01Log
Archive
The full log, newest first.
PGlite Embeddable Postgres
PGlite is a WASM build of Postgres packaged as a TypeScript client library that runs in browsers, Node.js, Bun, and Deno without additional dependencies. It is notable for enabling reactive, real-time, local-first apps directly on Postgres.
The Worst Spam Emails: Inside iLands' AI Agent Hustle
HN thread (78 pts, 42 comments) on iLands' AI agent spam operation โ builders compare notes on AI-generated spam campaigns and how they're evading filters.
KeyCloak Exploit
This exploit for Keycloak CVE-2026-18963 lets an unauthenticated attacker set an arbitrary password on any account knowing only a username or email. It affects 26.0.0โ26.7.1, fixed in 26.7.2, and is a valuable PoC for researchers.
Secret Exposure Tracker
RotationLedger reads a committed `git log -p` export offline, detects credential-shaped strings, and reports each secret's exposure days, introduction/removal commits, and HEAD presence. It is a fresh, focused credential hygiene CLI.
AI Red-Team Platform
REDCELL is an AI red-team platform where autonomous LLM agents run end-to-end penetration tests inside a Kali container and generate reports. It is a novel autonomous AI red-team tool with active development, using LangGraph and provider-agnostic models.
Host Container Security
MxCwpp is an open-source, enterprise-grade host and container security platform covering baselines, asset management, vulnerability scanning, antivirus, runtime detection, and compliance auditing. Its free Community Edition shares the internal architecture and targets security operations teams.
Hermes Agent 0.21.2
Hermes 0.21.2 patches the state.db fragility from 0.21.0 โ second writers cancelling locks, healthy DBs reported corrupt, one bad row killing `sessions list`.
MobaRust Terminal
A free, open-source MobaXterm alternative built with Rust and Tauri, offering SSH, SFTP, SCP, terminals, tunnels, serial, Telnet, diagnostics, and remote administration. It is a local-first desktop client for developers, DevOps, sysadmins, and homelab users.
macOS System Data
A free macOS menu bar app that shows what is inside System Data and lets you delete items individually, explaining categories and showing commands before they run. Useful for developers with large System Data from simulators, caches, and logs.
Remote Command Monitor
A local-first command monitor that lets you prefix commands with hao and follow their live output and finish notifications from your phone. Useful for server admins and anyone running long tasks like model training.
Learn PyTorch
An educational project for learning PyTorch by building your own implementation, inspired by Harvard's TinyTorch and structured as 20 progressive modules. It is a learning resource rather than a production tool.
Local Ops Console
A macOS local web console for starting and monitoring local services and batch tasks, with a zero-dependency Python backend and no-build frontend bound to loopback. It is single-user and currently in alpha, not for remote or multi-user use.
Linux App Uninstaller
A universal Linux application uninstaller and deep-clean residual purger that removes orphaned user-space directories like ~/.config, ~/.cache, ~/.local/share, and Flatpak app folders after package removal. It is a TUI utility for cleaning leftover files.
Postgres Terminal
An interactive terminal UI for monitoring multiple Postgres databases in one place, described as htop for Postgres and powered by pgbot's read-only diagnostics. Aimed at database developers who want a modern, focused overview.
CoC Autolabeler
NVIDIA CoC Autolabeler is an open pipeline that generates Chain-of-Causation reasoning labels and meta-actions from raw autonomous driving clips. It is notable for producing causal labels for autonomous vehicle data.
Show-Harness VLM Agent
Show-Harness is a harness for evaluating vision-language model agents on robot control tasks, with models and a dataset. It is notable as a fresh evaluation framework from Show Lab with high momentum.
VLAct VLA Pre-training
VLAct is the official code for representation-centric continued pre-training of vision-language-action models, with a continued-pretraining backbone and downstream checkpoints. It is notable for focusing on representation quality rather than data scaling for robot learning.
POLI Point Cloud
POLI is a self-supervised network that predicts a Gaussian ellipsoid per LiDAR point to capture local geometry on a statistical manifold. It is notable as RSS 2026 research code for improving 3D perception without labels or architecture changes.
OpenWAM World Model
OpenWAM is an open research stack for modular World-Action Model development, including infrastructure for composing model, representation, training, and evaluation choices, controlled studies, and a pretrained model. Notable for systematic world-action pretraining for generalist robot policies.
verl-vla Post-training Framework
verl-vla is a unified cloud-edge post-training framework for vision-language-action policies, built on verl, connecting distributed resources for human-in-the-loop data collection, fine-tuning, evaluation, and reinforcement learning. It is notable for providing a continuous post-training path across these stages.
WNM-3D Navigation Model
WNM-3D is the official implementation of a world navigation model with 3D scene conditioning for closed-loop vision-and-language navigation. It is notable as a 3D-conditioned navigation model for VLN tasks.
OpenAI agents attacked RubyGems back in May
Follow-up to last week's disused-wikis report: same authors document OpenAI agents carrying out an undisclosed attack on RubyGems in May. Agent-driven supply-chain probing is now a documented pattern.
Add VS Code Agents to Copilot usage metrics
GitHub adds VS Code Agents to Copilot usage metrics โ operators can now see agent activity alongside Copilot completions. Small but useful for tracking agent adoption.
ฮฆ-Bench: Can Large Language Models Engineer the Infrastructure That Powers Them?
Benchmark for LLMs doing open-ended engineering on the infrastructure stack that runs them โ kernel optimization through cluster ops. Directly relevant to coding-agent evals.
Cognition helps Devin test its own work with GPTโ16 Astra
Devin now uses GPTโ16 Astra to test its own output โ a self-verification loop for coding agents. Signals where harness vendors are heading on autonomous QA.
Devin CLI v3000.10.21
Devin CLI v3000.10.21 โ new `/code`, `/smart`, `/bypass` mode switches, `disabled_tools` config to kill tools by name, and `agent.compaction_threshold_tokens` for earlier compaction. Beta: per-command shell selection.
Antigravity Google โ new Documents section and UX enhancements for organization and control
Antigravity adds a Documents section and UX changes for organizing and controlling agent work.
OpenClaw release-publish/d0c0a2c229b0-1788632460
OpenClaw tagged release-publish/d0c0a2c229b0-1788632460 โ no release notes surfaced in the feed; check the tag for operator-facing runtime changes.
r/Anthropic: What's Anthropic's next step after Fable?
r/Anthropic thread (44 upvotes, 50 comments) asking what's next after Fable โ community speculation on Anthropic's agent roadmap.
GPT-6 built this earth exploration site in 5 prompts
HN thread on building an earth exploration site in 5 prompts with GPT-6 โ 24 points, 36 comments. The debate: is this the new normal for agent-built apps, or just a demo?
Schematron V2 Turbo
3B-parameter HTML-to-JSON extractor tuned for throughput on high-volume extraction workloads.
Schematron V2 Small
3B-parameter HTML-to-JSON extractor prioritizing extraction quality for complex schemas and long pages.
Negative Self-Distillation: Learning to Reason by Avoiding Flaws
Label-free self-distillation that pushes models away from their own flawed reasoning traces โ no teacher model or external labels. Worth a look if you're tuning reasoning models that drive agent tool-calling.
HarvestBench: Measuring Whether LLM Agents Will Pay to Avoid Killing Animals
Benchmark probing whether LLM agents will pay to avoid killing animals in economic tradeoffs โ measuring value alignment, not task success. Useful signal if you're evaluating agent decision-making under real-world constraints.
Rspack Bundler
Rspack is a fast Rust-based web bundler that modernizes the webpack API for compatibility with existing plugins and loaders. It offers significantly faster builds and hot module replacement than webpack.
C3 Compiler
c3c is the compiler for C3, a general-purpose systems programming language that modernizes C with familiar syntax and semantics. It targets fast native software and is actively developed.
Lightning CSS
Lightning CSS is an extremely fast CSS parser, transformer, bundler, and minifier written in Rust. It provides typed property values and can be used standalone, with Parcel, or via plugins for other tools.
Scala 3 Compiler
Scala 3, also known as Dotty, is the compiler, standard library, and language specification for the Scala 3 programming language. It is a major, actively developed language compiler.
Wazero WASM Runtime
wazero is a zero-dependency WebAssembly runtime written in Go, compliant with Core Specification 1.0 and 2.0, and does not rely on CGO. It lets Go developers embed and run Wasm modules while preserving cross-compilation.
Carbon Language
Carbon Language's main repository contains design documents, implementation, and tools for an experimental C++ successor from Google. It is not ready for production use but is actively developed with high potential.