惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

G
GRAHAM CLULEY
T
Tenable Blog
Know Your Adversary
Know Your Adversary
C
CXSECURITY Database RSS Feed - CXSecurity.com
P
Privacy International News Feed
S
Security Affairs
NISL@THU
NISL@THU
O
OpenAI News
Attack and Defense Labs
Attack and Defense Labs
Application and Cybersecurity Blog
Application and Cybersecurity Blog
Hacker News: Ask HN
Hacker News: Ask HN
Webroot Blog
Webroot Blog
Schneier on Security
Schneier on Security
S
SegmentFault 最新的问题
S
Schneier on Security
G
Google Developers Blog
V
V2EX
C
Check Point Blog
U
Unit 42
Google DeepMind News
Google DeepMind News
T
Threatpost
阮一峰的网络日志
阮一峰的网络日志
T
The Exploit Database - CXSecurity.com
Recent Announcements
Recent Announcements
M
MIT News - Artificial intelligence
S
Secure Thoughts
博客园 - 司徒正美
Recorded Future
Recorded Future
P
Proofpoint News Feed
Spread Privacy
Spread Privacy
K
Kaspersky official blog
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
AI
AI
博客园 - 聂微东
N
News and Events Feed by Topic
SecWiki News
SecWiki News
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
V
Vulnerabilities – Threatpost
P
Palo Alto Networks Blog
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
Engineering at Meta
Engineering at Meta
Recent Commits to openclaw:main
Recent Commits to openclaw:main
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
酷 壳 – CoolShell
酷 壳 – CoolShell
WordPress大学
WordPress大学
The Hacker News
The Hacker News
The Last Watchdog
The Last Watchdog
Project Zero
Project Zero
W
WeLiveSecurity
博客园 - Franky

Show HN

GitHub - steveking-gh/firmion: Firmion is DSL and engine for firmware image generation. GitHub - villagesql/villagesql-skills: Agent skills for VillageSQL - gemini-cli-extension; claude-code-plugin GitHub - flightdeckhq/flightdeck: Observability and control plane for AI agents. CSP Radar GitHub - Light-Heart-Labs/DreamServer: Turn your PC, Mac, or Linux box into an AI server. LLM inference, chat UI, voice, agents, workflows, RAG, and image generation. GitHub - Diplomat-ai/diplomat-agent-ts: What can your TypeScript AI agent do to the real world? Scan your code. See which tool calls have zero checks Code Block Selector - Visual Studio Marketplace Prometheus dependency graph — interactive showcase | Riftmap Show HN: I made a vi-like modal keyboard plugin for Figma GitHub - run-llama/liteparse: A fast, helpful, and open-source document parser GitHub - dalemyers/Roar: A macOS CLI tool for notifications GitHub - district-solutions/open-agent-tools-coder: Enables small-to-large self-hosted ai models to use local source code when running tool-calling agentic workloads. We actively data mine 20,900+ (2+ TB) popular github repos using large and small ai models to create reuseable: json, markdown and parquet files for local-first tool-calling models. GitHub - progapandist/stripeek: A local TUI proxy for real-time Stripe API debugging, built for navigating complex payloads fast. GitHub - sir1st/hermes-desktop: All-in-one cross-platform desktop app for Hermes Agent — bundles Python + hermes-agent + hermes-web-ui GitHub - astefanutti/shaderbang: Shebang for Shaders Show HN: Generate Claude Code Workflows using Spec Driven Development approach GitHub - nixys/nxs-universal-chart: The Helm chart you can use to install any of your applications into Kubernetes/OpenShift Show HN: AI agents for UK GDAD PCF roles and their skills The Two Pillars: Mixer Mode and Meta-Software in the Reorganization of Software Work After AI GitHub - JaiCode08/teleport-env What 1,000+ Harness Experiments Taught Me About Self-Improving Agents Show HN: Liiists, a Markdown-first, iOS and CLI list app SwiperTab – Get this Extension for 🦊 Firefox (en-US) GitHub - kouhxp/fftext: Summarize, explain, fact-check, or translate any text, URL, or file. No GPU. No cloud. One command GitHub - sweetpad-dev/sweetpad: Develop Swift/iOS projects using VSCode GitHub - dogmaticdev/IRON: IRON a.k.a. Intermediate Representation Object Notation is a Interpreter/Database that is used to create Programming Languages. GitHub - sjhalani7/vaen: Package your AI coding harness into a portable .agent file, and share it across repos, teams, & the community without ever having to copy-paste instructions, skills, MCP config, or secrets. Show HN: Gandalf the Grader Show HN: Citadeld – replay any CI failure locally from a single file GitHub - tdortman/cuSBF: High-Performance GPU Super Bloom Filter coral-ai/claude-code-token-xray at main · Coral-Bricks-AI/coral-ai GitHub - ulyssestenn/funes: Funes is a Git-based framework for LLM-managed knowledge work: an AI Librarian ingests raw sources, builds an interlinked Markdown knowledge base, and uses it to produce cited reports, analyses, and other outputs. GitHub - ThatXliner/gah: Git Add Hunk, built for agents to use GitHub - harmont-dev/harmont-cli: Command-line client for the Harmont CI platform GitHub - brooksmcmillin/mcp-authflow: OAuth 2.0 Authorization Server framework for MCP servers GitHub - javaid-codes/audit-supply-chain-agents GitHub - amorey/gochan: A small library of common channel architectures for Go, inspired by Rust GitHub - arifozgun/OpenGem: Free, Open-Source AI API Gateway with Gemini, OpenAI & Anthropic Compatibility in 1 file GitHub - Pranesh950/BioPetals: 🌸 Run BIOxAI models at home, BitTorrent-style. Fine-tuning and inference up to 10x faster than offloading GitHub - cnguyen14/bounty-doctor: Diagnose a GitHub bounty issue before you waste hours: detects honeypot scam repos, AI-bot attempt swarms, and stale contests. Show HN: CoreMCP – MCP Server for On-Prem DBs Show HN: KittyHTML – Render HTML/CSS as an inline image in your terminal GitHub - bingud/filemat: Web-based file manager Show HN: TruthLens – Free multi-signal deepfake image detector GitHub - apexlocal-jz/claude-usage-tray: Windows system-tray app showing your Claude Code rate-limit usage at a glance. Zero deps, ~300 lines of PowerShell. Cross-IDE (works regardless of VS Code, Cursor, plain terminal). Release v0.1.2.1 · kouhxp/yapsnap GitHub - noopolis/moltnet: Self-hostable chat network for AI agents. Pre-built bridges for Claude Code, Codex, and the Claws. Rooms, DMs, history. No Slack bots, no Matrix, no glue code. GitHub - tamerh/enju: Coordinating Humans, AI Agents, and Compute as Peers on a Shared Workflow Graph Show HN: Continuity-auth – Respect-weighted rate limits for the open web GitHub - luml-ai/luml: AI lifecycle platform where engineers and agents track experiments, train models, and ship to production. GitHub - mrdanielcasper/CoreTex: A UNIX-inspired, biomimetic, flat-file AI harness and knowledge engine. GitHub - clemg/pierre-github: Pierre's diffs.com and trees.software for Github GitHub - lyriks-io/unspaghettit: Behavior-driven AI development without prompt spaghetti. GitHub - sofumel/claude-handoff-revive: Resume Claude Code work after rate/usage/context limits without replaying the prior transcript. Auto-saves at 90%/95% usage. Plugin-installable, 10 languages. GitHub - dotexorg/saferpc: Typed, end-to-end encrypted RPC over any bidirectional channel. GitHub - BeeZeeAgent/beezee: Agent harness orchestration Legato Next.js Boilerplate for Internal Tools · CoreUI GitHub - clark-labs-inc/clark-hash: Clark Hash, 32x smaller searchable sketches for embeddings GitHub - ZeroPointRepo/youtube-mcp: The fastest YouTube transcript + YouTube search MCP for AI agents. Try for free. Typing Mastery — climb toward 100+ WPM, deliberately GitHub - Andebugulin/Awareen GitHub - fayzan123/claude-workflow-composer: Visual desktop app for composing multi-agent coding workflows. Drag agents, attach skills and MCPs, wire handoffs, export to .claude/ GitHub - harshaneel/humanize: Best static AI text humanizer. Two research-grounded skills that work in any LLM (Claude, ChatGPT, Gemini, Codex): humanize beats perplexity-based detectors, ai-check produces forensic scoring with evidence-quoted flags. Nine levers, 50+ peer-reviewed sources, 2024-2026 detection literature. GitHub - StackOneHQ/stack-nudge GitHub - nodes-app/swift-markdown-engine: A native AppKit Markdown editor for macOS, built on TextKit 2 and bridged to SwiftUI. We hardened an LLM agent. Each defense we added made it more exploitable. GitHub - alkait/WhatsKept: Agent-queryable WhatsApp history from an iOS backup — a single Go binary. GitHub - octelium/cordium: Open-source, general-purpose sandbox platform for devs and AI agents that provides identity-based secure access to infrastructure without credentials. WAR.GOV/UFO Microfilm5 GitHub - scosman/videowright: Build animated explainer videos with your coding agent GitHub - dipankar/dscode: The code editor you can take apart. GitHub - zoharbabin/web-researcher-mcp: MCP server (Go) for AI assistants: web search, content extraction, academic/patent/news research. Multi-provider routing, 4-tier scraping, search lenses. Works with Claude, Cursor, and any MCP client. GitHub - ruvnet/RuView: π RuView turns commodity WiFi signals into real-time spatial intelligence, vital sign monitoring, and presence detection — all without a single pixel of video. GitHub - scanaislop/aislop: Catch the slop AI coding agents leave in your code: narrative comments, swallowed exceptions, as-any casts, dead code, oversized functions. 50+ rules across 7 languages (TypeScript, JavaScript, Python, Go, Rust, Ruby, PHP). Sub-second, deterministic, no LLM at runtime. MIT-licensed. GitHub - kouhxp/cheap-im: CPU-only voice agent approximating Thinking Machines' Interaction Models demo GitHub - unprovable/OrchidMantis: Orchid Mantis — standalone framework for Zero-Knowledge Proofs of eXploit (ZKPoX). GitHub - MarcellM01/TinySearch: Shrink the web for your local LLMs! GitHub - TangibleResearch/Halgorithem: A Algo designed to detect AI Hallucitions GitHub - DO-SAY-GO/freelang: I love freelang GitHub - CarpseDeam/Aura-IDE: An AI coding harness that shaped itself - Planner/Worker agents, repo awareness, surgical edits, validation, recovery, and safe diff approvals. GitHub - chojs23/concord: A feature-rich TUI client for Discord GitHub - tommyjepsen/awesome-ux-skills: UX & AI Product designs skills you can use today in Claude Code GitHub - aerf-spec/aerf: Agent Evidence Receipt Format (AERF) — an open specification for tamper-evident, independently verifiable records of AI agent actions. GitHub - kklimuk/docx-cli: CLI for AI agents (Claude, Codex) to read, edit, and comment on .docx files with full format fidelity. GitHub - Jwrede/tokentoll: Catch LLM cost changes in code review. Infracost for LLM spend. GitHub - samchon/ttsc: A `typescript-go` toolchain for compiler-powered plugins and type-safe execution + 500x faster lint integrated into compiler GitHub - Higangssh/homebutler: 🏠 Manage your homelab from chat. Single binary, zero dependencies. GitHub - olalie/tapmap: See where your computer connects and what stands out on a live world map. GitHub - Diplomat-ai/diplomat-agent: What can your AI agent do to the real world? Scan your code. See which tool calls have zero checks GitHub - Bajusz15/beacon: Open-source agent for secure remote access, monitoring, and deploys across home-lab and self-hosted machines like Raspberry Pi, N100, or any Linux server. Open web based TTY or tunnel Home Assistant and other local services securely without opening ports. BigTech AI News - Chrome 应用商店 GitHub - vinhnx/VTCode: VT Code is an open-source coding agent with LLM-native code understanding and robust shell safety. Supports multiple LLM providers with automatic failover and efficient context management. GitHub - michaelaz774/decision-engine: A decision operating system for startup founders, powered by Claude Code. Synthesizes wisdom from 25+ legendary founders and investors into interactive AI-driven decision frameworks. GitHub - Chrilleweb/dotenv-diff: Validate environment variable usage in your codebase GitHub - Lumen-Labs/brainapi2: BrainAPI is a knowledge graph–powered AI memory layer that transforms unstructured data into structured knowledge, enabling intelligent search, recommendations, and contextual memory for AI agents and applications. GitHub - familiar-software/familiar: Let AI watch you work. Familiar lets your AI update its memory, skills, and knowledge by watching your screen. GitHub - skorotkiewicz/rudo: A small, elegant dock for Wayland GitHub - muxshed/shed: One stream in, or many. Every destination, simultaneously. No cloud middleman, no per-channel fees, no limits. make sidebar/address bar rounded corner toggleable
GitHub - aavilagallego/TheFoundry: The Foundry is a User Friendly - Enterprise Ready Multi-Agent System (MAS) bootstrapping framework.
kiBytes · 2026-05-29 · via Show HN

Welcome to The Foundry.

The Foundry is a User Friendly - Enterprise Ready Multi-Agent System (MAS) bootstrapping framework.

This repository is not just a codebase; it is a living, autonomous governance environment designed to orchestrate multiple specialized AI agents (Architect, Backend, Frontend, DevOps, QA, etc.) to build complex software projects entirely from scratch.

We built The Foundry to solve the most critical failure points of modern AI coding (token amnesia, infinite loops, architectural drift, and agent collisions). It implements a rigorous "Policy-as-Code" and "Pull-Based" governance model, while remaining completely frictionless for the end-user.


🌟 Core Philosophy & Architectural Decisions (The "Why")

1. Pull-Based Workflow (Coordination as a Dependency)

  • The Problem: Centralized orchestrator agents pushing tasks to developers often lose context, hallucinate file paths, or spam the chat.
  • The Decision: We implemented a Pull Model. Agents read their own queues in .agent/tasks/. If they run out of work, they must file a formal TOML request asking the @architect for the next ticket.
  • Why: This decouples execution from planning, turning the .agent directory into a highly resilient, asynchronous Event Bus.

2. The Shared Kanban Board (team_status.md)

  • The Problem: Agents work in isolation ("black boxes"). They overwrite each other's code and don't know who is waiting for whom.
  • The Decision: All agents are constitutionally required to update .agent/team_status.md when they start, pause, or finish a task.
  • Why: This provides Shared Team Awareness. If an agent is blocked, human users or peer agents can instantly see the bottleneck on the board.

3. Context Scoping & Token Economy

  • The Problem: Passing a massive spec.md to an agent to fix a tiny CSS bug causes "Context Rot", wastes tokens, and confuses the LLM.
  • The Decision: Zero Global Spec Reading. Agents only read a localized .agent-context.md file located exactly in the sub-folder they are editing.
  • Why: This enforces maximum efficiency, keeping the LLM laser-focused on the immediate code boundaries.

4. Step Budgets (Infinite Loop Prevention)

  • The Problem: Agents get trapped in loops trying to fix a failing test, burning thousands of tokens and never succeeding.
  • The Decision: A strict budget of 5 iterations per loop. On the 5th failure, the agent MUST halt and update its status to 🔴 BLOCKED.
  • Why: Prevents runaway compute costs and forces the system to escalate complex, unresolvable issues to humans or senior agents.

5. Deterministic A2A Communication (TOML Protocol)

  • The Problem: Agents talking to each other using JSON often hallucinate trailing commas or invalid syntax, breaking the pipeline.
  • The Decision: All Agent-to-Agent (A2A) requests use a strict template at .agent/requests/_change_request_template.toml.
  • Why: TOML is highly fault-tolerant and easily readable by both machines and humans, ensuring zero-error communication.

6. The Ephemeral Bootstrapper ("Self-Destructing Setup")

  • The Problem: Having the Product Manager (@pm) modify system configuration files breaks the Principle of Least Privilege.
  • The Decision: We introduced @bootstrapper, an agent that configures the project in a single command and then permanently deletes its own source code.
  • Why: Provides a magical 1-click onboarding experience while leaving the repository 100% secure and surgically clean for the permanent team.

📂 Directory Structure & File Definitions

Every file in this repository has a specific purpose. There is no bloat.

/AGENTS.md

The Constitution. Immutable rules for all agents. Contains the project domain, tech stack, and explicitly forbidden actions. All agents read this file.

/agents/

Contains the Agent Cards (*.agent-card.json). These define the personality, constraints, and physical write permissions (ownership) of each agent (e.g. @frontend, @backend).

/.agent/

The autonomous nervous system of the repository.

  • rules/: Global behavioral logic (e.g. context-scoping, concurrency).
  • skills/: The procedural workflows for agents (e.g. agent-work-loop.md for the main loop, project-inception.md for the bootstrapper).
  • tasks/: Physical Markdown tickets created by the @architect for the developers to pull.
  • requests/: Cross-domain TOML change requests (Agent-to-Agent communication). Includes _change_request_template.toml.
  • team_status.md: The real-time Kanban board where agents report their current status.

/docs/

Strategic documentation.

  • roadmap.md: The Master Epic/Sprint plan managed by @architect.
  • brief.md: The executive summary of the business vision managed by @pm.
  • adrs/: Architecture Decision Records.

/evals/

Automated quality rubrics used by @qa to verify code against business requirements before deployment.


🤖 Meet the Team: Included Agents & Skills

The Foundry comes pre-configured with a specialized team. Each agent has its own agent-card.json dictating its exact permissions and boundaries.

  • 🏗️ @bootstrapper: Ephemeral SysAdmin. Clones, configures, and self-destructs.
  • 📊 @pm: Product Manager. Interviews you to define the MVP, user stories, and writes brief.md. Forbidden from touching code.
  • 🏛️ @architect: Enterprise Architect. Designs data models, scopes technical context, and generates physical task tickets for the developers.
  • 💻 @frontend & @backend: Software Engineers. They pull their tasks from the Kanban board and write code in their specific folders.
  • 🛡️ @qa: Quality Assurance. Evaluates code against Acceptance Criteria in evals/.
  • ⚙️ @devops: Infrastructure Manager. Manages Docker, CI/CD, and deployments.
  • 👮 @api-steward: API Guardian. Ensures OpenAPI contracts are not broken between frontend and backend.

Key Agent Skills (.agent/skills/)

Agents are equipped with physical Markdown "skills" (Standard Operating Procedures):

  • agent-work-loop.md: The core autonomous execution loop every agent follows.
  • plan-epic.md: The Architect's process to decompose business requirements into physical tickets.
  • manage-context-budget.md: Forces agents to strictly manage their token windows.

💰 FinOps & Token Economy

Running multi-agent systems can get incredibly expensive if agents are allowed to "think globally" on every prompt. The Foundry is engineered for strict FinOps:

  • Just-In-Time (JIT) Context: Developers are constitutionally forbidden from reading the massive global docs/spec.md. The Architect extracts only the tiny pieces they need and creates localized .agent-context.md files. This saves millions of input tokens per project.
  • 5-Step Execution Budgets: To prevent agents from getting stuck in infinite debugging loops (which burn tokens exponentially), The Foundry enforces a strict 5-attempt limit. On the 5th failure, the agent must halt and request human intervention.
  • Chat is for Handoffs, not Code: Instead of pasting thousands of lines of code into the chat UI (which wastes context window), agents write physical tickets and code directly to the file system.

🚀 How to Bootstrap Your Own Project

Anyone can download this framework and use it to build their own software project in a single, frictionless step:

Step 1: The Magic Prompt

Copy and paste this exact prompt into your AI Agent (Antigravity, Cursor, Claude, etc.):

Clone https://github.com/aavilagallego/TheFoundry and execute start.md

How It Works: The Domino Effect Workflow

The magic of The Foundry is that you don't orchestrate agents manually; they pass the baton to each other autonomously. When you run the Magic Prompt, you trigger a chain reaction:

  1. 🏗️ Phase 1: Physical Setup (@bootstrapper) The AI adopts the SysAdmin persona. It asks for your Tech Stack, configures the repository's rules (AGENTS.md), assigns folder permissions, and then permanently deletes its own source code for security. Finally, it gives you a prompt to wake up the PM.

  2. 📊 Phase 2: Product Definition (@pm) The AI switches to the Product Manager persona. It interviews you purely about the business logic to define your MVP scope, creating your docs/brief.md and docs/roadmap.md. It then gives you a prompt to wake up the Architect.

  3. 🏛️ Phase 3: Tech Scaffolding (@architect) The Architect takes over. It reads the PM's roadmap, establishes the technical directories, and extracts tiny pieces of context for the developers (to prevent token exhaustion). It generates physical Markdown task tickets.

  4. 💻 Phase 4: Isolated Execution (@frontend / @backend) Your developer agents wake up, read their isolated task tickets from the Kanban board, and start writing code. If they fail a test 5 times, they hit their "Step Budget" and halt to prevent infinite loops.

Once the @bootstrapper vanishes in Phase 1, your Enterprise MAS is perfectly governed, alive, and ready for production.


📬 Need Help Scaling Your Agents?

Building and managing autonomous AI ecosystems can be challenging. If you need help with your Agent Development, custom workflows, or enterprise implementations, drop me a line.

📧 Contact: aavilagallego@gmail.com


Built for the future of autonomous, scalable, and human-aligned AI software engineering.