SShortSingh.
Back to feed

I attack-tested my agent's seatbelt. Here's what survived.

0
·26 views

A blocklist for destructive agent commands passed its own tests — then failed four bypasses I wrote myself. The fix isn't smarter parsing. Tested receipts inside. I wrote a seatbelt for my AI coding agent: a PreToolUse hook that inspects every Bash call before it runs and blocks the destructive ones. It passed its own test suite — five runs, five green.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Developer opts for on-device AI in writing assistant for privacy and offline use

The creator of the DraftKey writing assistant chose to run its AI model locally on users' computers rather than via a cloud service. This approach ensures user text remains private, works without an internet connection, and avoids per-use API fees. The trade-off is that the app requires a significant 1.1 GB model download, at least 8 GB of RAM, and a Mac with Apple Silicon chips. While the local model is less powerful than large cloud alternatives, it suffices for tasks like short rewrites and autocomplete. The developer notes that user privacy has emerged as the most appreciated feature of this design.

0
ProgrammingDEV Community ·

Task runner vx explains how to calculate optimal task concurrency using system resources

The vx task runner details how it determines the number of tasks to run simultaneously. Its core calculation uses the CPU quota assigned to a container, not the host machine's total cores. On Linux, it reads these limits from the cgroup filesystem, while on macOS it uses the machine's total CPU count. Users can override this default concurrency setting manually. The article was originally published on the vx blog, which is an MIT-licensed tool for JavaScript monorepos.

0
ProgrammingDEV Community ·

Developer details essential safeguards for moving bots from prototype to production

A developer recounts how a simple weekend order-taking bot required a major overhaul when adopted by a real business. The transition exposed numerous unanticipated production failures, such as duplicate webhooks, third-party API outages, and database errors. These issues necessitated a complete rewrite to include robust error handling, circuit breakers, and queue management from the outset. The article provides tested code examples and specific failure scenarios to prevent order loss. It emphasizes that building for production resilience from day one is crucial for any business-critical application.

0
ProgrammingDEV Community ·

Developer creates parallel processing engine to accelerate complex AI agent reasoning

A developer has built a high-dimensional parallel processing engine called VPU v10.13 designed to augment large language models. The system runs on standard Intel Iris Xe integrated graphics hardware and integrates with AI agents via the LangChain framework. It addresses the sequential nature of LLMs by enabling parallel exploration of thousands of potential solution paths for complex problems like game-tree searches. The tool acts as a 'subconscious accelerator,' allowing the LLM to handle sequential reasoning while the VPU performs simultaneous multi-path analysis. Benchmark results show the system can process over 3,000 equivalent frames per second at 512 dimensions.