SShortSingh.
Back to feed

Buckle Lets AI Agents Work on Remote Machines Without Full SSH Access

0
·6 views

Buckle is a remote execution harness that runs on a user's machines and gives AI agents scoped access to an environment such as a container, remote server, or laptop. Agents connect over HTTP or stdio and use only the tools and approval rules the user configures, including file access, a sandboxed shell, web fetch, a browser, and Git. Every action is allowed, requires approval, or is denied before it runs, with deny rules taking precedence. Users can restrict commands by pattern, limit network access to an approved host list, and share folders read-only, while credential files always prompt for approval. The project is part of a broader effort, 5straps, aimed at auditable agent networks for enterprises, and early access is currently open for feedback.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

OpenProject API tokens depend on project membership to determine real access

OpenProject's API accepts session auth, personal tokens, OAuth 2.0, and external OIDC tokens, but a valid token only identifies the caller. What the caller can actually see or change is determined by their project memberships and roles. Inventories that record only token IDs miss the projects and work packages that make a credential risky. The article also warns that anonymous users may receive permissions on public projects unless authentication is required for all requests. It recommends testing tokens as members, non-members, and administrators, and revoking access promptly during offboarding.

0
ProgrammingDEV Community ·

Backtesting a Polymarket Market-Making Bot Before Going Live

The article is the ninth in a series on building a Polymarket market-making bot and focuses on testing whether its adaptive strategy actually earns money. It notes that a quote that looks profitable on paper, such as a $4 gross spread on 100 tokens, can fail due to unfilled orders, partial fills, adverse price moves, queue position, or trading costs. Backtesting is presented as replaying historical market data to simulate the bot's decisions before any real capital is committed. The piece outlines a modular Python framework covering data, replay, strategy, execution simulation, portfolio tracking, and performance analysis. It also explains that backtesting is followed by paper trading and then live trading, and that a good backtest does not guarantee live success.

0
ProgrammingDEV Community ·

How to Build a Minecraft Network with Velocity: Lobby, Survival and Minigames

A Minecraft network links several servers so players can move between a lobby, survival, creative and minigames without disconnecting. The Velocity proxy, made by the PaperMC team, serves as the single address players join and needs little memory, while Paper or Purpur servers run the actual worlds. The guide recommends a 512 MB or 1 GB plan for the proxy and sizing each game server like a standalone Minecraft server. Setup involves listing game servers in velocity.toml, enabling modern forwarding with a shared secret, and setting online-mode=false on the game servers so the proxy handles login. Waterfall is also available but its development has ended, so Velocity is the recommended choice for new networks.

0
ProgrammingDEV Community ·

Most SaaS firms leave AI search bots open on robots.txt, while news sites block them

A developer audited the home pages of 40 well-known websites in November 2026 to see how their robots.txt files treat 12 AI crawlers, and 31 sites yielded usable results. The crawlers were split into AI search and assistant bots, which fetch pages to answer users, and training bots, which collect content for model training. Ten of the 31 sites block at least one search or assistant bot, and all six news sites in the sample do so. None of the ten SaaS and developer tool companies block those bots, and nine of them publish an llms.txt file, which no news site does. The author suggests the split may reflect business models, since publishers risk losing visits to AI answers while software firms may benefit from mentions. The audit also revealed a bug in the author's own tool, which had wrongly flagged Figma as blocking AI search bots because Python's urllib.robotparser mishandles the end-of-URL marker and some bot-name matches.