惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

The Cloudflare Blog
T
Tenable Blog
V
Vulnerabilities – Threatpost
T
Troy Hunt's Blog
SecWiki News
SecWiki News
C
CXSECURITY Database RSS Feed - CXSecurity.com
S
Secure Thoughts
Cyberwarzone
Cyberwarzone
A
Arctic Wolf
H
Heimdal Security Blog
www.infosecurity-magazine.com
www.infosecurity-magazine.com
N
News and Events Feed by Topic
The Hacker News
The Hacker News
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
Spread Privacy
Spread Privacy
Exploit-DB.com RSS Feed
Exploit-DB.com RSS Feed
P
Proofpoint News Feed
Recent Commits to openclaw:main
Recent Commits to openclaw:main
Cisco Talos Blog
Cisco Talos Blog
Stack Overflow Blog
Stack Overflow Blog
J
Java Code Geeks
Forbes - Security
Forbes - Security
Security Archives - TechRepublic
Security Archives - TechRepublic
Project Zero
Project Zero
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
Microsoft Azure Blog
Microsoft Azure Blog
T
Tor Project blog
WordPress大学
WordPress大学
AWS News Blog
AWS News Blog
Jina AI
Jina AI
阮一峰的网络日志
阮一峰的网络日志
Cloudbric
Cloudbric
O
OpenAI News
U
Unit 42
Google DeepMind News
Google DeepMind News
Simon Willison's Weblog
Simon Willison's Weblog
Recorded Future
Recorded Future
N
News | PayPal Newsroom
S
Schneier on Security
F
Full Disclosure
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
The GitHub Blog
The GitHub Blog
Microsoft Security Blog
Microsoft Security Blog
P
Privacy International News Feed
L
LINUX DO - 最新话题
F
Fortinet All Blogs
D
Darknet – Hacking Tools, Hacker News & Cyber Security
C
CERT Recently Published Vulnerability Notes
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Recent Announcements
Recent Announcements

Hacker News - Newest: "AI"

AI can't read an investor deck AI as an attorney? Student uses ChatGPT, Gemini to sue UW over alleged racial discrimination Hacking MCP Servers in AI Systems – The Rug Pull: Tool Changes After Approval GitHub - MeepCastana/KubeezCut: Free Web based video editor GitHub - GenAI-Gurus/awesome-eu-ai-act: Curated tools, official sources, OSS, templates, and guides for EU AI Act compliance. Can AI judge journalism? A Thiel-backed startup says yes, even if it risks chilling whistleblowers Coming soon: 10 Things That Matter in AI Right Now DARPA built an AI to fact-check enemy weapons claims What explains heterogeneity in AI adoption? When AI Meets Muscle: Context-Aware Electrical Stimulation Promises a New Way to Guide Human Movements - Department of Computer Science AI Changed How We Build. It Did Not Change What Matters. Linux rules on using AI-generated code - Copilot is OK, but humans must take 'full responsibility for the… Meta spins up AI version of Mark Zuckerberg to engage with employees Code Mode: Let Your AI Write Programs, Not Just Call Tools | TanStack Blog GitHub - Delavalom/graft: Go framework for building AI agents. Type-safe tools, multi-provider (OpenAI, Anthropic, Gemini, Bedrock), zero vendor SDKs. India's TCS tops estimates, says new AI models did not dent services demand Gen Z's fading AI hype Strong feeling: we are in a folded AI reality GitHub - machinarii/total-recall-catalog: A reference catalog of latest knowledge retrieval, memory & RAG systems GitHub - mensfeld/code-on-incus: Give each AI agent its own isolated machine with root, Docker, and systemd. Active defense detects and stops threats automatically.. Quantization, LoRA, and the 8% Problem: Benchmarking Local LLMs for Production AI Iran war: We spoke to the man making Lego-style AI videos that experts say are powerful propaganda Powell, Bessent discussed Anthropic's Mythos AI cyber threat with major U.S. banks GitHub - immartian/bellamem: Persistent belief-graph memory for AI agents. Retrieves decisive context by importance — not recency, not RAG, not /compact. recursive-mode: The Repo-Native Operating System for AI Engineering After the attack on Sam Altman's home, will AI CEO's go on the offensive? The biggest advance in AI since the LLM Opus 4.6 vs GPT 5.4 One Prompt Unity World Generation Test “AI polls” are fake polls Client Challenge Can AI be a 'child of God'? Inside Anthropic's meeting with Christian leaders How to Switch AI Chatbots and Why You Might Want To GitHub - MattMessinger1/agentic_refund_guardrail: Safe refund policy layer for AI agents — Python + TypeScript. Same behavior, shared tests. Adam/papers/emergent_values_whitepaper.md at master · strangeadvancedmarketing/Adam Ask HN: How do you stop playing 20 questions with your AI coding tools How far can automation and AI support psychotherapy? - @theU GitHub - stagas/rtdiff: realtime git diff gui and AI-assisted commits A Mac Studio for Local AI — 6 Months Later A History of the Early Years of AI at the University of Edinburgh Why AI Coding Tools Still Feel Stuck on Localhost MSN AI Datacenters Are Becoming Strategic Targets twitter.com Penn Researchers Use AI to Surface Unreported GLP-1 Side Effects in Reddit Posts Show HN: MoodSense AI (ML and FastAPI and Gradio, Deployed on Hugging Face) Moodsense Ai - a Hugging Face Space by aman179102 AI models are terrible at betting on soccer—especially xAI Grok GitHub - xialeistudio/echoic GitHub - HimashaHerath/github-dev-wrapped: AI-powered weekly GitHub activity reports deployed to GitHub Pages GitHub - alejandrobalderas/claude-code-from-source: Architecture, patterns & internals of Anthropic's AI coding agent — reverse-engineered from source maps AI and Tech brief: Ireland ascendant GitHub - Titovilal/context0: Context0 - Never Surrender Training for a Marathon with an AI Coach: What Worked and What Didn't Cyber Pulse: Agentic Intel - Apps on Google Play I Built an AI PR Reviewer That Catches Bugs by Not Looking for Bugs Gen Z workers are so fearful AI will take their job they’re intentionally sabotaging their company’s AI rollout | Fortune How AI Is Reimagining the Game of Golf–For Both Players and Courses GitHub - nattergabriel/reseed: A CLI tool for managing and distributing agent skills across projects Is SVG the final frontier? My AI workflow evolved from prompts to a near-autonomous workflow MLSharp Help - 3DGS Viewer & Generator I put my cognitive field based AI's runtime on GitHub Is Numble the first AI-proof game? A3: Kubernetes for autonomous AI agent fleets | Emergent Principles Deepali Vyas ("The Elite Recruiter") GitHub - msmarkgu/RelayFreeLLM: A restful API designed to route user prompts to various AI model providers. Unionized ProPublica staff are on strike over AI, layoffs, and wages Unleashing the Advantage of Quantum AI We're heading for an AI-fueled 'dementia crisis,' brain scientist warns The AI-Assisted Breach of Mexico's Government Infrastructure [pdf] GitHub - stef41/lmscan: 🔍 Detect AI-generated text and fingerprint which LLM wrote it. Open-source GPTZero alternative. Zero dependencies, works offline. MSN GitHub - visionscaper/collabmem: Enabling long-term collaboration with Agentic AI - building up episodic and world model memory over time with in-context awareness We gave an AI a 3 year retail lease in SF and asked it to make a profit | Andon Labs AI Code is Hollowing Out Open Source, and Maintainers are Looking the Other Way What leaked "SteamGPT" files could mean for the PC gaming platform's use of AI AI is the boss at this retail store. What could go wrong? GitHub - Wuzu11517/agentic-proxy: Local proxy meant to help reduce With Drones, Geophysics and ArtificiaI Intelligence, Researchers Prepare to Do Battle Against Land Mines A Single Operator, Two AI Platforms, Nine Government Agencies: The Full Technical Report 在 Steam 上购买 FriedrichAI: Offline AI 立省 10% GitHub - inevolin/resume-cli: Hit Claude usage limits? Resume any AI coding session elsewhere. Switch tools at zero friction. GitHub - atripati/ark: AI Runtime Kernel — a context operating system for AI agents. Eliminates tool bloat, loads only what’s needed, and gives LLMs their reasoning space back. How to Build a Secure AI PR Reviewer with Claude, GitHub Actions, and JavaScript This Startup Wants You to Pay Up to Talk With AI Versions of Human Experts Intel Arc Pro B70 Brings 32GB VRAM to Local AI for $949 WordPress 7.0: The Good, the AI, and the Still Missing AI on the couch: Anthropic gives Claude 20 hours of psychiatry IatroBench: Pre-Registered Evidence of Iatrogenic Harm from AI Safety Measures AI Agents Know About Supabase. They Don't Always Use It Right. The history and future of AI at Google, with Sundar Pichai Inside an AI‑enabled device code phishing campaign How Meta Used AI to Map Tribal Knowledge in Large-Scale Data Pipelines AI for Systems: Using LLMs to Optimize Database Query Execution Forecasting the Economic Effects of AI Introducing Tinker: Play with AI, bring your ideas to life AI sheds light on an ancient gaming mystery People really hate AI but not as much as Iran—or Democrats | Fortune What is an AI Product Engineer? Phoebe Gates wants her $185 million AI startup to succeed with 'no ties to my privilege or my last name': 'I have a chip on my shoulder' | Fortune
GitHub - alex-reysa/pm-go: Durable control plane for AI-assisted software delivery. Turns a feature spec into a typed plan, runs scoped agents in isolated worktrees, reviews diffs, merges in dependency order, enforces approvals + budgets, and only marks work complete when the evidence passes audit.
alexreysa · 2026-05-05 · via Hacker News - Newest: "AI"

pm-go: durable control plane for AI-assisted software delivery

pm-go is a durable control plane for AI-assisted software delivery.

Give it a feature spec and a repository. It turns that input into a typed plan, runs scoped implementation agents in isolated worktrees, reviews the diffs, merges tasks in dependency order, enforces approvals and budgets, and only calls the work complete when the evidence passes audit.

Most agent coding tools keep the workflow inside a chat transcript. pm-go moves the workflow into Postgres, Temporal, git worktrees, typed contracts, and HTTP APIs so runs are resumable, inspectable, and bounded.

flowchart LR
  Spec["Feature spec"] --> Plan["Structured plan"]
  Plan --> Tasks["Scoped task worktrees"]
  Tasks --> Review["Review and fix loop"]
  Review --> Integrate["Phase integration"]
  Integrate --> Audit["Phase and completion audits"]
  Audit --> Release["Release evidence"]
Loading

Why It Exists

  • Durable state, not chat memory. Plans, tasks, approvals, reviews, budgets, merge runs, and audits are persisted.
  • Bounded autonomy. Agents operate inside explicit file scopes and leased worktrees instead of open-ended repo access.
  • Evidence-based completion. A task is not done because an agent says so; it is done when diff scope, tests, review, integration, and audit agree.
  • Human intervention where it matters. Approval gates, overrides, and runbooks are first-class product paths, not ad hoc database surgery.
  • Local-first dogfood loop. The stack runs on Docker, Postgres, Temporal, Node, pnpm, and Claude runtimes that can be stubbed for CI.

Current Status

pm-go is a developer-preview monorepo. The local stack is usable for dogfood and end-to-end smokes, with stub runners for deterministic CI and Claude-backed runners for live development.

The current tree includes:

  • Hono control-plane API for specs, plans, tasks, phases, approvals, artifacts, budget reports, events, overrides, completion, and release.
  • Temporal worker hosting planning, task execution, review, fix, integration, phase audit, completion audit, and final release workflows.
  • Drizzle-managed Postgres schema with migrations 0000-0017.
  • Ink TUI for inspecting plans and driving task, phase, completion, and release actions.
  • Claude SDK/process adapters plus stub runners for repeatable tests.

Quick Start

Install (global pm-go command)

curl -fsSL https://raw.githubusercontent.com/alex-reysa/pm-go/main/scripts/install.sh | bash

The installer clones into ~/.pm-go/pm-go, builds the workspace, and symlinks pm-go into /usr/local/bin (or ~/.local/bin if /usr/local/bin isn't writable). After install, pm-go works from any directory.

To upgrade later, re-run the same command. To install a clone in place, run bash scripts/install.sh from the repo root.

Use it

cd /path/to/your/repo
pm-go implement --spec ./feature.md --runtime stub

That single command brings up Docker (Postgres + Temporal), applies migrations, starts the worker and API as tracked children, waits for /health, submits the spec, and drives the resulting plan all the way to released — running tasks, reviewing them, integrating phases, auditing, and finally releasing. Stay in the foreground; press Ctrl+C to tear the whole stack down cleanly.

The --runtime stub flag uses fixture-driven runners so this completes in seconds without an Anthropic API key. For real model-driven work, drop the flag.

--runtime auto (the default) auto-detects, in order: ANTHROPIC_API_KEY, a Claude Code OAuth session at ~/.claude/.credentials.json, then the claude CLI on PATH. Run pm-go doctor to confirm which auth source it found.

To watch progress in the operator dashboard while it runs:

pnpm tui     # in a second terminal

For a deeper walkthrough of the bundled example, see examples/golden-path/README.md.

The TUI operator loop:

  1. Run ready tasks with g r.
  2. Review tasks with g v.
  3. Fix tasks with g f when review asks for changes.
  4. Integrate a phase with g i.
  5. Audit a phase with g a.
  6. Approve a pending high-risk task with g A.
  7. Complete the plan with g c.
  8. Release after a passing completion audit with g R.

The full walkthrough, including API-only commands and state transitions, lives in docs/getting-started.md.

Requirements

  • Node >=22
  • pnpm >=10
  • Docker, for Postgres and Temporal
  • jq, for the copy-paste API examples (optional)

Sub-Commands

pm-go exposes the following subcommands; pick the one that matches your stage:

pm-go implement --repo . --spec ./feature.md     # boot stack + drive to release
pm-go run       --repo . --spec ./feature.md     # boot stack only; drive yourself
pm-go drive     --plan <uuid>                    # drive a plan against an already-up stack
pm-go status                                     # show worker config, API health, open workflows
pm-go why       <uuid>                           # explain why a plan/phase/task is in its state
pm-go doctor    [--repair]                       # diagnose + auto-fix infra
pm-go ps                                         # list supervisor / worker / api / drive PIDs
pm-go stop      [--instance <port>]              # SIGTERM (then SIGKILL) every pm-go-owned process
pm-go recover                                    # drop dead entries from the state file

Run pm-go <command> --help for command-specific options.

pnpm dev is a thin wrapper around pm-go run. If you prefer to drive the worker, API, and TUI as separate processes — for debugging, attaching a profiler, or running them on different machines — see docs/getting-started.md.

Fast Verification

These commands do not require an Anthropic API key.

pnpm typecheck
pnpm test
pnpm smoke:phase7-matrix
pnpm smoke:phase7-chaos

The Docker-backed smoke exercises the durable local stack:

pnpm smoke:bundle-freshness
pnpm smoke:phase7
pnpm smoke:v082-features

Runtime Modes

Each agent role can run as stub, sdk, claude, or auto.

For a live SDK-backed run:

export ANTHROPIC_API_KEY=sk-ant-...
export PLANNER_RUNTIME=sdk
export IMPLEMENTER_RUNTIME=sdk
export REVIEWER_RUNTIME=sdk
export PHASE_AUDITOR_RUNTIME=sdk
export COMPLETION_AUDITOR_RUNTIME=sdk
pnpm dev:worker

*_RUNTIME is the canonical configuration surface. The older *_EXECUTOR_MODE variables are still accepted for smoke-script compatibility, but new docs and manual runs should use *_RUNTIME.

See docs/runtimes.md for runtime resolution, CLI-process mode, policy bridge behavior, and diagnostics.

Repository Map

  • apps/api: Hono control-plane API.
  • apps/worker: Temporal worker and activity host.
  • apps/tui: Ink terminal operator dashboard.
  • apps/cli: diagnostics such as pm-go doctor.
  • packages/contracts: shared domain contracts and validators.
  • packages/db: Drizzle schema and migrations.
  • packages/executor-claude: Claude runner adapters.
  • packages/worktree-manager: git branch, worktree, lease, and diff-scope logic.
  • packages/policy-engine: budget, approval, and stop-condition decisions.
  • packages/observability: durable span/event conventions.
  • examples: spec templates and runnable example specs.
  • docs: architecture, getting started, API, runtime, runbooks, and specs.

Documentation

Start here:

Contributing

See CONTRIBUTING.md for local setup, branch and commit conventions, and per-PR test expectations.

Security issues: follow SECURITY.md. Do not open public issues for vulnerabilities.

License

Licensed under the Apache License, Version 2.0. See LICENSE.