Posts

Show HN: AVP – an agent can't leak a secret it never had https://ift.tt/XH6rnxW

Show HN: AVP – an agent can't leak a secret it never had A process can't leak a secret it never had. Shai-hulud, prompt-injection - you name it. They cannot steal what your agent (or an process) don't have. I run coding agents (Claude Code, Codex) on my own machines most of the day. Every one of them wants real API keys in env and I was scratching my head for the last few months how to contain it. The usual answer to this is a firewall. I don't buy it. A firewall tries to contain a secret the process is still holding, and the rules are painful to maintain. AVP gives the agent a placeholder and injects the real value at the last moment, on the wire: ``` # the agent's env holds only a placeholder STRIPE_API_KEY=avp-placeholder # agent sends: Authorization: Bearer avp-placeholder # AVP forwards upstream: Authorization: Bearer sk_live_...real... ``` Keep your passwords in your vault where they belong. AVP initially relies on Bitwarden as a secret manager. It...

Show HN: Stillwind – High Resolution Electronic Component Search https://ift.tt/ct8XCYx

Show HN: Stillwind – High Resolution Electronic Component Search We’ve spent the last couple of months building Stillwind Search, a search engine for electronic components that helps users find parts that fit even the most complex set of specifications. After talking to the people that actually build PCBs we found out that finding the exact part you are looking for, is consuming enormous amounts of times, is very tedious and then often doesn’t yield the best results. So we tried to cut down this search time by just requiring a (broad) description of the specifications and we find the correct part in minutes, not hours. This is possible through our own database of parts and their properties. We used LLMs to extract every parameter about a part into >1k schemas, collectively covering more than 130k properties. This depth of properties could no longer be visualized, so the database is queried interactively by an AI agent (Sonnet 4.6) to find the needle in the haystack of parts. Before ...

Show HN: A police department for your Claude Code agents https://ift.tt/O9Wp5dM

Show HN: A police department for your Claude Code agents https://ift.tt/ROjiH6u June 11, 2026 at 11:17PM

Show HN: Atlasphere – Live Infrastructure Diagrams https://ift.tt/LfJbnYC

Show HN: Atlasphere – Live Infrastructure Diagrams Hi HN. My name is Andrey. On a regular business day, I'm a software engineer working at AWS. Outside of work hours, I spend time on my hobby - writing code. I was once building a pet project that allowed customers to spin up fully synchronized blockchain nodes within just a few minutes. The backend was split into a control plane and a data plane, each with its own AWS account. Later I added two more AWS accounts. One for shared RPC nodes. One for the Analytics Service. Since I love to visualize things, I used drawio to visualize the architecture. With time, I noticed a pattern. I'd write some code, add a few lambda functions, update my drawio diagram, write more code, introduce a few more resources, test things, see that everything works fine and go to sleep with a smile on my face. Next week I'd check my diagram, and shockingly, it's missing some of the resources! This kept happening for a few more weeks until I decide...

Show HN: I built a microlearning app to learn personal finance https://ift.tt/GPQIWzg

Show HN: I built a microlearning app to learn personal finance https://ift.tt/adu6MVx June 10, 2026 at 11:16PM

Show HN: Extend UI – open-source UI kit for modern document apps https://ift.tt/nEe1uJ8

Show HN: Extend UI – open-source UI kit for modern document apps We're open-sourcing 14 components & examples today for PDF, DOCX, and XLSX viewers, plus bounding box citations, file upload, e-signature, and more. It's MIT licensed and fully customizable. Demo video here: https://ift.tt/Sxy2EMk When we started, we tried every file viewer and document component library we could find. Unfortunately, none of them had all the functionality (and polish) that we wanted, so we ended up building our own for https://extend.ai/ . It was only ever meant to be internal, but enough customers kept asking for it that we decided to open source it. It's useful for building document processing agents, real-time user facing document intake flows, or all kinds of internal tooling. We naively thought this would be a solved problem. Turns out, making PDF/XLSX/DOCX viewers that work at scale is not trivial...we use and maintain it for Extend ourselves, so we've fixed a lot of edge case...