Open-source HarmonyOS agent logs AI reasoning in an append-only, traceable ledger

·3 views

The hmharness project, an MIT-licensed agent framework for HarmonyOS and OpenHarmony development, keeps a cognitive ledger designed for auditors rather than chat users. Its 15 event categories, covering predictions, verifications, revisions and decisions, are never deleted and carry lineage chains linking each conclusion to the beliefs and revisions behind it. Because past records cannot be edited, wrong predictions can be traced to their source and every revision leaves a documented trail. The framework also ties project creation, builds, signing, installation and result checks to a local toolchain so outputs are verified against the machine. It is an independent community project with no affiliation to Huawei or OpenAtom.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Installing Self-Hosted Jitsi Meet on Ubuntu 24.04 for Private Video Calls

A guide explains how to deploy Jitsi Meet, an open-source video conferencing platform, on a self-managed Ubuntu 24.04 server. It highlights advantages over services like Zoom and Google Meet, including no guest accounts and no time limits. The setup covers hostname and DNS configuration, adding the Prosody and Jitsi package repositories, and firewall rules for web and UDP media traffic. It also walks through installing jitsi-meet with a Let's Encrypt certificate, which is needed for mobile app compatibility. Recommended hardware is at least 2 GB of RAM, with 4 GB advised for real meetings.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

PHP Team Warns of Unpatched RCE Flaw, Issues Interim Configuration Mitigations

The PHP security team has warned of a newly disclosed remote code execution vulnerability that does not yet have an official patch. The flaw affects only certain non-default configurations, allowing an attacker to run arbitrary code on the server via a crafted request. In the absence of a fix, the team has published interim mitigations, including disabling risky functions and remote URL inclusion and restricting filesystem access. The alert comes amid other recent incidents, such as a compromised LiteLLM package distributing info-stealer malware and a Railway breach prompting secret rotation. Engineers are advised to audit non-default PHP settings, apply the recommended changes, and monitor for the forthcoming official patch.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Daylight: A Local AI Planner That Schedules Work and Personal Tasks Together

Daylight is a personal assistant that turns a task list into a proposed day, mixing work and personal items while accounting for priorities, time estimates, fixed appointments and breaks. Users set available hours, enter tasks as lines or through a form, and a local open-weight model suggests categories, priorities and durations that the user can review before scheduling. Tasks that do not fit are listed under a "For another time" section with an explanation, and the day can be replanned when plans change. The project is open source under the MIT license, built with plain HTML, CSS and JavaScript, and runs locally with a small Node.js server. Early browser testing led the developer to restrict the model to a simpler output format, since it had invented times and dropped tasks, and the results were informal rather than a formal accuracy evaluation.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Over 52,000 SonarQube pages found exposed on port 9000 in one-day ZoomEye scan

A scan of internet-facing assets on 26 October 2026 counted about 52,068 SonarQube pages on port 9000, using ZoomEye data. SonarQube stores repository tokens, webhook secrets and integration credentials, and holds lists of known code weaknesses that could guide an attacker. The report advises teams to confirm their instances are reachable only from the analysis network and authorized developers. The counts reflect pages observed on a single day, so instances behind SSO proxies may not appear, and the figures do not by themselves show that authentication is weak. Regional breakdowns are based on IP address geolocation.

0 comments Read more at DEV Community