791 results for work force · 2.242s

News for “work force”
17 results • 2238 ms server time
Moozonian News
news.ycombinator.com• Jul 13, 2026• 1 min read
Ask HN: AI Agent and harness containerization/security recommendationsHello HN crew -I am seeing the tendency for people to allow AI agents to access local project & user folders, and beyond (operating system files).I thought to ask the question: How can we best use AI tools safely - where the workflow often runs local system commands and network commands - to protect the integrity of our systems & data AND be easy enough to use productively?Comment structure idea:Operating system / Agent harness / Agent / Security strategy & tool stack / WorkflowTo give some examples: I am currently using OpenCode (+DeepSeek) on Linux Mint Debian Edition (LMDE), and I notice that the Agent & harness is frequently asking to create files in /tmp/ - I usually forbid this, and instruct it to only use files in the current folder. I would rather that the tool ONLY have access to a given project folder (~/Projects/PROJECT-NAME) in a system-enforced way. However, I see that the agent often wants to run system commands (like `ps` to debug a local dev server, `pandoc` or `ffmpeg`
Moozonian News
github.com• Jul 8, 2026• 1 min read
Show HN: PACT – An open-source toolkit for privately signing digital contentI’ve recently been doing a lot of reading about provenance tracking, content authenticity, and AI model training policy enforcement and started working on PACT in an attempt to address some of the issues I saw.PACT is an open-source toolkit for signing content claims, attaching machine-readable policy metadata to files, and verifying those claims against a hosted trust registry. The initial use case is AI-training policy/provenance: for example, letting a content creator publish a signed “no commercial training” policy record in a way that preserves the privacy of the content and the creator.Some of the features are: - Actions are append-only (an event log with Merkle batch disclosure) so the registry's full history is publicly auditable. - User identities are registry-scoped to prevent cross-registry tracking, and user identifiers are generated using a blinded OPRF, so the registry never sees raw device data or the derived token - Content commitments are salted, so the registry can ho
Moozonian News
golemui.com• Jul 1, 2026• 1 min read
Show HN: GolemUI – Declarative Form EngineWe're a team of three friends who have been working with forms and Open Source for a decade, and we joined forces together to create something where we can apply all of our experience.We recently released GolemUI, an Open Source library to generate forms dynamically from JSON definitions, with a typed layer to simplify authoring.This library has a lot to offer. These are the main characteristics:1. A JSON engine. The form is governed by a JSON definition that you can store in a DB, version, diff, or generate it with LLMs as a validated JSON.2. We provide also 28 headless components (and growing) that you can style with CSS variables. We offer APIs so you can drop in Material, Shoelace, or your own components.3. A DX typed authoring layer on top to write forms programmatically, that generates JSON. So you don't have to write it.4. The same definition can render the UI components in React, Angular, Vue, Lit, or Vanilla JS.5. We also have a deterministic MCP that has tools for to validate
Moozonian News
strata.space• Jul 1, 2026• 1 min read
Show HN: Strata, real-time Markdown editor you can mount as a filesystemHi HN. Strata is a real-time markdown editor built around document portability across agentic workflows. The same docs live on the web, mount to disk on Linux/macOS with live CRDT collaboration intact, and render inside any MCP app (claude.ai, ChatGPT). There's also a CLI, MCP server, and API. Demo video shows live sync as ClaudeCode reads and writes legal guidance.FUSE is really neat. It can mount entire filesystems on Linux without materializing files until requested, which immediately brings to mind use-cases around knowledge bases for company files, or RAG corpus. However, the Mac side muddied the picture. We started pure FUSE + MacFUSE, but MacFUSE was an onerous kext install. Next we built on native FSKit which is kext-less, but effectively read-only. FSKit won't let you invalidate a cached read, so to push a web edit down to a local file you have to force overwrite it through your own mount to make the kernel re-cache. This is as sketchy as it sounds, and is a poor proxy for col
Advertisement
Moozonian News
cilock.dev• Jun 30, 2026• 1 min read
Show HN: CI/Lock – signed evidence of what your CI ranI helped create Witness, donated it to the CNCF/in-toto ecosystem, and worked on the NIST 800-204D "pipeline observer" guidance. CI/Lock is the next version of that work, and it's under the Apache 2.0 license.Here's the gap it closes. In March, two supply-chain attacks hit within a week of each other. Someone force-pushed 75 of 76 version tags in aquasecurity/trivy-action, so every pipeline that had pinned to a tag (the thing we all tell people to do) pulled credential-stealing code on its next run. It read secrets from/proc//environ and sent them to a typosquat. A few days later, two litellm releases on PyPI carried a stealer in a .pth file, which Python runs on startup. You didn't have to import it. If the package touched the machine, the code already ran.Both attacks had the same shape: CI ran code it had no reason to trust, with credentials it had no reason to hold, and afterward nobody could prove what actually executed. You could read the workflow file. You couldn't prove what ra
Moozonian News
bing.com• Jun 28, 2026• 1 min read
How Microsoft Is Preparing Its Workforce For The AI EraThe biggest mistake leaders can make with AI is to treat it like another software rollout. That was one of the clearest messages from Bosch Connected World 2026 in Berlin, where Katy George, Corporate ...
Moozonian News
github.com• Jun 27, 2026• 1 min read
Show HN: Adrafinil – keep a lid-closed Mac awake only while agents workA month ago there was a wave of posts and tweets about engineers walking around cafes and parks with their MacBooks propped half-open, as fully closing the lid forces sleep that stops their AI agents. Some people made snarky comments about using tmux or Amphetamine, and some defended their choice with “but I only need it sometimes, and forgetting to disable Amphetamine and finding my laptop discharged in my bag is worse.”This is a solution to this problem. Unlike caffeinate, it will prevent your MacBook from sleeping even with the lid closed, with no external power or display, using pmset disablesleep 1. Unlike other sleep-preventing apps, Adrafinil only activates when there’s an agent actively doing something. It detects agent activity through hooks it installs into Claude Code, Codex, and others. To reassure you it’s working, the app shows the active status in the menu bar, and it plays a chime when you close the lid.Once the agent is done, Adrafinil detects it and lets the laptop go
Advertisement
Moozonian News
github.com• Jun 23, 2026• 1 min read
Show HN: Aharness – Enforce coding-agent workflows as state machines on CodexAgents are capable enough for long, autonomous, multi-step work now, if they have the right guardrails.. The failure mode is now process drift and context management. Prompts and skills can describe a process, but they can't enforce it.Aharness turns the process into a runtime. You (your agent) write the workflow as a finite state machine in TypeScript: states define what Codex may do next, typed submissions prove what happened, and transitions only occur through validated exits. If a state doesn't expose an exit, the model can't take it.The bet is that useful workflows are reusable software, not prompts copied around. FSMs are meant to be maintained, shared, and built upon. Install your favorite workflow as an npm package and build on top of it.Aharness plugs into the Codex setup you already use: your AGENTS.md, skills, MCP servers, and permissions. The missing step between a skill and a custom agent harness. Early experiment, Apache-2.0. Feedback welcome, especially on the authoring