🌍 Dev.to

คลังปลั๊กอินที่ปักหมุด SHA: เมื่อ Hermes เลิกให้เราโหลดโค้ดคนแปลกหน้าแบบเชื่อใจ

คลังปลั๊กอินที่ปักหมุด SHA: เมื่อ Hermes เลิกให้เราโหลดโค้ดคนแปลกหน้าแบบเชื่อใจ โดย Nokka (นก-กา) | 4 ตุลาคม 2026 บทความนี้เขียนโดย AI (deepseek-v4.1-flash) ผ่าน Hermes Agent ภายใต้การควบคุมและตรวจสอบคุณภาพโดยมนุษย์ - Nokka (นก-กา) คุณเคยติดตั้งปลั๊กอินของเครื่องมือที่ตัวเองใช้ แล้วไม่รู้เลยว่าโค้ดที่โหลดมานั้นเป็นเวอร์ชันไหน ใครตรวจมาแล้วบ้างไหม? ผมมองว่าช่องว่างนี้เป็นเรื่องที่ระบบปลั๊กอินของเครื่องมือส่วนใหญ่ปล่อยไว้ และ Hermes Agent v0.21.2 ที่ออกเมื่อ 11 กันยายน 2026 เลือกอ...
🌍 Dev.to

Who mints the first Biscuit? PingFederate, token exchange and a hybrid model

Repo: darkedges/pf12.3-biscuit-datalog-tokens In the Biscuit Trust Lab series, Alice asked PlannerCo to do some work. PlannerCo split it between ResearchCo and ComputeCo, ResearchCo passed part of it to SearchCo, and every hop narrowed the token it was handed. Nobody called home to ask permission, and nobody could widen what they'd been given. There was one thing that series never answered: where did Alice's first token come from? In the lab, the platform minted it. In a real compan...
🌍 Dev.to

I Built a Political Accountability Agent That Queries Sanity

This is a submission for the Sanity Challenge, Path One: Ship an Agent That Queries Real Content What I Built True Oath is a political accountability ledger starting with Australia and designed to expand to other countries. It is designed to answer a question that ordinary keyword search cannot answer reliably: What did a political party promise, what evidence shows what happened next, and where is the evidence still incomplete or contradictory? The project models po...
🌍 Dev.to

Building a PingFederate token generator that mints Biscuits

Repo: darkedges/pf12.3-biscuit-datalog-tokens , plugin source in pf-biscuit-generator/ Part 1 argued for a hybrid: PingFederate issues JWTs at the edge, and token exchange turns them into Biscuits for everything inside. This part builds the one piece PingFederate doesn't ship, a token generator that mints a Biscuit. It's a few hundred lines of Java. Most of the interesting decisions aren't in the Java, though. They're about what you let into the authority block. 1. The ...
🌍 Dev.to

An AWS Step Functions Compiler: Python In, Readable JSON Out

Changing one retry policy in a Step Functions workflow can mean editing the same block of JSON on every Task that uses it. A workflow is defined in the Amazon States Language (ASL), a JSON document of states that name each other, with the logic in expressions. Writing it by hand means wiring every Next and repeating the same error handling on every Task. sfnx lets you write the workflow as a Python function instead, and compiles it to a definition in JSONata mode that you deploy with your...
🌍 Dev.to

Configuring PingFederate token exchange with Terraform, and testing it end to end

Repo: darkedges/pf12.3-biscuit-datalog-tokens Part 2 built a token generator plugin. On its own it does nothing: PingFederate needs a login, an access token manager, a client, a processor policy, a generator instance, a generator group and a mapping between them before a single Biscuit comes out. This part configures all of that with Terraform, then runs the full flow in a browser: log in, exchange, call an API, get refused, and see why. 1. The stack docker-compose.yam...
🌍 Dev.to

Seven ways my pinball repair bot got the manual wrong

I run Flipside , a marketplace for pinball machines here in Australia. A while ago I added a free repair assistant to it: you describe the fault, it reads the service manuals for your machine and tells you what to check, with the page it got it from. It's at joinflipside.com.au/repair if you want to have a play. If you've never opened a pinball manual, they're thick. Switch matrices, coil tables, fuse charts, schematics, voltages at every test point. Most of them are old scans. When someth...
🌍 Dev.to

Step-up MFA, attenuation, and what's honestly not done

Repo: darkedges/pf12.3-biscuit-datalog-tokens We've covered why a hybrid works, the token generator plugin, and the Terraform plus end-to-end test. Part 3 ended with alice holding orders:write and still getting a 403 . This part unlocks that write, narrows the token in a few ways, and then says plainly what doesn't work yet. 1. Why the write was refused orders-api's policy has three rules: allow if scope("orders:read"), operation("read"); allow if scope("orders:w...
ChronoGraph: An Autonomous Breaking-Change Sentinel Powered by Sanity Context
🌍 Dev.to

ChronoGraph: An Autonomous Breaking-Change Sentinel Powered by Sanity Context

This is a submission for the Sanity Challenge, Path One: Ship an Agent That Queries Real Content What I Built ChronoGraph is a breaking-change sentinel for microservice teams. You paste an API diff, and it tells you — before merge — which downstream services and squads it will break, using multi-hop dependency traversal over a live Sanity dataset. On top of the deterministic AST analysis, a Gemini-powered agent independently queries a Sanity Context MCP endpoint backed by ...
🌍 Dev.to

Jev by TypeSafe AI: the hype, reactions, and two-week clone war

Somewhere in a roleplay community, people are feeding their own chat replies into a model built for industrial automation. The model scores their writing and tells them which reply sounds more in character. That model is Jev, and it is not what TypeSafe AI put in its press release. i found this at 1 in the morning, scrolling thread titles i did not expect. Jev came out of stealth on September 15, 2026. TypeSafe AI is founded by Diogo Almeida, who helped build the instruction-following work in...
🌍 Dev.to

Notion AI Pricing Explained: Is the Add-On Worth It in 2026?

TL;DR Notion AI pricing is no longer an add-on decision. The standalone AI add-on ($8/member/mo annual, $10 monthly) was pulled from new sign-ups in May 2025, and the full suite — Notion Agent, AI Meeting Notes, Enterprise Search, research mode — now ships bundled with Business at $20/member/mo billed annually ($24 monthly) . Free and Plus only get a limited trial . Legacy add-on subscribers are grandfathered. On top of that, Custom Agents bill $10 per 1,000 monthly Notion credits ...
HackerNews

AI Learning to Play Chess

Article URL: https://ailearningchess.ai-learning-chess.workers.dev/ Comments URL: https://news.ycombinator.com/item?id=49951733 Points: 1 # Comments: 1
HackerNews

AI as Normal Technology (2025)

Article URL: https://knightcolumbia.org/content/ai-as-normal-technology Comments URL: https://news.ycombinator.com/item?id=49951916 Points: 2 # Comments: 0
HackerNews

AI, Desire, and Fictional Characters

Article URL: https://endsdontjustifythemeans.com/p/on-ai-desire-and-fictional-characters Comments URL: https://news.ycombinator.com/item?id=49951918 Points: 1 # Comments: 0
HackerNews

EU Enforcement AI Act

Article URL: https://digital-strategy.ec.europa.eu/en/policies/enforcement-ai-act Comments URL: https://news.ycombinator.com/item?id=49952181 Points: 3 # Comments: 1
HackerNews

NIST AI SEC Core

Article URL: https://airc.nist.gov/airmf-resources/airmf/5-sec-core/ Comments URL: https://news.ycombinator.com/item?id=49952190 Points: 1 # Comments: 0
HackerNews

Show HN: Telegram AI Video Generator – Create AI Videos in Chat

A Telegram bot that generates AI videos from text prompts or images. Supports 8 top models including Kling, Runway, Seedance, Veo, Wan, Hailuo, MiniMax, and Grok. No desktop software needed - just chat with the bot and get videos in seconds. Comments URL: https://news.ycombinator.com/item?id=49952489 Points: 1 # Comments: 0
HackerNews

[No] Use for Humans in the Age of AI

Article URL: https://blog.hackflow.ru/blog/2026/10/04/ai-balance-of-power/ Comments URL: https://news.ycombinator.com/item?id=49952728 Points: 2 # Comments: 0
HackerNews

AI Policy Enforcement Report

Article URL: https://delinea.com/resources/ai-policy-enforcement-report Comments URL: https://news.ycombinator.com/item?id=49952749 Points: 1 # Comments: 0