MurphyA/hacker-news huggingface dataset:
by gdhaliwal23 | 2026-03-12 15:01:06+00:00
I built MarginDash so teams can stop over-budget AI requests before they’re sent.

What it does:
- Set budgets at company, customer, and feature level
- SDK checks budget first and blocks requests that exceed limits
- Your app still calls OpenAI/Anthropic/etc directly (no proxy/gateway)
- Prompts and outputs go directly between your app and the AI API provider
- MarginDash only receives usage metadata (token counts)
- TypeScript and Python SDKs

Flow:
Checks limit you set for customer/feature -> sends AI call if within that limit -> records cost

I’d love feedback on any missing enforcement scope you’d need in production

Docs: https://margindash.com/documentation
by butterlesstoast | 2026-03-12 15:01:15+00:00
I wonder if perhaps the noise of families ratting each other out is getting too loud. This sounds like a solution to cut through the noise and have their own data. Like you said, this does go a bit too far. It also does not seem to properly equip the school district with factually correct info. Metal on wheels isn't a good data point for "You live here".
by ozgurozkan | 2026-03-12 15:01:17+00:00
Clinical coding AI sits squarely in the regulated AI category where behavioral security matters most — an ICD-10 miscoding due to adversarial input or jailbreak isn't just a bug, it's a compliance failure with real patient and billing consequences.

A few threat models specific to this use case worth considering:

- Prompt injection via clinical notes: if an attacker can influence the input text (e.g. a malicious provider submitting crafted notes), can they steer the model toward specific ICD-10 codes for fraud purposes? Medical upcoding via adversarial AI input would be a novel attack vector that traditional code-security tools won't detect.

- Overconfident output: the model might return high-confidence codes for inputs it shouldn't be confident about — especially for ambiguous or out-of-distribution clinical language. That's one of the risk categories we explicitly test.

- MCP tool chain exposure: since you offer an MCP server, the tool chain integration creates additional attack surface where an adversarial AI assistant could invoke AutoICD with crafted inputs to generate specific codes.

We specifically cover healthcare as a regulated industry at audn.ai (https://audn.ai), and faulty reasoning, overconfident output, and unauthorized advice are all in our test corpus. AI in clinical coding is exactly the high-stakes interface where adversarial behavioral testing should be part of the release process, not an afterthought. Happy to connect on this.
by dakolli | 2026-03-12 15:01:25+00:00
Actually I believe they're just actually complying with new laws to disclose their balance sheets for these types of loans. Many other banks like JP Morgan have much higher amounts of these loans on their balance sheets, but refuse to report and are exploiting certain loopholes.

The requirement to disclose has only existed for a year I believe, but many are kicking the can or claiming that it would cause them issues.
by x187463 | 2026-03-12 15:01:43+00:00
> The 26% abandonment rate, the error cascade patterns in the first 2 minutes — these are behavioural signals, not just performance metrics.

> When Claude Code gets stuck in a loop, tries an unexpected tool chain, or produces inconsistent outputs under adversarial prompts — those aren't just UX failures, they're security surface area.

Twice in one paragraph, not even trying to blend in.
by bluejellybean | 2026-03-12 15:02:32+00:00
Yep, the 'unit' is size in which one chooses to use. The exact same thing happens when trying to discuss micro services v monolith.

Really it all comes down to agreeing to what terms mean within the context of a conversation. Unit, functional, and end-to-end are all weasel words, unless defined concretely, and should raise an eyebrow when someone uses them.
by GuinansEyebrows | 2026-03-12 15:02:50+00:00
> an AI system is literally a machine that can think and do things itself

why do so many writers claim this as a matter of fact? are we losing (or did we never have) a shared definition of the word "think"? can an LLM, at this time, function with zero human input whatsoever?

edit to add: these are genuine questions, not meant to be rhetorical :)

it's hard for me to gauge a broader understanding of AI/LLMs since most of the conversations i experience around them are here, or in negative contexts with people i know. and i'll admit i'm one of those negative people, but my general aversion to AI mostly has to do with my own anxiety around my mental health and cognitive ability in a use-it-or-lose-it sense, along with a disdain for its use in traditionally-creative fields.
by wittjeff | 2026-03-12 15:02:59+00:00
Let me refer you to my buddy Anton, a software developer in Ukraine. He has CP and it makes typing and communicating by speech very slow and tedious.
https://www.youtube.com/shorts/aYbDLOK14uM

He has a blog, which I think is particularly relevant to this conversation: https://www.patreon.com/c/GreenWizard/posts?vanity=GreenWiza...

IMO his writing style is quite melodramatic. I have asked myself, how much of that is his perhaps overly compensatory tendency to project an articulate voice, and how much of it is applied by his AI tools?

The last time I saw Anton in person I asked him about his writing process, and he said something like, "I just draft it and then ask ChatGPT to make it sound professional or whatever." So after thinking about it for a while, I have decided that this is his preferred voice, so I'll accept it as his voice.

IMO it is not for you to decide how people recast their own voice. Once you adopt that dogma, you're committed to denying other people's experience of discrimination (through the lens of disability's symptoms). Whether or not you participate in that other type of biased discrimination is irrelevant.
by systems_glitch | 2026-03-12 15:03:02+00:00
Nothing wrong with Rails in 2026. We still use it for both internal and customer projects. I haven't yet encountered anything that made me feel like switching. I'm also not interested in changing frameworks just to have the New Hotness die in 2-5 years (our oldest currently maintained Rails project is over 10 years old, and some stuff I started working on when Rails 2 was new is still being maintained, just not by us)
by libertine | 2026-03-12 15:03:06+00:00
So once again, this operation seems to just benefit Russia, and no one else.

China still gets access to Iranian oil, though with high risk and a much slower pace.

India is getting access to Russian oil without sanctions now, but they're in a really tricky situation - one Iranian ship was torpedoed coming from an event promoted by India where there was safety requirements in place. This isn't good.

Many countries are tapping into reserves, and being severely affected by higher prices.

All while Russia gets sanctions removed and a oil price hike, when they were in a critical situation economically. Even the USA shrugging off of the reports of Intel shared with Iran is insane.
by zzless | 2026-03-12 15:03:09+00:00
With all due respect, no, it isn't. His drivel against set theory shows that he didn't even read the basic axiomatic set theory texts. In one of his papers, he is ranting against the axiom of infinity saying that 'there exists an infinite set' is not a precise mathematical statement. However, the axiom of infinity does not say any such thing! It precisely states the existence of some object than can be thought of as infinite but does not assign any semantics to it. Ironically, if he looked deeper, he would realize that the most interesting set theoretic proofs (independence results) are really the results in basic arithmetic (although covered in a lot of abstractions) and thus no less 'constructive' than his rational trigonometry.
Show HN: We open sourced Vapi – UI included
by pritesh1908 | 2026-03-12 15:03:19+00:00
We kept hitting the same wall building voice AI systems. Pipecat and LiveKit are great projects, genuinely. But getting it to production took us weeks of plumbing - wiring things together, handling barge-ins, setting up telephony, Knowledge base, tool calls, handling barge in etc. And every time we needed to tweak agent behavior, you were back in the code and redeploying. We just wanted to change a prompt and test it in 30 seconds. Thats why Vapi retell etc exist.

So we wrote the entire code and open sourced it as a Visual drag-and-drop for voice agents ( same as vapi or n8n for voice). Built on a Pipecat fork and BSD-2, no strings attached.
Tool calls, knowledge base, variable extraction, voicemail detection, call transfer to humans, multilingual support, post-call QA, background noise suppression, and a website widget are all included. You're not paying per-minute fees to a middleman wrapping the same APIs you'd call directly.

You can set it up with a simple docker command. It comes pre-wired with Deepgram, Cartesia, OpenAI , Speechmatics Sarvam for STT, same for TTS, and OpenAI, Gemini, groq, Openrouter, Azure on the LLM side.
Telephony works out of the box with Twilio, Vonage , CLoudonix and Asterisk for both inbound and outbound.

There's a hosted version at app.dograh.com if self-hosting isn't your thing.

Repo: github.com/dograh-hq/dograh
Video walkthrough: https://youtu.be/sxiSp4JXqws

We built this out of frustration, not a thesis.
The tool is free to use and fully open source (and will always remain so), happy to answer questions about the data or how we built it.
by orwin | 2026-03-12 15:03:47+00:00
So, if you want your argument stronger: 7k deaths confirmed, 6400 protesters, 200 regime officers, and 400 bystanders.

Plus 11k unconfirmed dead, according to HRANA, so at most 18k dead during the Iranian protests. They also jailed 50k people, and before the war, it seemed a third of those were destined to be executed if the trend continued.

Iran also execute between 50 and 500 people a year, every year, and in the last 5, it was closer to 500, culminating in 2025 where 1500 person got the death penalty.

A regime that has to kill that much is weak, and would probably have fallen on itself if the US hadn't launched any strikes.
by komali2 | 2026-03-12 15:03:49+00:00
I guess, I think there's too large of a pool of companies for anyone to really say what's a meaningfully "equal" or "worse" job. If Geico was opening a new machine learning division to do some really interesting work on the probably shitload of actuarial data they've built over the years, maybe someone from anthropic would be interested in that. Or maybe everyone gets laid off from anthropic because of an AI bubble burst, and now googlers are competing with anthropic people who are competing with walmart labs people, and each hiring team really has no way of knowing who's better than who based on resume alone because they've got fifty in the inbox with FAANG experience.

Also I know plenty of people in startup world who are phenomenal engineers that only have companies I've never heard of on their resumes - startups that for one reason or another simply didn't have a news-grabbing exit.
by regularfry | 2026-03-12 15:03:50+00:00
It's not clear where the efficiency frontier actually is. We're good at measuring size, we're good at measuring FLOPS, we're really not very good at measuring capability. Because of that, we don't really know yet whether we can do meaningfully better at 1 bit per parameter than we currently get out of quantising down to that size. Probably, is the answer, but it's going to be a while before anyone working at 1 bit per param has sunk as many FLOPS into it as the frontier labs have at higher bit counts.
by catcam | 2026-03-12 15:04:02+00:00
Show HN: HADS – A convention for writing technical docs that AI reads efficiently

https://github.com/catcam/hads

AI models increasingly read documentation before humans do. But docs are written for humans — verbose, contextual, narrative. This creates token waste and increases hallucination risk, especially on smaller/local models.

HADS is not a new format. It's a tagging convention on top of standard Markdown:

[SPEC] — authoritative facts, terse, bullet/table/code
[NOTE] — human context, history, examples
[BUG] — verified failure + fix (symptom, cause, fix)
[?] — unverified/inferred, lower confidence

Every document starts with an AI manifest — a short paragraph that tells the model what to read and what to skip. This is the core idea: explicit instructions in the document itself, not in the prompt.

A 7B local model with limited context window can read a HADS document and extract facts correctly because it doesn't have to reason about structure — the document tells it how.

The repo includes:
- Full specification (SPEC.md)
- Three example documents (REST API, binary file format, config system)
- Python validator (exit codes for CI/CD)
- Claude skill (SKILL.md) for AI-assisted doc generation

All MIT. Feedback welcome — especially from people running local models.
by keks0r | 2026-03-12 15:04:06+00:00
the skill usage was one of these "I am wondering about...." things, and we just prompted it into the dashboard to undertand it. We have some of these "hunches" where its easier to analyze having sessions from everyone together to understand similarities as well as differences.
And we answered a few of those kinda one off questions this way. Ongoing, we are also using a lot our "learning" tracking, which is not really usable right now, because it integrates with a few of our other things, but we are planning to release it also soon.
Also the single session view sometimes helps to debug a sessions, and then better guide a "learning".
So its a mix of different things, since we have multiple projects, we can even derive how much we are working on each project, and it kinda maps better than our Linear points :)
by nxor2 | 2026-03-12 15:04:07+00:00
A relative of mine works for a school district in the Chicago area. What should they do? Not take note of people's residence? The whole reason they do is because they used to not. Then people took advantage of it. And the people that take advantage of it typically cause problems for the district. Everything is racist and classist. But wanting a diverse school district to thrive? No that's the real problem. I guarantee Alsip is more diverse than wherever you are writing from. The irony. [0] https://www.illinoisreportcard.com/district.aspx?districtid=...
by goodmythical | 2026-03-12 15:04:22+00:00
That's not a fact. That's just an opinion.

You could just as easily claim, and still be just as opinionated, that a system is what is intended to be (intentional design theory), or that a system should be what it ought to be (normative systems theory), or that a system should evolve to fit the purposes of it's environment (structural functionism), or that there is no fixed purpose and that purpose is instead decided by social consensus (social constructivism).

A motivated reader might notice that the above systems thinking models each align with various schools of thought/philosophical schools. Idealism, telologism, constructivism, etc. This highlights the assertion that there might not be any one correct system of thought given one's stance on Truth, in that certain said systems might believe that they are the One Truth but could not logically demonstrate to the others that they are as such.
by alephnerd | 2026-03-12 15:04:51+00:00
Both China [0] and India [1] are getting safe passage via the Straits of Hormuz from Iran.

Additionally, Russia is redirecting LNG from Europe (the ongoing Hungary-Ukraine spat) to Asia [2].

[0] - https://www.reuters.com/business/energy/china-talks-with-ira...

[1] - https://www.reuters.com/world/india/iran-allow-india-flagged...

[2] - https://interfax.com/newsroom/top-stories/116517/
by dec0dedab0de | 2026-03-12 15:05:11+00:00
I'm not necessarily against the school having this data, though it is creepy. But what the heck, her driver's license and proof of home ownership should be good enough. This is really a failing on the school district to apply any logic at all.

What if she owned a business in another area and registered the vehicle there?

What if the parent lived in one place, but the child was living somewhere else?

I ran into a similar problem with my child over a decade ago, his mother had bought a new house that needed work but updated her driver's license too soon. She still had my address on her checks, where she hadn't lived for years, and they randomly used that to launch an investigation. Afterwards they forced my kid to switch school. Which is made even crazier by it being the same district, like the taxes are going to the same spot, and they hadn't even moved in yet.

School districts being their own government is a big problem in general. It seems like the whole point of them is to enforce segregation.
by neogoose | 2026-03-12 15:05:12+00:00
fff originated as very much loved neovim file finder that is not a ripgrep wrapper and provides better and faster search

Lately I've been researching the way to make it work for AI to improve the search ai harness is perfroming and the results are amazing

works for every harness https://github.com/dmtrKovalenko/fff.nvim
by kstrauser | 2026-03-12 15:05:44+00:00
> Does not support it _natively_

I’m not trying to be pedantic here, but I genuinely don’t know what you mean here. Macs have built-in virtualization and containerization. Docker and podman etc are wrappers around it, but the internals are built in.

Did you mean they have to emulate x86 code if you download an x86 image instead of a native one?
by netcoyote | 2026-03-12 15:05:56+00:00
> What's stopping your agent from overwriting an arbitrary source file (e.g. index.js) with arbitrary code and running it?

You're absolutely right :)

And even if it could be sandboxed at the source code level, what's to prevent a nefarious AI from writing an executable file directly as bytes that calls (e.g.) `unlink`?
by graemep | 2026-03-12 15:05:58+00:00
We had a similar problem some years back in the UK.

Surveillance powers that were justified as necessary because of terrorism were used to check on whether people lived in the correct area for a school - as well as a lot of other minor offences. The intent was obvious from the start because of the bodies that were given these powers (local authorities that run state schools are not involved in fighting terrorism). There was a backlash and the surveillance powers were trimmed down.
by vova_hn2 | 2026-03-12 15:05:58+00:00
> The dirty little secret in CS is that unit, functional, and end-to-end tests are all the exact same thing.

I agree that the boundaries may be blurred in practice, but I still think that there is distinction.

> visible, public interface

Visible to whom? A class can have public methods available to other classes, a module can have public members available to other modules, a service can have public API that other services can call through network etc

I think that the difference is the level of abstraction we operate on:

unit -> functional -> integration -> e2e

Unit is the lowest level of abstraction and e2e is the highest.
by amiga386 | 2026-03-12 15:06:11+00:00
I did try to upload a requirements.txt with "chardet < 7.0" in it ("Copyright (C) 2024 Dan Blanchard"? I don't think so buddy, it's mine now), but despite claiming otherwise, the satirical site only takes package.json so I uploaded the one from https://github.com/prokopschield/require-gpl/

It does actually generate a price (which is suspiciously like a fixed rate of $1 per megabyte), and does actually lead you to Stripe. What happens if someone actually pays? Are they going to be refunding everything, or are they actually going to file the serial numbers off for you?
by keks0r | 2026-03-12 15:06:18+00:00
1. can only partly be answered, because we can only capture the "edits" that are prompted, vs manual ones.
2. for us actually all of them, since we do everything with ai, and invest heavily and continously, to just reduce the amount of iterations we need on it
3. thats a good one, we dont have anything specific for debugging yet, but it might be an interesting class for a type of session.
Show HN: YoloAI: Sandboxed agent, no permission fatigue, diff/apply workflow
by kstenerud | 2026-03-12 15:06:37+00:00
The problem: tools like Claude Code ask you to approve every file edit, every shell command. After hundreds of prompts you stop reading and just hit "yes", or even worse you reach for `--dangerously-skip-permissions` and hope for the best. Neither option is great.

yoloAI runs your AI coding agents (Claude Code, Codex, Gemini, Aider, OpenCode) inside disposable containers so that they can operate without permission prompts. Your files are never touched because the agent works on an isolated copy. When it's done, `yoloai diff` shows exactly what changed, and `yoloai apply` patches your real project.

Workflow:

yoloai new fix-bug ./my-project --prompt "fix the failing tests"
# agent works freely inside the sandbox
yoloai diff fix-bug # see what changed
yoloai apply fix-bug # patch your real project (either workdir changes or new git commits)
yoloai destroy fix-bug # toss the container

This isn't just some Docker wrapper script. yoloAI handles the full lifecycle: copying your project into the sandbox, setting up git baselines, injecting credentials, managing agent state across sessions, and giving you a clean diff/apply workflow to review changes before they land. Your originals are protected until you explicitly choose what to keep.

Single Go binary. Works on Linux (Docker), macOS (Docker Desktop, Tart VMs, or native Seatbelt sandboxing). Profiles with user-supplied Dockerfiles for reproducible environments. Network isolation with domain allowlists. Five agents supported out of the box.

Early access: The core workflow is solid, rough edges remain. MIT licensed.

https://github.com/kstenerud/yoloai

I built this because I was tired of babysitting Claude Code through permission prompts. Now I can't live without it. Happy to answer questions about the design, the tradeoffs, or the sandboxing approach.
by Ccecil | 2026-03-12 15:06:37+00:00
Big flag error I can see right away is joint custody where a parent lives out of the zone.

Every time the parent who doesn't live in the exact neighborhood drops the child off the car is flagged.

Then what happens when they look into this? Does the child automatically go to the school zoned for the parent with a "better" school or a "cheaper" school? Who makes the decision?

What about paid caregivers or family members?

This is a huge waste of time/money for everyone except for the company who sold the school on the "need" for it.
There are way better ways of combating fraud which don't introduce mass surveillance.
by randusername | 2026-03-12 15:06:44+00:00
In other words, don't look for dates/jobs online, let your friends set you up. They handle the social proof both ways.

This is the danger of treating everything in life as transactional. If you are an anonymous coworker, employee, student, neighbor, citizen you are bankrupting your social capital. At the same time, if you are only engaged with others out of self-interest, it can backfire spectacularly when you are found out. Live authentically, take a genuine interest in others, play matchmaker and let others play matchmaker for you.
by jonahx | 2026-03-12 15:06:52+00:00
Agree completely. A solution would probably need to involve:

1. The alternatives being relatively easy to setup and use. This has already happened with some FOSS software.

2. Social norms changing around them (ie, it's "cool" / "normal" / "expected" to use privacy and ownership preserving alternatives). Basically has not happened at all.

3. Laws prohibiting, or limiting to a significant degree, the extent of the abuse that can be inflicted, changing the incentives. GDPR, whatever you think of its execution or effectiveness, is at least proof this kind of thing can be done.

The latter two are both very difficult problems, but I don't see any other way out.