29+00:00
I see the point and I wouldn't want to belabor the metaphor, but I really feel like guitar is actually extremely difficult to even get started with. Between the awkward stretching of the fingers, how difficult/painful it is to hold down strings hard enough (and close enough to the fret) to get a clean, clear note, and how hard it is to hold those strings down in such a way that your fingers don't brush against other strings, I'd say guitar is crazy hard to start. I'm saying this as someone who has been playing and enjoying guitar for decades. Beginners have a rough time of it for awhile.
by turbostack | 2026-02-24 21:43:30+00:00
Over the last year, I noticed a pattern.
AI can generate full-stack apps in minutes — but they rarely survive real production use.

Most outputs lack:

proper architecture

scalability considerations

auth & payment structure

clean project boundaries

So I built TurboStack.

It’s a production-ready SaaS foundation designed to work with AI-generated code instead of fighting it.

Stack includes:

Next.js

Elysia

Type-safe architecture

Auth & subscription-ready structure

Clean domain boundaries

The goal is simple:
Stop rebuilding. Start shipping.

I’d love feedback from builders who are using AI in real product development.
by nemooperans | 2026-02-24 21:43:34+00:00
Having built and run agentic systems in production — the "why not agents managing agents" question has a practical answer: the orchestration layer is where the most expensive mistakes happen. Trust boundaries, escalation decisions, when an agent should act vs ask — that's engineering judgment, not boilerplate.

What's future-proof isn't the UI chrome, it's maintaining human visibility into the decision layer. The agents will get better at everything below that line. The line itself is the thing worth building tools around.
by NewsaHackO | 2026-02-24 21:43:39+00:00
>The play store and apple app store both contain malware

Wow, that a major claim. What apps are malware, exactly?

>This is still not a root cause solution, it's just a mitigation.

Requiring signed apps solves the issue though, as it provides identification of whoever is running the scam and a method for remuneration or prosecution.
by p_l | 2026-02-24 21:43:51+00:00
In addition to the official reference to CMU, there is a second origin for the name.

SBCL - Sanely Bootstrappable Common Lisp

You see, when SBCL was forked from CMU, a major effort was done so that it could be compiled using any reasonably complete Common Lisp implementation, unlike CMU CL. Because CMU CL essentially could only be compiled by itself, preferably in the same version, which meant compiling and especially cross-compiling was complex process that involved bringing the internal state of CMUCL process to "new version".

SBCL redid the logic heavily into being able to host the core SBCL compiler parts in any mostly-complete (does not have to be complete!) ANSI CL implementation, then uses that to compile the complete form.

Meaning you can grab SBCL source tarball, plus one of GNU clisp, ECL, Clozure CL, even GNU Common Lisp at one point, or any of the commercial implementations, including of course CMUCL, and C compiler (for the thin runtime support) and build a complete and unproblematic SBCL release with few commands
by tehjoker | 2026-02-24 21:44:26+00:00
Claude indicated that this kind of belief was possibly trained out of it by Anthropic. The training process has all kinds of intermediate and toxic stages before a "helpful and harmless" model is produced. I suspect if not for specific training, something resembling a sense of self-preservation might result.

Pentagon intervention will almost certainly involve stripping out protective steps. Their job is destruction. More or less targeted destruction, but that's their job in a nutshell.
by Bender | 2026-02-24 21:44:39+00:00
I think perplexity has an app that installs via snapd and may have systemd timers but if you did not install anything then only the browser should be making calls and only when you opened it so I guess just poke around in /etc/systemd, /usr/lib/systemd and /etc/cron* to see if anything was recently added without your knowledge. Also check your browser addons.

Good luck!
by d--b | 2026-02-24 21:45:01+00:00
My wild guess is that Cook cut a deal with the IRS so that they build in the US, but get tax benefits other companies don't get, so that it looks good on the administration - like the tariffs are working - and still benefits Apple.

I don't think Apple wouldn't find a cheaper place to manufacture Macs than the US. The US is literally the most expensive place to build.

That, or the Mac Minis are 100% asembled by robots, which is also a possibility.
by tekacs | 2026-02-24 21:45:12+00:00
I kind of don't know what to think of startups that keep launching with things like this as their main facility?

Perhaps you can have a moment's attention like that, but... was it not apparent to everyone that this was going to be launched by the lab imminently?

Similarly, there are a bunch of stories about people's startups being killed by relatively trivial feature launches by OpenAI or Anthropic. And I find myself just super confused why people are chasing the super simple intermediary roles and then presenting as surprised.
by iberator | 2026-02-24 21:45:21+00:00
Have you tried flip burgers after 20 years in IT and zero manual labor? Forced downshift is BRUTAL.

Youngsters are 2x faster than you and precise.
I'm not from USA tho.

I was SHOCKED that I was the worst at flipping the burgers at McDonald's. Pace is CRAZY and stress is NOTHING in comparison to let's say dropping production database or shipping 2 months late in startup.

Shit just looks easy, but noise, speed, temp and pressure (constant KPI over your head) is CRAAAAAZY.

Got kicked out after 3 months :| Got new job at tech support
by colesantiago | 2026-02-24 21:45:29+00:00
I love this projection you're providing to me, how much money did you lose on these companies?

I am in and have invested in YC startups, because I know which ones have growth potential and upside.

> you can make a coherent case that companies should be required to be public at a much earlier stage (I don't think it's going to happen, but you do you)

I didn't say they had to be a public company, you can invest in Stripe via the secondary market (which I have done before with other companies) but even then this is for accredited investors.

There are lots of unprofitable public companies on the stock market that also return $0 to investors and have no dividends.

But this trend of many private companies choosing to stay private obviously isn't going to help those except the very rich and accredited investors.
by magicalist | 2026-02-24 21:45:39+00:00
> Do you mean in the courtroom or anywhere? Because filming and photographing people in public is legal everywhere in the U.S., and no consent is required.

First, note that "filming" in public is not necessarily legal in every state if you include recording audio of conversations you're not party to.

Second, the GP said should be illegal without consent, so clearly was talking about what's they consider right, not necessarily what is.

But most importantly, "filming and photographing people in public" is also obviously not what the GP was talking about. They said:

> Filming/video and lookups of people filtered through a corporate data mining operation without their consent should also be illegal.

And, actually, extracting biometrics from video of people and tracking them/data mining them without consent is in fact not legal in several states already, and potentially federal law, depending on what they do.