MurphyA/hacker-news huggingface dataset:
by samirka | 2026-03-09 06:36:29+00:00
We’ve been working on a protocol proposal called ANIP: Agent-Native Interface Protocol.

The motivating question is: if the consumer is an autonomous agent rather than a human developer, what should the interface look like?

Most current APIs assume a human reads docs, writes deterministic code ahead of time, and handles auth / permissions / failures in application logic. Agents operate differently: they need to decide at runtime, often with partial authority, sometimes around money or irreversible actions. In practice that means they often discover critical constraints only after failure.

ANIP tries to move those constraints into the interface itself, so they are explicit, typed, and queryable before invocation:

- capability declarations
- side-effect typing (read, write, irreversible, transactional)
- rollback windows
- cost signaling with certainty levels (fixed, estimated, dynamic)
- delegation chains with scoped authority and purpose binding
- structured failure semantics with machine-actionable resolution paths

The adoption argument that made this more interesting to us is that ANIP can also act as the source surface for other interfaces.

We built generic adapters that point at an ANIP service and auto-generate:

- REST/OpenAPI
- GraphQL
- MCP

So the claim is not just “here is a new protocol for agents.”
It’s: for agent-facing systems, implementing an agent-native interface once may be a better foundation than building REST first and layering MCP on top later.

We’ve tried to be explicit about what is actually solved vs what is deferred:

- implemented in the reference servers: budget enforcement, scope narrowing, delegation-chain validation, concurrent-branch exclusivity, audit filtering by root principal, declared-vs-actual cost variance in audit data
- available as an implementation choice but not a protocol guarantee: signed delegation tokens
- deferred to future protocol work: cryptographic chain verification, side-effect contract testing, append-only / attestable audit integrity

So today this is best understood as trust-on-declaration within a trust boundary: internal systems, known services, controlled environments. Not “internet-scale trust is solved.”

Current repo includes:

- Python/FastAPI and TypeScript/Hono reference servers
- REST/OpenAPI adapters
- GraphQL adapters
- MCP bridges
- JSON Schema validators
- explicit notes on translation loss in adapters vs native ANIP

Repo: https://github.com/anip-protocol/anip

Interested in critique from people who’ve dealt with:

- delegated authority for agents
- audit/compliance around agent actions
- multi-agent orchestration against existing APIs
- side-effect / cost signaling for autonomous systems
by tern | 2026-03-09 06:36:46+00:00
Yeah, I know what you mean. I do my best to check myself and also run things by people I trust, but there's an ever-present risk I'm going insane.

As a test, I've been attempting an incredibly complex project that goes far beyond my abilities as a kind of deliberate worst-case-scenario. It's more or less a programming language for a very specific purpose that compiles to a custom bytecode and runs on a custom runtime with specific performance guarantees.

I've spent part of the last month iterating on a formal model of the system and various specifications. Along the way, I teach myself how to understand and critique the part of the system I'm working on, however I also deliberately keep things just beyond my understanding by opportunistically pulling in concepts from various sources ... algebraic topology, obscure corners of PL, concepts plucked from similar systems. It's a complete monstrosity with, now, hundreds of supporting documents, research spikes, processed references, critique passes, etc.

If I'm able to complete this project and have it work as expected, I think I'll have learned a lot about what is or isn't possible. If the current design does in fact work, I'm fairly confident I'll have advanced the state of the art in the niche field I'm working in.
by rakejake | 2026-03-09 06:36:52+00:00
> I don't know if the market will have fully internalized that knowledge soon enough

This exactly. I am neither a boomer nor a doomer. It has helped a lot both at work and in accelerating my personal projects. But now that the C-suite and middle management has jumped on the agentic bandwagon, I'm unsure where this will go and what casualties ensue. At the very least, in the short term there's going to be a lot of "Now that we have agents, this project should be achievable in half the time".
by jondwillis | 2026-03-09 06:37:46+00:00
https://getvalara.com - PDF appraisal document in, grounded appraisal review out in 5-10 minutes to aid in risk management for lending institutions and individual appraisal reviewers.

We use landing.ai to parse the PDF, as well as useworkflow.dev to durably perform other work such as rendering PDF pages for citations, and coordinating a few lightweight agents and deterministic checks that flag for inconsistencies, rule violations, bias, verify appraiser credentials, etc. etc. Everything is grounded in the input document so it makes it pretty fast and easy. We’re going to market soon and have an approval sign up gate currently. Plenty of new features and more rigorous checks planned to bring us to and exceed parity with competition and human reviewers.

There’s plenty of margin for cost and latency versus manual human review, which takes an hour or more and costs $100 or more.
by willwade | 2026-03-09 06:38:54+00:00
It gave me strong vibes too. It’s the writing style. I’ve seen OpenAI write just like this. Doesn’t mean it’s bad. There’s a few other markers. Note “silly” in quotes and over use if that word. Once would be enough. But also this is very very typical. The bolting and short quite direct and a bit repetitive statements “it absolutely does not solve “dumped a bag of candy on a messy kitchen table and took a dramatic iPhone shot.”

Real example programs are where the joke becomes a language
I didn’t want this to stop at “hello world with candy colors.”” The over use of quoting. The bold. It’s not like a human wouldn’t write this. But it’s unusual for a human to do this imho. All the same - it feels novel. And at the end of the day it’s a neat idea. It’s just we enter this new brave world where things written like this give you the ick. “Where do the ai learn this from?” Well I wouldn’t mind betting the author asked it to be written in a hn style post.
by qalmakka | 2026-03-09 06:39:04+00:00
> What would native containers bring over Linux ones?

What would a Phillips screwdriver bring over a flathead screwdriver? Sometimes you don't want/need the flathead screwdriver, simple as that. There are macOS-specific jobs you need to run in macOS, such as xcode toolchains etc. You can try cross compiling, but it's a pain and ridiculous given that 100% of every other OS supports containers natively (including windows). It's clear to me that Apple is trying to make the ratio jobs/#MacMinis as small as possible
by shellwizard | 2026-03-09 06:39:33+00:00
It depends on the type of hardware that you use for your server. If it's really server grade you're totally right. For example cheap memory+CPU+MB x99 off AliExpress are cheap but they're not very efficient.

In my case I fell in love with the tiny/mini/micros and have a refurbish Lenovo m710q running 24/7 and only using 5W when idling. I know it doesn't support ECC memory or more than 8 threads, but for my use case is more than enough
by rvz | 2026-03-09 06:39:57+00:00
> the underlying functionality for sandboxing is used heavily throughout the OS, both for App Sandboxes and for Apple’s own system processes.

The security researchers will leverage every part of the OS stack to bypass the sandbox in XNU which they have done multiple times.

Now, there is a good reason for them to break the sandbox thanks to the hype of 'agents'. It could even take a single file to break it. [0]

> My guess is sandbox-exec is deprecated more because it never was adequately documented rather than because it’s flawed in some way.

You do not know that. I am saying that it has been bypassed before and having it being used all over the OS doesn't mean anything. It actually makes it worse.

[0] https://the-sequence.com/crashone-cve-2025-24277-macos-sandb...
by rl3 | 2026-03-09 06:40:31+00:00
>...then all the agent wranglers and LLM jockeys will become 100x supermen.

Having anticipated this, I'm aiming for 1000x.

Thing is, there's plenty of jerks out there aiming for 10,000x and 100,000x.

It's almost like it's a race to the bottom or something.. Huh.
by eddykim0118 | 2026-03-09 06:41:13+00:00
I built PHI Guard because GitHub's Secret Scanning only catches API keys – it has zero support for HIPAA's 18 PHI identifiers. Healthcare developers accidentally commit SSNs, MRNs, and patient emails into repos all the time.

PHI Guard detects 17 of 18 HIPAA identifiers (names excluded due to false positive concerns) and runs as:
- Pre-commit hook (~2.5s, regex-only)
- GitHub Action (full NLP mode)
- CLI tool

pip install phi-guard

Would love feedback from anyone working in healthcare tech or compliance.
Show HN: Explorable World as Agent Skill
by yi_wang | 2026-03-09 06:41:44+00:00
LocalGPT Gen is a Bevy-based tool where an AI agent builds explorable 3D worlds —
geometry, behaviors (orbit, spin, path following), and spatial audio — then saves the
entire world as a skill directory that other agents can load and remix.

The skill format is a folder with a SKILL.md, a world.ron manifest preserving
parametric shapes, and can have glTF export. Agents treat these the same as any other skill
in their workspace.

Inspired by blender-mcp and bevy_brp. The idea is to shrink the supply chain from
intent to result — instead of prompt → code → build → deploy, it's prompt → explorable
world.

Example worlds: https://github.com/localgpt-app/localgpt-gen-workspace/tree/main/skills
Video comparisons across different models: https://proofof.video

Open source (Apache 2.0), written in Rust: https://github.com/localgpt-app/localgpt
by edanm | 2026-03-09 06:42:30+00:00
I wasn't talking about someone learning the language and using this instead of learning it.

There are a lot of people who understand English fairly well, but are not actively learning the language, are not native speakers, and can use LLMs to catch grammar mistakes that they otherwise wouldn't notice. Or catch small nuances in what they are saying, small implications that could otherwise go unnoticed.

In general, I push back on people saying "I can't find a good/legitimate use for this technology, therefore there are no good/legitimate use for it".
by ithkuil | 2026-03-09 06:42:36+00:00
I consider the risk of wrongful conviction to be an argument against the death penalty and for the very same reason I'm against performing any kind of inhuman treatment of them (which might be worse than death).

Even if 95% would totally deserve it, I don't think we should just accept that on average 4 innocent people every year are just treated as subhumans just so we can unleash our wrath over those who did truly horrible things.

Death is still a better option rather than being used as lab rat
by heyitssim | 2026-03-09 06:44:18+00:00
I love making games, and I've been building a no-code game engine by extracting reusable components every time I ship a new game. It started as me scratching my own itch, and now it's turning into a real platform.

Each game adds more building blocks to the editor: multiplayer, event systems, NPC behaviors, pathfinding, etc. I build a system once, and then anyone using the editor can use it in a click.

Since my last month, I shipped the asset marketplace and the LLM builder. Artists can now upload tilesets and characters, and unlike itch.io, assets drop directly into the editor. You can preview how they'll actually look in-game before using them [1].

An other problem I kept running into: even with a no-code editor, users don't know where to start. So now I'm extending it with a coding agent. Describe the game you want, and it assembles it — pulling assets from the marketplace, wiring up the event system, and using all the building blocks I've spent the past year extracting. Multiplayer, mobile controls, pathfinding, NPC behaviors — the agent doesn't build any of it, just reaches for what's already there.

Once the LLM assembles it, users will have a game ready to work on, and will still be able jump into the editor and tweak everything [2]. Here's an example of what it can already make [3] (after a lot of prompting), and the goal is to reach games like this one I built with the manual editor[4].

Hoping to release the AI mode in a week or two. The manual editor is live at https://craftmygame.com in the meantime.

[1] https://craftmygame.com/asset/mossy-cavern-JdYWai1

[2] https://youtu.be/6I0-eTmoHwQ

[3] https://youtu.be/FZ12XSZu4nM

[4] https://craftmygame.com/game/island-survivor-s1Ay7Go
by dataflow | 2026-03-09 06:45:43+00:00
Fundamentally, the court seems to be treating this identically to a scenario where the user was ignorant and failed to read their inbox. The court seems to be completely disregarding that it was misdelivered into spam. The word "spam" doesn't even appear more than twice in the ruling (one of which is in an irrelevant footnote)! Why the heck is the court completely oblivious to that fact when weighing the facts on each side? This was clearly caused by a misdelivery, not by the party's ignorance. And the court certainly seems to consider every other common-practice aspect of the case except that one, which feels like the most crucial. Would this really survive on a hypothetical appeal?

> As Tile users, each Appellee provided an email address during account registration, and should have expected to receive relevant updates there while the account was active.

Well yes, they did, but:

> Because “there is very little empirical evidence regarding” Internet users’ expectations, the focus of this inquiry is “on the providers, which have complete control over the design of their [apps and] websites and can choose from myriad ways of presenting contractual terms to consumers online.”

...Tile should've expected that its email might go into spam, right?

Why is the court just completely ignoring the fact that this wasn't ignorance on the part of the user, but a misdelivery?

> Evaluating whether inquiry notice has been established is, however, always a “fact-intensive analysis,” and we do not hold that notice by mass email establishes inquiry notice in every case.

At least they say their ruling doesn't generalize...
by lban2049 | 2026-03-09 06:45:46+00:00
This resonates deeply. The "I have ideas but can't ship them" problem isn't about coding ability — it's about the deployment complexity that comes after. I've been working on MyVibe (https://www.myvibe.so) to solve exactly this — one-command publishing to a live demo, no hosting config. Making AI coding actually useful for non-engineers means collapsing the build-to-share gap. Love hearing these stories.
by tbayramov | 2026-03-09 06:45:48+00:00
https://monohub.dev — a new EU-based (hosted and developed) GitHub alternative. Currently, it has a file browser and a PR review tool. Started off as a personal tool, but grew enough to consider offering as a service.

I posted about it recently on HN (https://news.ycombinator.com/item?id=47199062):

It is at a fairly early stage of development, so it's quite rough around the edges. It is developed and hosted in EU.

I have started developing it as a slim wrapper around Git to serve my own code, but it grew to such extent that I decided to give it a try and offer it as a service. It doesn't have much at the moment, but it already has basic pull requests. Accessibility is high priority.

It will be a paid service, (free for contributors) but since it's an early start, an "early adopter discount" is applied – 6 months for free. No card details required.

I would be happy if you give it a try and let me know what do you think, and perhaps share what you lack in existing solutions that you would like to see implemented here.
by rvz | 2026-03-09 06:46:10+00:00
> As I understand it, Chrome, Claude Code, and OpenAI Codex all use sandbox-exec.

Apple can still decide to change it for any reason, regardless of who uses it, since it is undocumented for their use anyway.

> I’m not sure Apple could remove it even if they were sufficiently motivated to.

It can take multiple security issues for them to remove it.
by mrs6969 | 2026-03-09 06:46:14+00:00
You did not accept my answer and did not answer to mine as well.

On top of that, while you are pulling some hypothetical scenarios, the reality is exactly as I described. Governments, especially us gov, kept invading, bombing and killing people based on some subjective percentages and this is still ongoing.

Although you did not like my ‘prefer to die instead of kill’ idea, you still did not solve ‘you can kill everyone since there is a chance anyone can kill you’ problem. And reality is closer to latter, unfortunately.
by everyone | 2026-03-09 06:46:30+00:00
The vast majority of our media, most of our culture, has been created by artist / writer types, you know; kinda shallow, superficial, not particularly intelligent, not very well educated people, with nothing to say aside from meaningless platitudes like "all you need is love"

I guess that's normal? I dunno, I dont have any further conclusions. Maybe we should be concerned about it?
by stared | 2026-03-09 06:46:38+00:00
When dealing with binaries, Gemini 3.1 Pro is in the same tier as Opus 4.6, https://quesma.com/benchmarks/binaryaudit/. Here are the results without humans in the loop, fully end-to-end.

For any practical development, you want humans in the loop, just precisely as much as it is needed (e.g. to ask the right questions, not to get steered away), but not more.
Show HN: Run 500B+ Parameter LLMs Locally on a Mac Mini
by fatihturker | 2026-03-09 06:47:40+00:00
Hi HN,
I built OpenGraviton, an open-source AI inference engine that pushes the limits of running extremely large LLMs on consumer hardware. By combining 1.58-bit ternary quantization, dynamic sparsity with Top-K pruning and MoE routing, and mmap-based layer streaming, OpenGraviton can run models far larger than your system RAM—even on a Mac Mini.
Early benchmarks:
TinyLlama-1.1B drops from ~2GB (FP16) to ~0.24GB with ternary quantization.
At 140B scale, models that normally require ~280GB fit within ~35GB packed.
Optimized for Apple Silicon with Metal + C++ tensor unpacking, plus speculative decoding for faster generation.
Check benchmarks, architecture, and details here: https://opengraviton.github.io
GitHub: https://github.com/opengraviton
This project isn’t just about squeezing massive models onto tiny hardware—it’s about democratizing access to giant LLMs without cloud costs. Feedback, forks, and ideas are very welcome!
by thaumasiotes | 2026-03-09 06:47:54+00:00
The analysis isn't great. In particular, they say "this is a three-factor test, two of the factors are in favor, one is against, two is more than one, so Tile is fine". Normally you'd expect some kind of analysis of how much weight each factor contributes.

That said, they do also say this:

> we determine that Appellees received inquiry notice of the Oct. 2023 Terms. Evaluating whether inquiry notice has been established is, however, always a “fact-intensive analysis,” Godun v. JustAnswer LLC, 135 F.4th 699, 710 (9th Cir. 2025), and we do not hold that notice by mass email establishes inquiry notice in every case.

So the HN headline is misleading at best.

(They also note that, while they should consider how normal internet users behave, they can't do this because "there is very little empirical evidence regarding" the question. So they substitute a discussion of how reasonable they find Tile's actions in the abstract.)
by ares623 | 2026-03-09 06:48:20+00:00
I've been thinking the same. One way to moderate is to bring back physical consequences.

I'd also like to see an "Order of the White Lotus" community (or Fight Club if you prefer) where people who collectively agree to not use AI against each other can come together. They can still use AI (i.e. out of necessity) just not with other members knowingly.

I suspect whatever form it takes the stakes will be very high to hack yourself into and pollute the space. So the more successful the community becomes, the harder it is to keep in order.
by sp1982 | 2026-03-09 06:50:01+00:00
Few observations from analysis of 100K+ open job postings (from a job search site I am working on) in swe/ai/sre/devops. (ex: China).

Nothing too surprising but am keeping an eye on
- Applied AI (Mention of Claude etc as one of job requirements)
- Hiring trends around entry levels. (Most openings still heavily concentrated at mid/senior bands)
by shreyas8 | 2026-03-09 06:50:01+00:00
Spot on, realtime cost visibility changes behavior more than any hard limit does. On CLI latency with concurrent users,each request spawns its own process so they don't block each other, but yeah, 3-8s per call isn't great at scale. Works fine for a small team doing internal demo/testing, which is all this is meant for. It becomes very noticeable for chat-type functionality though that kind of latency ruins the conversational flow. Anything needing real-time responses or throughput should just use the official APIs directly.
by magicalhippo | 2026-03-09 06:50:55+00:00
Well then at best the phrasing in the article is terrible, since it explicitly says they voted to end his life.

I note that Wikipedia writes this[1] about felony murder in the US:

When the government seeks to impose the death penalty on someone convicted of felony murder, the Eighth Amendment has been interpreted so as to impose additional limitations on the state power. The death penalty may not be imposed if the defendant is merely a minor participant and did not actually kill or intend to kill. However, the death penalty may be imposed if the defendant is a major participant in the underlying felony and exhibits extreme indifference to human life.

Thus it would appear as if the prosecution successfully argued that he was a major participant, and that's what the jurors are regretting?

[1]: https://en.wikipedia.org/wiki/Felony_murder_rule#United_Stat...
by dzink | 2026-03-09 06:51:01+00:00
People remember your kindness. That’s it.

I’ve had several senior neighbours who passed away, after decades of living alone. We’ve always helped each other in one way or another and when they passed, in all cases I thought back about the last time we talked. In all cases the conversations remembered involved kindness. Either from then to us or from us to them and them being grateful. It’s what remains.

Giving kindness is most satisfying. It makes the receiver happy, but it makes you happy as well in a wat that kind of lasts. It’s an interaction that compounds on both sides. I think that’s why church groups, and mentorships, ans teaching, and advisory roles are satisfying. Teaching, giving, coaching all make life far more vibrant emotionally, and far less lonely.

Giving grows the pie, while zero sum games see it as affixed. Trying to compete in the latter will make you lonely. Trying to grow the pie in any kind of local community might make you see things differently.
by vbilopav | 2026-03-09 06:51:22+00:00
This was my first approach in realizing my PostgreSQL-centric, Db-first, or rather SQL-first vision of software development.

The project was call pgroutiner and it generated bunch of C# code for me out of PostgreSQL.

After doing couple of projects with it, I realized it wasn't enough. The new approach is a dynamic HTTTP REST API generation but, with plugin for code generation of frontend files (Typescript,. Javascript, HTTP files). This iw way better approach. Look it up, it's called npgsqlrest.github.io