MurphyA/hacker-news huggingface dataset:
Show HN: Inkog – Pre-flight check for AI agents (governance, loops, injection)
by benban | 2026-02-17 10:29:33+00:00
Hi HN, I'm a builder.

I've been building AI agents for a while now and kept running into the same problems. Agent gets stuck in a loop. Prompt injection sneaks through. No one reviews the dangerous actions. And when you're shipping to production, there's this nagging question: "is this thing actually safe to deploy?"

So I built Inkog (inkog.io). It's basically a pre-flight check for AI agents.

You point it at your agent code (LangGraph, CrewAI, AutoGen, n8n, or even your custom Python agent) and it maps out the logic and tells you what's wrong BEFORE you ship.

*What it catches:*
- Logic flaws (infinite loops, unbounded recursion, growing context)
- Injection risks (user input flowing to system prompts, SQL via LLM)
- Missing oversight (no human-in-the-loop for dangerous actions)
- Compliance gaps (EU AI Act Article 14, NIST AI RMF mappings)

There's 20+ detection patterns already, and I built a YAML rules engine so you can define your own. Useful if your company has specific policies.

*Quickest way to try:*
https://app.inkog.io – paste code, see results in 10 seconds

*CLI:*
curl -fsSL https://inkog.io/install.sh | sh
inkog ./my_agent

*CI/CD:*
One-click GitHub Action setup on the website. OAuth flow, takes 30 seconds.

Apache 2.0, secrets are redacted locally before upload.

Honestly curious what you think. Does pre-flight checking for agents make sense? Or is this overkill?

Repo: https://github.com/inkog-io/inkog
by bmacho | 2026-02-17 10:30:12+00:00
There are some run-time type checks when you call basic functions: it checks the form of the string. For example expr checks if your string is a number. E.g.

set one "1"
set two "1 + 1"
expr {1 + $one}
# 2
expr {1 + $two}
# can't use non-numeric string as operand of "+"

This is about the same level of correctness what javascript provides: you can add a number and a string, it will check the values and decide if it errors or can do something.

But it indeed doesn't tag variables and values runtime or statically, and doesn't check their usages.

Also, it seems Tcl 8.6 (2011+) exposes internal types (int, double, list, dictionary) via `::tcl::unsupported::representation` so if you code against that specific runtime you can use those types. (I don't know much about Tcl, I've looked at it once.)
by donkeybeer | 2026-02-17 10:30:20+00:00
That's very nice but to people middle class and lower, it's not about paying a higher price, it's being able to buy what is needed to live at all. I still don't see what is wrong with capitalism. It did show that many self proclaimed advocates of capitalism were liars and changed to hardcore communist economics and became sore losers when they felt "someone else" is "winning".
by jahnu | 2026-02-17 10:31:05+00:00
Not quite, imho. The language used here is subtle and I could be clearer myself. It talks about the paradox that suggests the work _appears_ to come from nowhere, which we should all agree is impossible, thus a paradox, not that it does actually come from nowhere. Just that we don't know exactly where. The page doesn't offer an explanation for the appearance of the paradox.

For me the line "The studies suggest that controlling caloric intake may be more necessary for managing weight than exercise alone." is a possible conclusion for the apparent paradox. Note the words "may" and "alone" which indicate uncertainty. I deliberately used the phrase "very significantly" to suggest we would probably all agree that there is some bound on observing the paradox which is why I used Phelps as an example. To repeat and be clear, I think the paradox as described on the page does not say that with a very significant increase in energy expenditure there will be no weight loss with a constant calorific intake.
by easyThrowaway | 2026-02-17 10:31:06+00:00
The point isn't simply "class removal affects cascading", but "anything upstream is capable of placing the original content in an unrecoverable state".

Where "anything" could be your framework, your CMS, you or your coworkers a few years after the original CSS has been written and you can't fully remember what ".format-header__nav-wrapper:not(:last-child) .model-header__nav-wrapper:not(:last-child)" is doing.

And yes, that's a real CSS selector from a refactoring job I'm doing right now.
by namibj | 2026-02-17 10:32:18+00:00
Who'd have thought advanced semantic navigation and search as e.g. in the IDEA (Jetbrains) family of IDEs with framework awareness helps not just humans?

Also note it's "structural search (and replace)" that let's you:
- essentially regex against the semantically annotated AST, which gives you things like match on function calls that are given an (otherwise arbitrary) object that implements some particular interface (be that interface nominally typed as in Java, or structurally typed as in TypeScript).
- or fancier, database queries with a join condition equality matching a string type, that are invoked from inside a loop, with another database query outside and in front of that very loop.

Personally I hated when due to a poorly debated user wish, they turned off auto indenting in full file column space for multi-line inline SQL in PHP, not only forcing a massive commit that messes up `git blame`, but also just annoyingly throwing the outer PHP context's indentation level away causing the SQL to be waaay too far left.
by squeefers | 2026-02-17 10:32:37+00:00
if a message board that allows the sharing of videos is addictive (facebook, tiktok), then LLMs are 100% addictive. and by the same retard logic books are addictive. its hysteria, and just like people REALLY BELIEVED TV ROTS YOUR BRAINS
people REALLY BELIEVE AI SLOP ROTS YOUR BRAINS.

watch as the hysteria passes, and just like the tv scare, nobody cares anymore in roughly 20 years or so. shame on all of you
by 112233 | 2026-02-17 10:32:53+00:00
The TV is best device for unleashing your creativity by upvoting your favourite Sora creators! Become an expert at any field by activating premium prompts from our partners! By connecting camera you can have meaningful motivating discussions with your deceased loved ones (camera required for fraud prevention. Remember, not looking at the screen during ads is punishable by law)

You have 31/999 credits remaining. What activity would you like to productively participate in today?
by hshdhdhj4444 | 2026-02-17 10:32:59+00:00
> nobody besides the U.S. is engaging in a trade war with China

It’s worse. Canada, Australia, Europe, India were engaging in trade wars with China at the behest of the U.S.. South/Latin American countries like Brazil, Argentina, Mexico were also severely limiting their exposure to Chinese companies.

All that changed in a matter of months.
by jimmySixDOF | 2026-02-17 10:34:36+00:00
there was also this last year not updated in a while but the view handling is better than native verbose :

"claude-trace"
Record all your interactions with Claude Code as you develop your projects. See everything Claude hides: system prompts, tool outputs, and raw API data in an intuitive web interface.

https://github.com/badlogic/lemmy/tree/main/apps/claude-trac...
by tefkah | 2026-02-17 10:35:18+00:00
Since the other guy wasn't particularly helpful, i'll try to add some context (mostly through my knowledge of iDeal, the Dutch payment system which Wero is based on).

You're right that it's a bit confusing, as Wero's marketing is mostly focused on P2P transfer usecases, ie like US's Venmo/Cashapp, which as you note we can already do with SEPA transfers.
Wero does have a small benefit in that case, as it's slightly more secure (you don't need to share your bank account, and there's a dedicated app that most Western Europeans will soon be familiar with).

The bigger benefit I think is as a unified e-commerce solution. While Wero is not directly an EU initiative, it's still supported by the EU commission. In general a good thing to keep in mind when evaluating EU financial/economic news is that one of the main things the EU tries to do is strengthen and protect their "single market": they want to make the flow of commerce within EUs borders as seamless as possible.

Having a unified ecommerce payment solution, so that you can eg just as easily order goods from German webshops as a Frenchman as you can from a French one (barring shipping etc) is in the EUs interest. Of course it's also in the banks that put forward this initiative's interest.

But, speaking as a consumer: this rules! iDeal is really nice, much nicer to use than credit cards or PayPal imo. I think it's easy to see why you would prefer a dedicated payment system in ecommerce rather than plain SEPA transfers (which most shops don't support) or credit cards, but in case that's not clear:

- Faster checkouts

- Don't need to share bank account numbers/sensitive credit card info

- Fees are much lower than credit cards (at least for iDeal its fractions of a cent per transaction: https://ideal.nl/en/ideal-fees)

- (Coming) built in support for subscriptions

Hope that gave a bit of an idea!
by gethly | 2026-02-17 10:35:20+00:00
The entire US economy stands on AI hype. There is nothing else. Once it pops, USA will finally go into stagflation. The markets were rigged for way too long and the dollar has overstayed its welcome. Things will get bad, very bad. 2008 was nothing compared to what is coming. If you have any savings, DO NOT KEEP CASH. Go and buy precious metals to preserve whatever purchasing power you have. Or, if you want to catch the best ride of your life - go and buy shares of mining stocks. That's all, there is no reason to go more into details on HN as this is too broad of a topic on technical, financial and geopolitical side.
by squeefers | 2026-02-17 10:35:21+00:00
> "we're about to ruin a high-quality resource (the Internet) that we carefully built over decades"

I agree but would say many people have noticed this over the years... successive waves of normies (aol endless summer being one famous one i rememeber, ya granny getting a smartphone in the last ten years being the most recent) substantively change the character of this once possibly great place
by noosphr | 2026-02-17 10:35:49+00:00
Any moderation position that can be filled by an unemployed shut it will be filled by an unemployed shut in.

Yiu either have to pay your mods, like hn, or have your mods pay you, like the old BBS boards that reddit and stack overflow replaced.

Problems of the 2010s.

Today you can use an 8b model to flag all problematic posts. The only issue is that all the posts are also by 8b models.
by verdverm | 2026-02-17 10:36:32+00:00
you posted this 5 hours ago, from the FAQ

> Are reposts ok?

> If a story has not had significant attention in the last year or so, a small number of reposts is ok. Otherwise we bury reposts as duplicates.

> Please don't delete and repost the same story. Deletion is for things that shouldn't have been submitted in the first place.
by A_D_E_P_T | 2026-02-17 10:37:03+00:00
> “it’s not x, it’s y”

ChatGPT does this just as much, maybe even more, across every model they've ever released to the public.

How did both Claude and GPT end up with such a similar stylistic quirk?

I'd add that Kimi does it sometimes, but much less frequently. (Kimi, in general, is a better writer with a more neutral voice.) I don't have enough experience with Gemini or Deepseek to say.
by thisislife2 | 2026-02-17 10:37:15+00:00
> They take entire tech orgs over, then only hire each other.

No. It is stupid politics to blame Indians or other Asians for this when they are just following company policy to hire cheaper labour. Like it or not, H1B Asians (in IT) are hired because they can be exploited - they work cheaper and longer hours than their American counterpart ( US companies save nearly $100,000 per H-1B hire as workers earn 16% less: Here’s why demand stays high - https://timesofindia.indiatimes.com/education/news/us-compan... ). Blaming immigrant Asians for this kind of exploitative politics that exists because American businesses lobby for it is irrational. (Also, do not forget that America is a country of immigrants. The H1Bs also act as a "vetted" immigrant pool from which American citizenships can be given.)
by Myzel394 | 2026-02-17 10:37:19+00:00
I've been using GrapheneOS for about 3 years now. For the most part, it works very well. I don't have any issues with banking apps, nor any other closed source apps. I'm using two profiles both with sandboxed Google play installed. I'm logged in into my private Google account on the work profile.

However, there was one case that lead me to thinking about ditching grapheneos to this day.
I installed Uber on my phone and I was able to successfully create an account and use it. When it came to booking a ride, the app crashed and I had to log in again. Once I did that, I was told that my account has been suspended for violating the terms of services. All I did to that point was creating an account and booking a ride.
I was able to resolve the issue luckily after a few days and going back and fourth a couple of times with the Uber support, however, the risk of getting banned on any such platform is still risky, and thus I'm not sure if grapheneos is usable if you need to use such services.
by mentalgear | 2026-02-17 10:38:27+00:00
This is especially interesting in regard to the recent HN dicussion on spyware by for-profit intel firms having access to Whatsapp, Telegram, Signal, etc. (https://news.ycombinator.com/item?id=47033976) through OS-level no-click hijacks.

I wonder how secure GrapheneOS is in that regard, and what the other contenders are?
by pjc50 | 2026-02-17 10:38:56+00:00
I have to admit it's not that deeply researched. That book sounds interesting.

For Rover in particular, https://en.wikipedia.org/wiki/Phoenix_Venture_Holdings stands out. Similar to Maplin and Toys R Us, an example of taking the onwer-management taking a large amount of cash out of a business that was declining.
by startaq | 2026-02-17 10:40:07+00:00
> MAME has no printer emulation, which I like to use for a more holistic retro computing experience.

That's wrong. I haven't tried it with the Kaypro emulation, but here's a video showing the mc68000 computer printing to an emulated Epson ActionPrinter 2000: https://streamable.com/rvenyx

It's also possible to print to a text file.
by shit_game | 2026-02-17 10:40:32+00:00
This is the result of the long-planned desire for consumer computing to be subscription computing. Ultimately, there is only so much that can be done in software to "encourage" (read: coerce) vendor-locked, always-online, account-based computer usage; there are viable options for people to escape these ecosystems via the ever growing plethora of web-based productivity software and linux distributions which are genuinely good, user friendly enough, and 100% daily-drivable, but these software options require hardware.

It's no coincidence that Microsoft decided to take such a massive stake in OpenAI - leveraging the opportunity to get in on a new front for vendor locking by force-multiplying their own market share by inserting it into everything they provide is an obvious choice, but also leveraging the insane amount of capital being thrown into the cesspit that is AI to make consumer hardware unaffordable (and eventually unusable due to remote attestation schemes) further enforces their position. OEM computers that meet the hardware requirements of their locked OS and software suite being the only computers that are a) affordable and b) "trusted" is the end goal.

I don't want to throw around buzzwords or be doomeristic, but this is digital corporatism in its endgame. Playing markets to price out every consumer globally for essential hardware is evil and something that a just world would punish relentlessly and swiftly, yet there aren't even crickets. This is happening unopposed.
by vasco | 2026-02-17 10:40:55+00:00
I don't think you understood, we weren't understaffed, that's besides the point as it's not hard to reply to an email. The main aspect is you should demand a warrant because you as someone that works for a private company shouldn't be the arbitrar of if a cop has enough or not (plus the cop will obviously not give you any details besides ongoing investigation in most cases). There's a job for that which is a judge. In my opinion even internal lawyers should not judge that outside of the legality of the request. In many jurisdictions you can get in trouble for doing that.
by trashb | 2026-02-17 10:41:37+00:00
Every format is binary in the end, you are just swapping out the separators.

I personally subscribe to the Unix philosophy. There are really two options, binary or plain text (readable binary due to a agreed standard formatting). All other formats are a variation of the two.

Additional a binary format suits makes sense when the format is to be used for mobile devices which may not have much storage or bandwidth.
by troupo | 2026-02-17 10:42:10+00:00
All research is conducted in constraints. It's not hard to understand those constraints by simply thinking.

Besides, one could actually open the research, and scroll to section 5 where they acknowledge the need to expand beyond Python:

--- start quote ---

5. Limitations and Future Work

While our work addresses important shortcomings in the literature, exciting opportunities for future research remain.

# Niche programming languages

The current evaluation is focused heavily on Python. Since this is a language that is widely represented in the training data, much detailed knowledge about tooling, dependencies, and other repository specifics might be present in the models’ parametric knowledge, nullifying the effect of context files. Future work may investigate the effect of context files on more niche programming languages and toolchains that are less represented in the training data, and known to be more difficult for LLMs

--- end quote ---
by ainch | 2026-02-17 10:42:34+00:00
Is it proven that they serve the models at cost? Amodei has said that Anthropic's models make back their training cost - the reason they're so deep in the red is because they're investing substantially more in subsequent runs, and R&D dwarfs inference cost[1]. If the tech plateaus I would expect to see a lot of that R&D spend move into just powering inference.

[1] https://epoch.ai/data-insights/openai-compute-spend
by cubefox | 2026-02-17 10:43:28+00:00
I'm confused, that doesn't make sense to me:

> They largely come from hyperscalers who want hard drives for their AI data centers, for example to store training data on them.

What type of training data? LLMs need relatively little of that. For example, DeepSeek-V3 [1], still a relatively large model:

> We pre-train DeepSeek-V3 on 14.8 trillion diverse and high-quality tokens

At 2 bytes per token, that's 29.6 terabytes. That's basically nothing compared to the amount of 4K content that is uploaded to YouTube every day.

1: https://arxiv.org/html/2412.19437v1
by ffsm8 | 2026-02-17 10:43:56+00:00
> Every team and employee should do their part to contribute to the financial targets every quarter and within the fiscal year

The inevitable result of this is however the devaluation of the future. Eg if the statement was true, it'd be the R&D workers responsibility to hand in their resignation ( or their managers layoffs) if their product won't get paying customers within the same fiscal year... And the same applies to any other long term expenditure/investment that company might be considering. E g building a new fab/production line etc pp

So no, that statement of yours is not actually true. It should not be entirely ignored, but it should not become a leading cause unless you want to run the company in the ground.
by atiedebee | 2026-02-17 10:44:04+00:00
ISO C99 actually defines multiple types of deviating behaviour. What you're describing is closer to implementation-defined behaviour than anything else.

The three behaviours relevant in this discussion, from section 3.4:

3.4.1 implementation-defined behavior
unspecified behavior where each implementation documents how the choice is made
EXAMPLE An example of implementation-defined behavior is the propagation of the high-order bit when a signed integer is shifted right.

3.4.3 undefined behavior
behavior, upon use of a nonportable or erroneous program construct or of erroneous data, for which this International Standard imposes no requirements
Possible undefined behavior ranges from ignoring the situation completely with unpredictable results, to behaving during translation or program execution in a documented manner characteristic of the environment (with or without the issuance of a diagnostic message), to terminating a translation or execution (with the issuance of a diagnostic message).
An example of undefined behavior is the behavior on integer overflow.

3.4.4 unspecified behavior
behavior where this International Standard provides two or more possibilities and imposes no further requirements on which is chosen in any instance
An example of unspecified behavior is the order in which the arguments to a function are evaluated.

K&R seems to also mention "undefined" and "implementation-defined" behaviour on several occasions. It doesn't specify what is meant by undefined behaviour, but it does indeed seem to be "whatever happens, happens" instead of "you can do whatever you want." But ISO C99 seems to be a lot looser with their definition.

Using integer overflow, as in your example, for optimization has been shown to be beneficial by Charles Carruth in a talk he did at CppCon in 2016.[1] I think it would be best to have something similar to Zig's wrapping and saturating addition operators instead, but for that I think it is better to just use Zig (which I personally am very willing to do once they reach 1.0 and other compiler implementations are available).[2]

[1] https://youtu.be/yG1OZ69H_-o?si=x-9ALB8JGn5Qdjx_&t=2357
[2] https://ziglang.org/documentation/0.15.2/#Operators
by jahnu | 2026-02-17 10:44:31+00:00
Thanks for fleshing out your comment. Because initially it did kind of suggest you were saying it burns no calories or makes _little_ difference.

I agree with all you posted.

> Curious though - do you track your intake with the same rigour, and if so, do you find the numbers actually add up in practice?

To return the courtesy, for the purposes of discussion I picked a rough estimate and rounded down significantly the actual amount I typically run. More often it's 1.5 hours a run and supposedly >1000 calories given my weight, heart rate, terrain, and speed. I also assumed the calculations are way overestimating my actual calories spent so just went for something somewhat plausible for the sake of a HN comment. As you noted calories aren't accurately reported by devices. I do not pay attention to it in massive detail either. But in practice since I run an average of about 25km a week but can vary from 0 for some weeks to 50 for others and I keep relatively good eye on my diet I notice significant changes in weight over time that tallies with effort. Three months of below that 20ishk a week and I will put on 2-3kg. The next three months I increase to 35ish+ a week and it drops off again. Would I swear to it in a court of law that I'm not miscounting meals? No way. But I feel reasonably comfortable that this is an accurate description.
by everdrive | 2026-02-17 10:44:39+00:00
I believe that every morning someone in the tech industry wakes up and devises a new place to cram some sort of radio. And it's appealing enough the the unwashed masses such that it becomes widely adopted and then unavoidable. I don't want TPMS in my tires. It's not as if checking tire pressure is difficult. No one will consider moving away from TPMS. You'll only hear technologists say "yes, but we could improve the standard! Perhaps encrypt it." They only know how to solve technological problems with more technology.