惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

T
Threat Research - Cisco Blogs
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
The Register - Security
The Register - Security
A
About on SuperTechFans
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
L
LangChain Blog
N
Netflix TechBlog - Medium
量子位
博客园 - 三生石上(FineUI控件)
宝玉的分享
宝玉的分享
H
Help Net Security
D
Docker
D
DataBreaches.Net
T
Tailwind CSS Blog
阮一峰的网络日志
阮一峰的网络日志
B
Blog
博客园 - 聂微东
Apple Machine Learning Research
Apple Machine Learning Research
Google DeepMind News
Google DeepMind News
The Cloudflare Blog
F
Full Disclosure
GbyAI
GbyAI
F
Fortinet All Blogs
Last Week in AI
Last Week in AI
Y
Y Combinator Blog
人人都是产品经理
人人都是产品经理
Recent Announcements
Recent Announcements
博客园 - Franky
MongoDB | Blog
MongoDB | Blog
有赞技术团队
有赞技术团队
博客园 - 叶小钗
小众软件
小众软件
V
Visual Studio Blog
月光博客
月光博客
Stack Overflow Blog
Stack Overflow Blog
The GitHub Blog
The GitHub Blog
Recorded Future
Recorded Future
J
Java Code Geeks
雷峰网
雷峰网
P
Privacy & Cybersecurity Law Blog
C
Cisco Blogs
C
Cyber Attacks, Cyber Crime and Cyber Security
AWS News Blog
AWS News Blog
Webroot Blog
Webroot Blog
美团技术团队
N
News | PayPal Newsroom
G
Google Developers Blog
Security Archives - TechRepublic
Security Archives - TechRepublic
博客园_首页
V
Vulnerabilities – Threatpost

Hacker News - Newest: "AI"

AI can't read an investor deck AI as an attorney? Student uses ChatGPT, Gemini to sue UW over alleged racial discrimination Hacking MCP Servers in AI Systems – The Rug Pull: Tool Changes After Approval GitHub - MeepCastana/KubeezCut: Free Web based video editor GitHub - GenAI-Gurus/awesome-eu-ai-act: Curated tools, official sources, OSS, templates, and guides for EU AI Act compliance. Can AI judge journalism? A Thiel-backed startup says yes, even if it risks chilling whistleblowers Coming soon: 10 Things That Matter in AI Right Now DARPA built an AI to fact-check enemy weapons claims What explains heterogeneity in AI adoption? When AI Meets Muscle: Context-Aware Electrical Stimulation Promises a New Way to Guide Human Movements - Department of Computer Science AI Changed How We Build. It Did Not Change What Matters. Linux rules on using AI-generated code - Copilot is OK, but humans must take 'full responsibility for the… Meta spins up AI version of Mark Zuckerberg to engage with employees Code Mode: Let Your AI Write Programs, Not Just Call Tools | TanStack Blog GitHub - Delavalom/graft: Go framework for building AI agents. Type-safe tools, multi-provider (OpenAI, Anthropic, Gemini, Bedrock), zero vendor SDKs. India's TCS tops estimates, says new AI models did not dent services demand Gen Z's fading AI hype Strong feeling: we are in a folded AI reality GitHub - machinarii/total-recall-catalog: A reference catalog of latest knowledge retrieval, memory & RAG systems GitHub - mensfeld/code-on-incus: Give each AI agent its own isolated machine with root, Docker, and systemd. Active defense detects and stops threats automatically.. Quantization, LoRA, and the 8% Problem: Benchmarking Local LLMs for Production AI Iran war: We spoke to the man making Lego-style AI videos that experts say are powerful propaganda Powell, Bessent discussed Anthropic's Mythos AI cyber threat with major U.S. banks GitHub - immartian/bellamem: Persistent belief-graph memory for AI agents. Retrieves decisive context by importance — not recency, not RAG, not /compact. recursive-mode: The Repo-Native Operating System for AI Engineering After the attack on Sam Altman's home, will AI CEO's go on the offensive? The biggest advance in AI since the LLM Opus 4.6 vs GPT 5.4 One Prompt Unity World Generation Test “AI polls” are fake polls Client Challenge Can AI be a 'child of God'? Inside Anthropic's meeting with Christian leaders How to Switch AI Chatbots and Why You Might Want To GitHub - MattMessinger1/agentic_refund_guardrail: Safe refund policy layer for AI agents — Python + TypeScript. Same behavior, shared tests. Adam/papers/emergent_values_whitepaper.md at master · strangeadvancedmarketing/Adam Ask HN: How do you stop playing 20 questions with your AI coding tools How far can automation and AI support psychotherapy? - @theU GitHub - stagas/rtdiff: realtime git diff gui and AI-assisted commits A Mac Studio for Local AI — 6 Months Later A History of the Early Years of AI at the University of Edinburgh Why AI Coding Tools Still Feel Stuck on Localhost MSN AI Datacenters Are Becoming Strategic Targets twitter.com Penn Researchers Use AI to Surface Unreported GLP-1 Side Effects in Reddit Posts Show HN: MoodSense AI (ML and FastAPI and Gradio, Deployed on Hugging Face) Moodsense Ai - a Hugging Face Space by aman179102 AI models are terrible at betting on soccer—especially xAI Grok GitHub - xialeistudio/echoic GitHub - HimashaHerath/github-dev-wrapped: AI-powered weekly GitHub activity reports deployed to GitHub Pages GitHub - alejandrobalderas/claude-code-from-source: Architecture, patterns & internals of Anthropic's AI coding agent — reverse-engineered from source maps AI and Tech brief: Ireland ascendant GitHub - Titovilal/context0: Context0 - Never Surrender Training for a Marathon with an AI Coach: What Worked and What Didn't Cyber Pulse: Agentic Intel - Apps on Google Play I Built an AI PR Reviewer That Catches Bugs by Not Looking for Bugs Gen Z workers are so fearful AI will take their job they’re intentionally sabotaging their company’s AI rollout | Fortune How AI Is Reimagining the Game of Golf–For Both Players and Courses GitHub - nattergabriel/reseed: A CLI tool for managing and distributing agent skills across projects Is SVG the final frontier? My AI workflow evolved from prompts to a near-autonomous workflow MLSharp Help - 3DGS Viewer & Generator I put my cognitive field based AI's runtime on GitHub Is Numble the first AI-proof game? A3: Kubernetes for autonomous AI agent fleets | Emergent Principles Deepali Vyas ("The Elite Recruiter") GitHub - msmarkgu/RelayFreeLLM: A restful API designed to route user prompts to various AI model providers. Unionized ProPublica staff are on strike over AI, layoffs, and wages Unleashing the Advantage of Quantum AI We're heading for an AI-fueled 'dementia crisis,' brain scientist warns The AI-Assisted Breach of Mexico's Government Infrastructure [pdf] GitHub - stef41/lmscan: 🔍 Detect AI-generated text and fingerprint which LLM wrote it. Open-source GPTZero alternative. Zero dependencies, works offline. MSN GitHub - visionscaper/collabmem: Enabling long-term collaboration with Agentic AI - building up episodic and world model memory over time with in-context awareness We gave an AI a 3 year retail lease in SF and asked it to make a profit | Andon Labs AI Code is Hollowing Out Open Source, and Maintainers are Looking the Other Way What leaked "SteamGPT" files could mean for the PC gaming platform's use of AI AI is the boss at this retail store. What could go wrong? GitHub - Wuzu11517/agentic-proxy: Local proxy meant to help reduce With Drones, Geophysics and ArtificiaI Intelligence, Researchers Prepare to Do Battle Against Land Mines A Single Operator, Two AI Platforms, Nine Government Agencies: The Full Technical Report 在 Steam 上购买 FriedrichAI: Offline AI 立省 10% GitHub - inevolin/resume-cli: Hit Claude usage limits? Resume any AI coding session elsewhere. Switch tools at zero friction. GitHub - atripati/ark: AI Runtime Kernel — a context operating system for AI agents. Eliminates tool bloat, loads only what’s needed, and gives LLMs their reasoning space back. How to Build a Secure AI PR Reviewer with Claude, GitHub Actions, and JavaScript This Startup Wants You to Pay Up to Talk With AI Versions of Human Experts Intel Arc Pro B70 Brings 32GB VRAM to Local AI for $949 WordPress 7.0: The Good, the AI, and the Still Missing AI on the couch: Anthropic gives Claude 20 hours of psychiatry IatroBench: Pre-Registered Evidence of Iatrogenic Harm from AI Safety Measures AI Agents Know About Supabase. They Don't Always Use It Right. The history and future of AI at Google, with Sundar Pichai Inside an AI‑enabled device code phishing campaign How Meta Used AI to Map Tribal Knowledge in Large-Scale Data Pipelines AI for Systems: Using LLMs to Optimize Database Query Execution Forecasting the Economic Effects of AI Introducing Tinker: Play with AI, bring your ideas to life AI sheds light on an ancient gaming mystery People really hate AI but not as much as Iran—or Democrats | Fortune What is an AI Product Engineer? Phoebe Gates wants her $185 million AI startup to succeed with 'no ties to my privilege or my last name': 'I have a chip on my shoulder' | Fortune
GitHub - lambda-alpha-labs/Graphenium: Persistent structural memory for AI coding agents. Turns your repo into a fast, MCP-native knowledge graph so assistants stop grepping and start querying.
Graphenium · 2026-06-24 · via Hacker News - Newest: "AI"

Persistent structural memory for AI coding agents.

Graphenium turns your repository into a queryable graph so Claude, Cursor, and other MCP-compatible assistants can answer these in ~20 ms, without reading a single file. Especially valuable in large, multi-module, or unfamiliar codebases where grep-and-trace navigation breaks down:

  • What calls this function?
  • What depends on this module?
  • What are the architectural hubs?
  • What is the shortest path between these components?
  • Which files belong to the same community?

It replaces grep-and-trace navigation, not source-code understanding.

Demo


Why Graphenium exists

AI coding assistants are good at reading code, but they navigate repositories like a human using grep: search for a symbol, open the file, follow imports, open more files, infer relationships. Then do it all again in the next session.

In a 50-file project, grep works. In a 5,000-file monorepo with deep import chains, it doesn't. That workflow has five persistent problems:

  • Repeated cold starts. Every new session begins without a durable model of the repository.
  • Context window pressure. Raw source files are large; navigation consumes tokens that could be used for reasoning.
  • No structural memory. After reading files, the assistant has no persisted graph of how modules, functions, and concepts relate.
  • Missed cross-file relationships. Grep surfaces text matches, not architectural topology, hubs, communities, or paths.
  • Scale multiplies the pain. Every new file and dependency makes the grep-and-trace loop slower and more expensive. The graph stays fast regardless of repo size.

Graphenium runs analysis once, persists the result as a graph, and exposes it to assistants via an MCP server. The graph becomes the assistant's long-term memory for your repository.

What changes:

  • Orientation in seconds, not minutes. architecture_summary gives a 30-second map of the codebase before the assistant reads a single file.
  • Context stays focused. Instead of filling the context window with raw source during navigation, the assistant reasons over compact graph output and reads only the files that matter.
  • Memory survives sessions. The graph persists. A new AI session starts with the same structural knowledge the last one had.

What it's good at (and what it's not)

Good at

  • Navigating large codebases. In 50+ file repos, monorepos, or unfamiliar projects, grep-and-trace wastes context; the graph replaces it.
  • AI-assisted code navigation: answer structural questions without repeatedly reading files.
  • Impact analysis: identify connected nodes before changing a function, class, or module.
  • Onboarding: get a high-level architectural map of an unfamiliar repo fast.
  • Refactoring planning: find god nodes, low-cohesion communities, and surprising cross-boundary edges.
  • Code review: inspect symbols, degrees, and hotspots before reviewing a changed file.
  • Keeping the graph current with watch mode during active development.

Not a replacement for

  • Reading source code. The graph captures structure and relationships, not implementation logic. An assistant still needs to read actual code.
  • A full language server. It does not perform complete type checking or language-specific semantic analysis at LSP depth.
  • Runtime tracing. It is static analysis plus optional LLM extraction; it does not execute the program.
  • Semantic search / embeddings. Graphenium uses keyword scoring and graph traversal, not vector similarity.
  • Security scanning. Relationship graphs are not a substitute for dedicated SAST tools.

20-second example

Without Graphenium:
grep → read file → trace imports → read more files → infer architecture

With Graphenium:
query_graph → get_neighbors → shortest_path → read only the right files
# Build a graph for your project (no API key needed)
gm run . --no-semantic --no-viz

# Ask structural questions
gm query "what calls build_from_extraction?"

# Or connect an AI assistant via MCP and ask directly

Quick start

One-line install

curl -fsSL https://raw.githubusercontent.com/lambda-alpha-labs/Graphenium/main/install.sh | sh

From source

Requires Rust 1.75+ (rustup).

git clone https://github.com/lambda-alpha-labs/Graphenium
cd Graphenium
cargo install --path .

The binary is installed as gm.

First run

# Build a graph (no API key needed)
gm run . --no-semantic --no-viz

# Query it
gm query "authentication login session" --budget 1000

# Check your installation
gm doctor

Map vs traffic overlay

Graphenium has two extraction modes. Both are useful; they serve different purposes.

Mode What you get Best for API key
AST-only Imports, containment, methods, symbols, structural communities Architecture map, blast radius, orientation No
Semantic Uses, conceptual dependencies, rationale, inferred cross-file relationships Behavioural tracing, richer agent reasoning Yes

AST-only mode gives the assistant a map. Semantic mode adds the traffic overlay.

# AST-only, local, no key needed
gm run . --no-semantic --no-viz

# Semantic: adds LLM-inferred relationships
export ANTHROPIC_API_KEY=sk-ant-...
gm run . --provider anthropic    # also: openai, deepseek, openrouter

The graph_stats tool always reports the edge confidence breakdown, so the assistant knows what it's working with.


MCP setup

Add Graphenium to your AI assistant's MCP config. The server uses the standard MCP stdio transport. Or run gm setup <target> to print the config for your assistant.

Claude Desktop (claude_desktop_config.json):

{
  "mcpServers": {
    "graphenium": {
      "command": "gm",
      "args": ["serve", "--graph", "/absolute/path/to/graphenium-out/graph.json"]
    }
  }
}

Cursor (~/.cursor/mcp.json):

{
  "mcpServers": {
    "graphenium": {
      "command": "gm",
      "args": ["serve", "--graph", "/absolute/path/to/graphenium-out/graph.json"]
    }
  }
}

CodeWhale (~/.codewhale/mcp.json):

{
  "servers": {
    "graphenium": {
      "command": "/absolute/path/to/gm",
      "args": ["serve", "--graph", "/absolute/path/to/graphenium-out/graph.json"],
      "env": {}
    }
  }
}

After updating config, quit and relaunch the AI tool completely (Cmd+Q on macOS, not just close the window). MCP servers are only loaded at startup.


AI Skill

The repo ships an AI Skill at skills/graphenium/SKILL.md that teaches assistants which tool to reach for, how to interpret confidence levels, and how to fall back to gm query when MCP is unavailable.


What the assistant can ask

Once connected, the assistant has access to 13 graph tools.

Read tools:

Tool Purpose
graph_stats Node/edge counts, file types, confidence breakdown
architecture_summary Communities, focus paths, god nodes, confidence summary
query_graph Keyword-scored BFS/DFS traversal within a token budget
get_node Full node details by ID or label
get_neighbors Direct neighbours with edge types and confidence
get_community All nodes in a community cluster
god_nodes Top N most-connected hub nodes
shortest_path Path between any two components
summarize_file Every symbol extracted from a source file
reload_graph Hot-swap the graph without restarting

Write tools:

Tool Purpose
add_node Register concepts the AST can't capture
add_edge Record relationships confirmed through inspection
remove_edge Correct false positives or stale relationships

All writes persist to disk immediately.


Repository memory model

Graphenium models a codebase as three things.

Nodes

Nodes represent meaningful entities: functions, methods, classes, modules, structs, traits, documents, images, and architectural concepts. Each node carries metadata: label, qualified label, file type, source file, source location, and community ID.

Edges

Edges are typed, directed relationships.

Relation Meaning Source
imports Module-level import/include AST
contains Module/class contains a symbol AST
method Method belongs to a class/type AST
calls Function calls another function AST / semantic
uses Cross-file usage dependency AST / semantic
inherits OOP inheritance AST / semantic
implements Interface/trait implementation AST / semantic
depends_on Conceptual dependency Semantic
rationale_for Document/comment explains code Semantic

Topology

Graphenium analyzes the graph to surface communities, hub nodes, shortest paths, surprising cross-community connections, and architectural focus paths. The assistant can orient itself structurally before reading implementation details.


Trust model

Every edge carries a confidence level.

Level Source How to treat it
EXTRACTED Deterministic static extraction Ground truth, directly present in source
INFERRED LLM or heuristic reasoning Strong hint, useful for navigation; verify before risky changes
AMBIGUOUS LLM-flagged uncertainty Question to investigate, not a fact

A good assistant workflow:

  1. Trust EXTRACTED edges as fact.
  2. Use INFERRED edges as strong hints.
  3. Treat AMBIGUOUS edges as leads to inspect.
  4. Read source code before making implementation changes.

graph_stats reports the confidence breakdown so you know what kind of graph you're working with.


Language support

Graphenium uses tree-sitter for AST extraction across 9 languages.

Language Extensions Extracted features
Python .py Classes, functions, imports, call graph
JavaScript .js, .mjs, .cjs Classes, functions, arrow functions, imports
TypeScript .ts, .tsx JavaScript features + type declarations
Rust .rs Structs, enums, traits, impl blocks, functions, use
Go .go Functions, methods with receivers, import blocks
Java .java Classes, methods, package imports
C .c, .h Functions, include directives
C++ .cpp, .cc, .cxx, .hpp Classes, functions, include directives
C# .cs Classes, methods, using directives, namespaces

Semantic extraction also processes documents (.md, .rst, .txt), PDFs, and images.

Build with only the languages you need:

cargo build --release --no-default-features --features lang-python,lang-rust

Features: lang-python, lang-js, lang-ts, lang-rust, lang-go, lang-java, lang-c, lang-cpp, lang-csharp.


Commands

gm run

Run the full analysis pipeline on a directory.

Option Description
PATH Directory to analyse (default: .)
--no-semantic Skip LLM extraction; use AST-only results
--no-viz Skip HTML generation
--provider NAME AI provider: anthropic (default), openai, openrouter, deepseek, openai-compatible
--model NAME Model to use (defaults to provider-specific default)
--api-key KEY API key (overrides provider-specific env var)
--api-base URL API base URL for openai-compatible provider
--mode deep Aggressive LLM inference
--update Incremental: only re-extract changed files
gm run . --no-semantic --no-viz      # Fast AST-only scan
gm run . --provider openai           # With LLM semantic extraction
gm run . --update                    # Incremental after editing files

gm query

Query an existing graph with keywords.

gm query "<keywords>" [OPTIONS]
Option Default Description
--graph PATH graphenium-out/graph.json Path to graph file
--budget N 2000 Output token budget
--dfs off Use depth-first search
gm query "authentication login session"
gm query "parser ast walker" --dfs --budget 4000

gm serve

Start an MCP server exposing the graph over stdio.

Option Default Description
--graph PATH graphenium-out/graph.json Path to graph file

gm watch

Watch a directory and auto-rebuild the graph on changes.

gm watch [PATH] [OPTIONS]
Option Default Description
PATH . Directory to watch
--debounce SECS 3.0 Wait after last event before rebuild
--incremental true Patch changed files; false for full rebuild
gm watch . --debounce 2.0

gm doctor

Run diagnostic checks on your Graphenium installation: binary location, graph file health, tree-sitter languages, API keys, and graph quality.

gm setup

Print ready-to-paste MCP config for an AI assistant.

gm setup <claude|cursor|codewhale> [--graph PATH]
gm setup claude
gm setup cursor
gm setup codewhale

Output files

Graphenium writes outputs to graphenium-out/ inside the analysed directory.

File Purpose
graph.json Machine-readable graph for gm serve and gm query
GRAPH_REPORT.md Markdown architecture report
graph.html Self-contained visual graph inspection page
manifest.json mtime index for incremental updates
cache/ Per-file semantic extraction cache (SHA256 keyed)

Architecture

src/
  extract/     tree-sitter extraction for 9 languages
  model/       graph, node, edge, hyperedge types
  build/       graph construction from extraction results
  cluster/     Louvain community detection, cohesion, split/focus
  detect/      file classification, sensitive-file skipping, corpus warnings
  analyze/     god nodes, surprising connections, architectural questions
  serve/       MCP server (rmcp), tool handlers, graph traversal
  semantic/    LLM client, prompt builder, response parser
  export/      JSON export, HTML visualisation
  cache/       mtime manifest, semantic extraction cache
  watch/       file-system watcher with incremental patching

Limitations

  • AST-only graphs are structural, not behavioural. Without semantic extraction, edges are mostly imports, containment, and method declarations. Control-flow relationships (calls, uses, implements) come from the semantic pass.
  • Label collisions. Common names like new, mod, run appear across modules. Qualified labels help disambiguate when available. graph_stats reports collision counts so you know when results may be fuzzy.
  • Large corpora. Projects with many vendored dependencies should use .grapheniumignore to exclude target/, node_modules/, .rust-toolchain/, and similar directories.

Contributing

Contributions are welcome, especially language extractors, MCP integrations, and fixtures. See CONTRIBUTING.md.

Good first issues → · Worked examples → · Demo script →