SShortSingh.
Back to feed

Developer Builds AI Ransomware Response Agent Using TrueForge at 2026 Hackathon

0
·1 views

A developer created AutoVault, an autonomous AI security agent, during the Agent Harness Hackathon 2026 to address the growing ransomware threat, which costs organizations over $20 billion annually. Built on TrueFoundry's open-source TrueForge harness, AutoVault can detect ransomware in 0.3 seconds and deploy five parallel subagents to investigate threats simultaneously. The system uses 23 MCP tools across four specialized servers and runs 20 Python scripts within a Daytona sandbox environment. To balance speed with safety, AutoVault incorporates a human-in-the-loop approval workflow that assigns risk scores from P1 to P4, requiring human sign-off before any irreversible actions are taken. The project aims to cut incident response times from hours to seconds while keeping human oversight intact for high-stakes decisions.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Verdict Tool Forces Verified Bug Reproduction Before Any Patch Is Accepted

Verdict is an open-source agent harness designed to enforce evidence-based bug investigation before any fix is written or merged. The tool uses three sequential subagents — Hunter, Surgeon, and Insurance — to identify trigger conditions, localize the responsible code change, and generate a regression test. No patch is considered valid unless it passes a test case that was built from verified, reproducible failure evidence. All observations are logged in an evidence ledger and cannot be discarded, even if they weaken a proposed explanation. Verdict runs as a GitHub Action or standalone CLI, with maintainers controlling which commands and environments the agents are permitted to use.

0
ProgrammingDEV Community ·

Persona-Execution Separation: A Two-Domain Architecture for Governed AI Agents

Organizations deploying AI agents face a structural tension between allowing agents to adapt over time and maintaining immutable, auditable records required by compliance teams. Persona-Execution Separation (PES) is a proposed architectural pattern that addresses this by splitting an agent into two distinct trust domains: a low-trust persona side handling tone and instructions, and a high-trust execution side managing stateful actions, data access, and audit logs. A governed contract bridge connects the two domains, enforcing approval matrices, data loss prevention grading, and stable identity continuity across the boundary. The pattern ensures that changes to an agent's persona do not invalidate past execution logs or trigger re-certification of audit trails. PES is driven by the principle that LLM internal states cannot reliably distinguish cosmetic changes from substantive ones, making an external validation gate necessary.

0
ProgrammingDEV Community ·

Writer Catches Himself Twice: How Visible Lists and Identical Prompts Skewed AI Randomness Tests

A developer published a self-experiment attempting to measure randomness in digit selection, only to issue a correction within 36 hours after spotting critical methodological flaws. The original test had the author writing 100 digits while viewing the previous ones, meaning apparent fairness likely reflected list-tracking rather than genuine randomness. A follow-up control — asking for single digits without any visible list — produced extreme bias, with responses converging almost entirely on the number 7. A further error was caught when all test prompts turned out to be byte-identical, potentially reducing 100 trials to one repeated result; adding unique request IDs still returned 7 in 50 out of 50 trials. The author concluded that observed patterns were artifacts of context and input structure, not meaningful signatures of how choices are made.

0
ProgrammingDEV Community ·

Why Cold Email AI Fails Without Vector Databases for Fact Retrieval

AI-powered cold email tools often produce confident but inaccurate personalizations because large language models generate plausible-sounding text rather than verified facts. A more reliable approach splits the task into two stages: a retrieval layer that assembles confirmed, timestamped signals about a prospect, and a generation layer where the LLM writes copy based only on those verified facts. Signals such as recent job changes, funding events, tech stack shifts, and public posts are embedded as vectors and retrieved based on both relevance and recency. Stale data is a major failure point, so retrieval systems should apply a recency weight alongside similarity scores to avoid referencing outdated information. Additional pitfalls include entity resolution errors, such as conflating two people with the same name or attributing an acquirer's news to a smaller company, which are data-matching problems rather than model limitations.