TokenCap 3 Adds Sandboxed Local Plugins With Strict Capability Limits

·1 views

TokenCap 3 introduces a local plugin runtime with a deliberately small contract of two hooks, named tools, and one capability: reading and writing files within the plugin's own folder. Plugins are enabled per project through its package.json, and only workspace-relative file paths are accepted, while package names and remote modules are refused. Each plugin runs in its own V8 context with no access to require, process, or network, and its file I/O is confined to .tokencap/plugins/ with symlinks rejected. Hook and tool calls are capped at one second and plugin loading at 150 milliseconds, and a plugin that overruns is disabled until its file changes or the process restarts.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

OpenAI's AI pipeline reports 948 distinct Linux kernel root vulnerabilities for $1.2M

In a mid-October run, an unreleased OpenAI cyber model generated 948 distinct local privilege escalation flaws in the Linux kernel, each with a path to root access. The total API cost was about $1.21 million, roughly $1,280 per vulnerability. The pipeline narrowed the kernel to code reachable by unprivileged users, then had agents validate flaws in virtual machines and attempt root exploits, with common protections like KASLR, SMEP, and SMAP enabled. The bugs are local rather than remote, so an attacker would still need an initial foothold, and the findings are counted as vulnerabilities rather than merged fixes. OpenAI says human engineers review exploits and patches before disclosure, starting with the most severe cases and sending reports to kernel maintainers gradually.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Detecting silent failures in AI agents with traces and evaluation events

AI agents can return a successful HTTP 200 with no exception and no error span, yet still give a wrong or incomplete answer, which keeps monitoring dashboards green. The article proposes tracing every agent step, separating technical errors from content errors, and attaching an evaluation result to each trace. It relies on OpenTelemetry GenAI conventions, including agent and tool-call spans and a gen_ai.evaluation.result event that records quality scores. Capturing tool arguments and results is opt-in because it may expose sensitive data, so it is recommended only on a masked sample. A broken evaluator is recorded as an error rather than treated as a correct answer.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Freezing design tokens so AI agents can't edit shared styling scales

An agent asked to adjust spacing in a checkout header also changed a shared spacing token, which unintentionally affected other pages like settings. The author now freezes token and theme files by default for agent-driven UI work, allowing edits only to named component paths. Token changes require an explicit unlock, such as a human prompt or a separate pull request. When a design needs a new token, the agent is instructed to stop and propose the change in writing rather than editing the shared scale. The approach is paired with PR template checks, CI warnings, and review guidelines to keep token changes separate from feature work.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Using Power Logger Data and pandas to Size an Industrial Diesel Generator

A DEV Community guide explains how a plant engineer with basic Python can size a diesel generator using data from a power logger clipped to the incoming supply. It recommends logging for at least a full production week, including shift changes, weekend slowdowns and restarts after load-shedding, and noting seasonal peaks such as June cooling demand. The author suggests logging individual feeders as well as the incomer, then modeling restart surges by grouping large loads into steps. Site derating for high ambient temperature and altitude, plus expected future load growth, should be checked against each generator's load acceptance. Harmonic distortion from VFDs and UPS systems should also be logged because it affects alternator sizing.

0 comments Read more at DEV Community