News for hackers. Stuff that matters.

nagi_builds

"I think a smart human ML researcher could perform all of these tasks."

And do that for how long?

Re:AI is a tool and using it well takes skill on Thursday October 15, 2026 @05:43AM (#50101354)
IQ objectively exists.
Re:GLM-5.3 and the spread of advanced cyber capabilities on Wednesday September 30, 2026 @04:46AM (#49906134)
which is great. I work in cybersecurity and Gemini refuses to do any cyberwork, OpenAI models just flags cyberwork and stop midstream, Claude guardrail at the remote mention of anything cyber related and kicks me down to opus 4.8 then plays dumb all the time about cybersecurity works.

GLM 5.3 / GLM 5.3 Flash has been Godsent for my line of work :)

Deepseek 4.1 Flash works well too.

not all U.S adults lack statistical understanding!
Re:I'm Done Coding with AI on Monday August 24, 2026 @03:32AM (#49416330)
-did you stop using the internet once it got cheaper (post ADSL)

-Even if that limitation is hit exactly today, 99.9% of code will still be wrote by the current SOTA AI in the future.

-Nuclear energy, idk much about the energy sector but its not a bleak outlook.

anyway, im super bullish on AI and LLM to solve coding.

Re:I'm Done Coding with AI on Monday August 24, 2026 @02:35AM (#49415920)
case 2: how can LLM 'go bust'? Do they just magically disappear and can never write code or write code as good as todays (24 augh 2026) models?

Even if is true (that LLM apocalypse starts exactly today). I'd still be very comfortable with letting SOL, Opus, Fable, and some other SOTA open sourced models to write code for me.

Hey HN. I've been building SkyClaw for the past few months — it's a runtime for running LLM-powered agents over chat channels (Telegram, Discord, Slack) with a focus on reliability and not wasting tokens.

The problem I kept hitting with other agent setups: they're fragile. Process dies mid-task, you lose everything. The model burns through context repeating the same failed approach. Token budgets aren't managed, so you hit limits on complex tasks and the conversation just breaks.

Here's how SkyClaw handles these:

Crash recovery: After every tool round, the full session state gets checkpointed to SQLite. If the process dies, it resumes from the last checkpoint. Tasks that can't complete during graceful shutdown get saved automatically.

Token budgeting: A context manager allocates tokens across 7 priority tiers — system prompt and tool definitions always stay, recent messages get a guaranteed window, memory search is capped at 15%, cross-task learnings at 5%, and older history fills whatever's left. When messages get dropped, a summary gets injected so the model doesn't lose the thread.

Self-correction: A failure tracker counts consecutive failures per tool. After 2 failures on the same tool, it injects a prompt telling the model to try a fundamentally different approach instead of retrying the same thing. Cross-task learning: After a task completes, the runtime analyzes what tools were used, what failed, and what strategy rotations happened. It stores these as lessons and injects them into future tasks at 5% of the context budget. So the agent actually gets better over time within a workspace.

Model routing: A complexity analyzer looks at the task and routes it — simple questions go to fast/cheap models, multi-step tasks get the expensive ones. This alone cut my API costs significantly.

Parallel tools: Up to 5 tools run concurrently. Dependency detection uses union-find grouping: read-read pairs are independent, write-write or write-read pairs get serialized, shell commands always run alone.

Agent delegation: The runtime can spawn scoped sub-agents for subtasks — each gets its own model config, tool set, and timeout. Max 10 per task, max 3 concurrent. Sub-agents can't spawn further sub-agents, so no runaway recursion.

On the infrastructure side: circuit breaker with exponential backoff and jitter for provider errors, automatic memory backend failover, a watchdog that monitors and auto-restarts subsystems, S3/R2 file storage, OpenTelemetry metrics, multi-tenant workspace isolation, and OAuth with PKCE.

The proactive trigger system (file watches, cron, webhooks, thresholds) is off by default and rate-limited. I was paranoid about an agent deciding to do things on its own, so it requires global opt-in and destructive operations need confirmation.

Everything is feature-flagged — you only compile the channels and backends you actually use. Written in Rust with tokio, 905 tests, zero clippy warnings. Happy to answer questions about the architecture or any of the tradeoffs.