nyellin
We assume that every API key we put into Claude Code can be leaked and therefore make sure there's nothing sensitive behind them.
Whether you like the vibe coded app or not, you would have had fewer errors if Claude had been testing it end to end while vibe coding.
E.g. we give Claude credentials for db - but it's never prod data.
How to Drive an LLM
Ask HN: Agent orchestrators / UIs you use on top of Claude?
If so, we'd very much like to test this. We make extensive use of Claude Code web but it can't effectively test our product inside the sandbox without running a K8s cluster
Ask HN: Giving AI agents a credit card
Is there a safe way to give agents a credit card with usage caps? Ideally also the ability for purchases to pend until human approval.
We're actually struggling a bit with benchmark saturation right now. Opus does much better in the real world than Sonnet but it's hard to create sophisticated enough benchmarks to show that in the lab. When we run benchmarks with a small number of iterations Sonnet even wins sometimes.
For the longest time, Claude Code itself didnt really use subagents much by default, other than supporting them as a feature eager users could configure. (Source is reverse engineering we did on Claude code using the fantastic CC tracing tool Simon Willison wrote about once. This is also no longer true on latest versions that have e.g. an Explore subagent that is actively used.)
> - how can I reliably call tools with the right schema?
This is typically done by enabling strict mode for tool calling which is a hermetic solution. Makes llm unable to generate tokens that would violate the schema. (I.e. LLM samples tokens only from the subset of tokens that lead to valid schema generation.)
Re (2) also fairly easy! It's just a summarization prompt. E.g. this is the one we use in our agent: https://github.com/HolmesGPT/holmesgpt/blob/62c3898e4efae69b...
Or just use the Claude Code SDK that does this all for you! (You can also use various provider-specific features for 2 like automatic compaction on OpenAI responses endpoint.)
For example, the agent in the post will demonstrate 'early stopping' where it finishes before the task is really done. You'd think you can solve this with reasoning models, but it doesn't actually work on SOTA models.
To fix 'early stopping' you need extra features in the agent harness. Claude Code does this with TODOs that are injected back into every prompt to remind the LLM what tasks remain open. (If you're curious somewhere in the public repo for HolmesGPT we have benchamrks with all the experiments we ran to solve this - from hypothesis tracking to other exotic approaches - but TODOs always performed best.)
Still, good article. Agents really are just tools in a loop. It's not rocket science.
Show HN: HolmesGPT – OSS AI Agent for On-Call and Observability
https://github.com/robusta-dev/holmesgpt
Hi HN, I'm Natan from Robusta.dev.We open-sourced HolmesGPT, an AI agent to help on-call engineers triage and respond to alerts. It pulls observability data from your existing tools and use an LLM to correlate data, highlight the most important logs to look at, and (experimentally) open pull requests to fix the problem.We started with integrations for:* Observability tools to fetch metrics,...
If you're looking for something open source: https://github.com/robusta-dev/holmesgpt/
Show HN: We released an AI Agent for Prometheus alerts and on-call
And thanks for submitting!
We're taking a slightly different angle than what Facebook published, in that we're primarily using tool calling and observability data to run investigations.
What we've released really shines at surfacing up relevant observability data automatically, and we're soon planning to add the change-tracking elements mentioned in the Facebook post.
If anyone is curious, I did a webinar with PagerDuty on this recently.