News for hackers. Stuff that matters.

difc

Moving theorem proving upstream into compilers, sandboxes, and the browser seems like the future when we're dealing with increasingly sophisticated AIs. I'm working on similar formal methods but applied to agent sandboxing; do you see Z3 as a better fit than lean? https://github.com/coproduct-opensource/nucleus
Re:Ask HN: How do you solve AI's confused deputy problem? on Thursday June 04, 2026 @09:29PM (#48406907)
I'm building Nucleus for exactly this problem - using information flow control and formal methods, we can prevent confused deputies by proofs instead of heuristics.

Very much WIP, would appreciate any feedback. https://github.com/coproduct-opensource/nucleus

Re:Information Flow Kernel for Claude Code Hooks on Tuesday March 31, 2026 @01:11AM (#47582981)
Everyone agrees that agent security is an area that needs significant improvement, and quickly. Using methods from information flow control, this is a lightweight demo of how web search can taint a Claude session so it doesn't allow writing after a accessing untrusted data.

This can be configured via profiles to more more or less restrictive.

Treat this as an example for now, more to come in the future.

Thanks! Currently network identity is host-based, but in the middle of introducing SPIFFE based on ZTunnel. Should be done in the next couple of days.

Runtime enforcement means that any side effects are routed through a proxy (nucleus-tool-proxy) that does realtime checks on permissions and gates the behavior.

SPIFFE for MicroVM agents is a compelling idea and I'll update when this is ready.

Show HN: Nucleus – enforced permission envelopes for AI agents (Firecracker)

https://github.com/coproduct-opensource/nucleus

I’ve been building Nucleus because most “agent security” is still policy-only: a config file that says “don’t do bad things,” while the agent can still do them.Nucleus is an OSS experiment that pairs a small, compositional permission model with runtime enforcement: *side effects are only reachable through an enforcing tool proxy*, inside a Firecracker microVM. The envelope is *non-escalating*:...

( Read More... | 3 comments | 3 points | on HN )
Re:Discovering AST in JavaScript on Monday June 08, 2015 @06:39PM (#9682976)
Nice post. Functional programming is an excellent paradigm for manipulating these data structures.

I wrote a limited visualizer for this a few years back.

http://bl.ocks.org/bcrisp/6072748

Act I: The Setup

In this the protagonist discovers he is special, exceptional. He devotes time to thinking and researching career goals and world-changing ideas. Dreaming of reification and being lauded as the (Gauss|Galois|Mozart) of his generation, the present may be bleak, but the future is glorious.

Act II: The Crisis

In this, the protagonist discovers that he is challenged for his position. Others, caught up in the race of life, don't look deeply to see his talent, and communion with the muses is precious only as long as it relates to engineering goals. He is human, suffering financial and relational setbacks, feeling the muses have deserted him and he is fully mortal after all.

Act III: The Resolution

In this, the protagonist discovers he is not alone. Others around him, few to be sure, are equally talented and working to achieve their purpose. Perhaps he's at the 99.9th percentile and realizes there are still 6 million contemporaneous peers. Einstein, Crick, and Jobs all went through this before their breakthroughs. The protagonist finds a passion, gives it his heart and soul, and achieves Movement I of his life story.

Re:Poetry, real danger, and ASP.NET on Wednesday April 30, 2014 @01:43AM (#7671803)
Thanks for the excellent suggestions. My local transit agency doesn't have a reputation for complexity, but I'll do some research.

Yes, a startup would certainly offer the complexity I'm after. I'm not pursuing insurmountable complexity in its own right. I feel we should be doing programming at a vastly higher level of abstraction.

Maybe I ought to shift to Haskell development, or spin higher level of abstraction into a venture of its own. Thanks again.

Poetry, real danger, and ASP.NET

I'm a working ASP.NET Developer. I have the usual background in databases, Javascript, 3-tier architecture, AJAX, and so on. But what I want is an applied career working with graphs, networks, morphisms, and functors, where JSON falls away and transitive closure comes into play. I want to use Eigenvectors to tell what's important in data regardless of the data itself. I want to code with...

( Read More... | 2 comments | 2 points | on HN )