SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

Goish ports Go 1.25 runtime into no_std Rust, targeting compliance and provenance

0
·1 views

Thai engineer Chanwit Kaewkasi from Korat, working under Cogentica AI, has built Goish — a project that ports Go 1.25's standard library and runtime into Rust without relying on std, glibc, Tokio, or a garbage collector. The project brings Go's concurrency primitives — goroutines, channels, and select — into Rust while preserving memory safety, producing fully static binaries. A key motivation behind Goish is software supply-chain compliance: each ported function carries a comment tracing it back to the exact file and line in the Go SDK, with CI checks verifying those references remain accurate. This function-level provenance addresses a gap that tools like SLSA and SBOM cannot fill — proving that ported crypto or runtime code faithfully reflects its upstream source rather than being reimplemented loosely. The project is timed against approaching regulatory deadlines, including the EU Cyber Resilience Act's SBOM mandates and the US CNSA 2.0 transition, which together demand traceable, verifiable code lineage.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Developer Builds AI Voice Tutor Shiksha in 10-Day Murf AI Challenge

A developer built Shiksha, a voice-based learning assistant for students, as part of Murf AI's 10 Days of Voice Agents challenge. The system lets students ask questions, take quizzes, and practice mathematics through natural spoken conversation rather than text input. Shiksha uses a technology stack combining LiveKit for real-time audio, Deepgram for speech-to-text, Google's Gemini for reasoning, and Murf Falcon for text-to-speech output. A SQLite-backed memory system allows the agent to retain student profiles and prior learning history across sessions, while a Flask dashboard tracks call success metrics. The project also includes a human escalation flow that enables the agent to hand off to a human or a specialist maths agent when a student is stuck.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Sigstore Cosign Enables Keyless Container Signing and SLSA Provenance Verification

Sigstore Cosign allows developers to cryptographically sign OCI container images during CI/CD builds without managing long-lived private keys, using OIDC identity tokens issued by the Fulcio certificate authority. Signature metadata is recorded in Rekor, a public immutable transparency log, making any tampering detectable by container runtimes. Beyond signing, Cosign supports attaching SLSA build provenance attestations and Software Bill of Materials directly to container image registry entries, enabling downstream scanners to audit build integrity. Kubernetes admission controllers like Kyverno can enforce policies that block unsigned or non-compliant images from running in clusters. Together, these tools address supply chain risks such as compromised CI/CD credentials or malicious tag overwrites in enterprise container registries.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer uses Claude Code to auto-generate narrated product demo without any manual editing

A solo developer used Claude Code, an agentic AI coding tool, to produce a fully narrated product demo video for ClinTrialFinder, a cancer clinical-trial matching tool, without touching a screen recorder or video editor. The agent automated three distinct steps: recording the live web app via a Playwright script, generating voiceover audio through the ElevenLabs text-to-speech API, and syncing narration to on-screen actions using logged timestamps and ffmpeg. Synchronization was achieved by logging key interaction moments during recording and aligning each narration phrase to its corresponding beat automatically. The entire pipeline — record, narrate, align, and assemble — runs as reusable code, meaning any product update can trigger a fresh, re-synced video with a single command. The developer noted this approach replaces four traditionally manual, skill-dependent steps with a single AI-guided conversation.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Nodeblue's Nexus Parses Industrial Code Live Instead of Relying on Embeddings

Applied research lab Nodeblue built an industrial AI system called Nexus after discovering that standard retrieval-based AI pipelines fail in real factory environments. A key test revealed that all eleven frontier language models incorrectly identified which version of a control program was running on a live processor, because they only had access to the archived file. Nodeblue's engine solved this by adding live OPC UA reads from running controllers, giving models access to real-time facts rather than static documents. The system also uses deterministic parsing of industrial control logic — including ladder diagrams, structured text, and tag databases — to ensure consistent, cited answers rather than probabilistic guesses. Across 4,386 real production files from Rockwell, Siemens, Ignition, and CODESYS platforms, the parser has reported zero errors, underscoring the team's argument that reliable industrial AI depends on data access, not model capability alone.

0 comments Read more at DEV Community