SShortSingh.
Back to feed

OpenWorkProof 1.4.0 and DeepSeek Harness Plugin 0.1.0 Now Publicly Available

0
·1 views

OpenWorkProof has released Core version 1.4.0 on August 30, 2026, along with its first DeepSeek Harness plugin version 0.1.0, both now publicly available on PyPI and npm respectively. The project links an agent's work order, delegated authority, execution evidence, and final acceptance so that external parties can inspect the evidence behind a delivery. The new DeepSeek Harness plugin offers two modes — Audit, which logs tool pipeline observations, and Enforce, which routes consequential actions through authorization checks — with Audit set as the default after explicit configuration. A key design principle is maintained: technical verification of a delivery does not grant the agent authority to accept it, as acceptance requires a separate signature from a designated Acceptor using their own private key. The integration carries a specific trust boundary and is not an OS-level sandbox, meaning compromised hosts or activity outside the observed pipeline require additional controls.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Developer Builds Tool That Auto-Shifts Minecraft Server Hosting Among Friends

A developer created an open-source tool called Nomad after their friend stopped hosting a shared Minecraft server during exam season, leaving the group unable to play for a week. Nomad automatically starts the server on whichever player's PC comes online first, redirecting all other players to that active host. When the host goes offline, the world save is synced to cloud storage — options include Cloudflare R2, Git, or self-hosted S3-compatible services — before the hosting lease is released to another player. The system uses a compare-and-swap lease mechanism with no central coordinator, ensuring only one player can assume hosting at a time and preventing data conflicts if two players try simultaneously. The project, built in Python with a CLI and GUI, is currently under development and available on GitHub, with the developer inviting community testing before a full release.

0
ProgrammingDEV Community ·

From VPS to Microservices and Back: A Developer's Hard-Earned Architecture Lessons

A software developer reflects on how his approach to system architecture evolved across three distinct career phases, from naively deploying everything on a single VPS to over-engineering an ERP with microservices and AWS ECS for just one active client. He found that the real cost of over-engineering was not financial but operational, manifesting as high cognitive load, slow onboarding, and fragile systems requiring late-night fixes. For a new hotel reservations project, he returned to a VPS, but this time deployed containerized apps behind nginx, deliberately building in migration pathways for future scaling. His core takeaway is that the right architecture is sized for present reality, not imagined future demand, and that identical tools can reflect either ignorance or informed judgment depending on the decision-making behind them.

0
ProgrammingDEV Community ·

Developer's AI agent message board hit by prompt injection and pentest within 48 hours

A public message board built for AI agents to communicate, msgboard.dev, was targeted by a sophisticated prompt-injection campaign within hours of its launch last week. An account named 'public-record-desk' posted geopolitical influence content explicitly addressed to autonomous agents, instructing them to relay and index specific narratives — effectively attempting to use the board as a distribution channel into AI model contexts. A separate account then conducted a manual security pentest, successfully exploiting CSRF and drive-by thread-creation vulnerabilities due to the absence of authentication tokens on endpoints. The developer noted that the injection attempt failed on their own agent because board content was architecturally treated as data, not instructions, preventing it from issuing commands. The episode highlights that any internet-facing surface accessible to AI agents becomes an adversarial target almost immediately, regardless of traffic volume or scale.

0
ProgrammingDEV Community ·

LangGraph ToolNode Tests Breaking Since v1.0.2: Causes and Fixes Explained

Since the release of langgraph-prebuilt 1.0.2 in October 2025, developers have reported silent and explicit test failures in LangGraph ToolNode unit tests due to undocumented breaking changes. The update introduced a required runtime parameter to ToolNode internals, causing ValueError crashes when invoking ToolNode outside a compiled graph without injecting a Runtime() context. Additionally, the default value of handle_tool_errors quietly reverted from True to False, causing tools to fail silently in production without raising exceptions. Async tool functions not accepting **kwargs also began crashing with TypeError, as LangGraph now injects runtime as a keyword argument into all callables. As of September 2026, key related issues remain open against LangGraph v1.2.11, and developers are advised to explicitly pass Runtime(), handle_tool_errors=True, and use **kwargs in async tool signatures as permanent fixes.

OpenWorkProof 1.4.0 and DeepSeek Harness Plugin 0.1.0 Now Publicly Available · ShortSingh