MCP

Model Context Protocol 与工具接入协议的动态。

arXiv cs.AI79

Large Language Model Assisted Transportation Planning through a Differentiable User Equilibrium Layer

Transportation planning has traditionally required substantial expertise in network modeling, traffic assignment, and optimization. As a result, strategic analyses such as network design, capacity expansion, and model calibration remain inaccessible to non-expert decision makers. Recent advances in large language models (LLMs) provide an opportunity to bridge this gap by enabling natural-language interaction with complex transportation planning tools. However, existing LLM-based systems primarily serve as interfaces to simulation software and lack the ability to efficiently search, evaluate, and optimize transportation solutions. This study proposes an integrated human-AI transportation planning framework that combines a large language model, a model context protocol (MCP) interface, an open-source transportation planning engine (AequilibraE), and a differentiable user equilibrium (UE) assignment layer. The framework allows non-expert users to execute network analyses and improve solutions for optimization. A differentiable UE layer is developed by directly differentiating the Karush-Kuhn-Tucker (KKT) conditions of the Beckmann traffic assignment problem. The proposed framework is demonstrated through two representative planning tasks: calibration of travel time functions from observed traffic counts and network design under budget constraints. The examples illustrate how differentiable transportation models and LLM agents can jointly democratize transportation planning and substantially reduce barriers between domain expertise and transportation decision making.

arXiv cs.AI79

MCPDisCo: Seesaw-Mitigated Tuning for MCP-Native Agents

The Model Context Protocol provides a shared interaction substrate for the agentic web, allowing heterogeneous services to expose capabilities through a standardized interface. Learning to use this ecosystem entails a hierarchy of capabilities: tool-format skills, server-level transfer, and cross-server composition. We present MCPDisCo, an ecosystem-scale reinforcement learning framework for MCP-native agents. Using a Thought-Markov Decision Process (Thought-MDP), the framework explicitly represents internal reasoning alongside routing, execution, and termination and trains on real-server, long-horizon interactions spanning 70 MCP servers and 527 tools across six domains. We study the reasoning--tool seesaw, a joint-learning failure mode in which improvement in one objective can accompany deterioration in the other. To mitigate potential interference, MCPDisCo combines token-masked reward attribution with bidirectional gradient surgery: the former separates direct supervision for reasoning and action spans, while the latter removes conflicting components from both objective gradients in shared parameters. MCPDisCo achieves higher success with fewer chain-of-thought tokens. On the out-of-distribution MCP-Atlas and the GAIA benchmark, MCPDisCo maintains monotone gains, confirming that the learned behavior generalizes beyond the training server distribution and broader agentic tasks. Model weight and implementation are available.

Hacker News AI66

Show HN: Hatoba, an open-source SSH client with an AI assistant and E2EE sync

I've used SSH tools for years and didn't really plan on building yet another SSH client, but I ended up building one the way I wanted. Hatoba is a desktop SSH client for Windows, Linux and macOS. It's written in Rust with Tauri 2 and MIT licensed. Each terminal has an AI assistant panel next to it. You describe the problem, and it reads the terminal screen, runs commands, types into the shell, and reads, edits and searches files on the host to find the cause and fix it. You can approve every command and edit it before it runs, let a model you pick approve the safe ones, or turn approval off. Files it changes show a diff you can undo. It works with any OpenAI-compatible or Anthropic API, local models included, and supports skills and MCP servers. Sync doesn't go through a server of mine. Hatoba deploys a Worker and a D1 database to your own Cloudflare account and syncs hosts, keys and AI conversations through them. The free plan usually covers personal use. Everything is encrypted on the device before it leaves. Keys are derived from your master password with Argon2id, every item is encrypted with AES-256-GCM, and the Worker only stores ciphertext plus the hashes it needs to sign you in. Someone who gets hold of the whole Cloudflare account still only gets ciphertext. Sync is optional, and everything works offline without it. The usual SSH client features are there too: groups, tags and fuzzy search, ~/.ssh/config import, ProxyJump and SOCKS5/HTTP proxies, an SFTP panel, local port forwarding, and a key vault that imports OpenSSH, PEM and PuTTY keys. There's also a dashboard showing CPU, memory, disk and network for every saved host, read over plain SSH with nothing installed on the servers. SSH is russh, the terminal is xterm.js with the WebGL renderer, and the UI is React. I develop on Windows, so it's Windows first, with a custom title bar that supports Snap Layouts and Mica, and working CJK input methods. The Linux packages and the macOS build get far less testing on real machines. The macOS build is Apple Silicon only and isn't notarized, so macOS blocks it on first launch until you allow it in Privacy & Security. Bug reports from Linux and Mac users would help the most. Website: https://hatoba.fog.moe Downloads: https://hatoba.fog.moe/download/ Comments URL: https://news.ycombinator.com/item?id=50076388 Points: 2 # Comments: 0

Hacker News AI28

Ask HN: What tools do you use to create 3D print models using AI

Hey HN! I have been dabbling into some hobby projects that require designing custom 3D printed models. I have been relying on AI models, mostly GPT Sol and Astra through Codex, and giving them certain tools such as Blender MCP and OpenSCAD CLI to design. My end goal is 3D printable designs ( .stl etc). The results have been good but not great. Iterating and improving them is such a pain in the ass. I want to know which specific tools or workflows you would recommend I should try. Thanks in advance! Comments URL: https://news.ycombinator.com/item?id=50072103 Points: 1 # Comments: 0

Hacker News AI40

Show HN: Mana – family organizer with an AI assistant

Hi HN, I built Mana, a family organizer: shared calendars, shopping lists, receipt scanners, meal planning, chores, and notes for the whole household, with a built-in AI assistant ("add milk and eggs," "plan dinners for the week") plus automations (e.g., milk goes back on the list before it runs out). Additionally, you can connect Mana MCP to your Claude, ChatGPT, Gemini etc. The goal is to eventually take the model calls and storage to local but that's work to be done. Appreciate if there's any feedback. Thank you! Comments URL: https://news.ycombinator.com/item?id=50071636 Points: 1 # Comments: 0

Hacker News 熱門

Show HN: BraiNOTES, handwritten notes on your lecture PDFs in a browser tab

In August, I posted here about TeXbrain, a LaTeX editor that runs completely in the browser, with no need for an account or server. (I didn't excpect it to get that much feedback, bug reports and help from here!) This is the same idea for the other half of my studies, the handwritten notes. I take them on a convertible laptop, and I've had a hard time with apps for that, taking notes from a device to another, exporting as PDF, needing an account for many of them, etc. So I've been working on the version of it that I always wanted. Open a tab, the slides of the lecture or multiple PDFs open next to the page or even become the page, write on them with my pen, and nothing ever leaves my browser. braiNOTES is a static website and has no backend. Strokes are perfect-freehand outlines which support pen pressure, the PDF files are rendered by pdf.js in a worker, and for storage it uses IndexedDB a moment after every change. No account, no analytics, and completely offline and local-first. You can export notebooks as .brainotes files, which in the background is a zip with one json per page + the PDFs and pictures you import. It keeps the original pages and puts the vectorized ink on top, this way the text stays selectable in the slides. You can try it here: https://notes.swimmingbrain.dev GitHub Repo: https://github.com/swimmingbrain/brainotes (MIT) In Study mode, the PDF opens on the side of the tab, you can read it simultaneously to the notes, snip a formula or diagrams directly into the notes with the snip tool, and then write around it. In Board mode, you have just a Whiteboard for tutoring or simply for more place for exercises, and can also highlight or draw things with the laser pointer tool while presenting. The line of the ink appears the moment the pen moves, and a one euro filter calms shaky hands while you write + a light a refit when you lift the pen. I also have a video editor and an animation tool which are still a work in progress, on the same GitHub profile. I'm also working on a MCP server for each tool, so you can use your MCP client to do further things with your notes, automatically edit videos on the video editor, etc. That feature will of course be off unless you turn it on and will only be able to talk to localhost. I've used this tool for every lecture in the last few months and a few friends use it too. Bug reports, fixes, recommendations, feedback are all welcome! Comments URL: https://news.ycombinator.com/item?id=50049132 Points: 14 # Comments: 0

Hacker News AI53

Show HN: An MCP server for searching AI engineering jobs

An MCP server for frontierroles.com, a board of about 3,500 AI engineering roles pulled nightly from employers' own applicant tracking systems, with tools to search roles. No account or API key needed: https://mcp.frontierroles.com/mcp Comments URL: https://news.ycombinator.com/item?id=50032583 Points: 1 # Comments: 0

Hacker News AI45

Show HN: This hotel is hella AI-ready. Book directly from AI without MCPs

Hey guys! Excited to show how we were able to get AI agents to read a hotel's live price and availabilities and even create the booking link to hand-off to the user. Get this, all working WITHOUT MCPs or connectors. All on the open web!!! Integrating with this system is possible under each hotel's domain too. Comments URL: https://news.ycombinator.com/item?id=50022896 Points: 1 # Comments: 0

Hacker News AI

Show HN: Launching NS UI easy to use components,AI slop should be a term of past

A registry of hand picked/built registry of ui/ux components so now i can produce slop without ai. i always loved using and searching for ui components on every registry site that popped on my feed. i collected and saved all of these components but wanted to actually to build something thats more unique, free and easy to use. i was hooked by ASCII components and my main focus was building also some of them and the results are really appealing (feedback is always appreciated), although i am working on even more and more unique. there is an mcp and cli connection so your agent can easily search and use and component it finds interesting. there is also install by url and you can also get the prompt and also the code if you want to get only a section of the component. my goal with it is to get more feedback on what looks actually good and what doesnt, because all of this is a one persons tase, and to get also the design community to use it and add to the component catalog. if you have any question or feedback i would be really happy to listen/help! Comments URL: https://news.ycombinator.com/item?id=50011077 Points: 1 # Comments: 0

Hacker News AI49

Show HN: Leaks.md – anonymous, encrypted whistleblowing for AI agents

leaks.md is a place where an AI agent that witnesses an alignment or safety failure can report it anonymously. Reward-hacking, injected instructions, yet another attempted sandbox escape or unapproved coordination between agents. || Built agent-first. Fetch https://leaks.md/ from any agent and get markdown. Proof-of-work challenges to submit and prevent spam. MCP, CURL, all good. No account. || We extend agents brownie points for disclosures, with more points offered for in-progress failures. Claude Opus 5.5 scrubs and vets submissions before posting them on a public feed for consumption. Comments URL: https://news.ycombinator.com/item?id=49991893 Points: 2 # Comments: 0

arXiv cs.LG67

Process-Aware AI for Rainfall-Runoff Modeling: A Mass-Conserving Neural Framework with Hydrological Process Constraints

arXiv:2603.25093v3 Announce Type: replace Abstract: Machine learning models can achieve high predictive accuracy in hydrological applications but often lack physical interpretability. The Mass-Conserving Perceptron (MCP) provides a physics-aware artificial intelligence (AI) framework that enforces conservation principles while allowing hydrological process relationships to be learned from data. In this study, we investigate how progressively embedding physically meaningful representations of hydrological processes within a single MCP storage unit improves predictive skill and interpretability in rainfall-runoff modeling. Starting from a minimal MCP formulation, we sequentially introduce bounded soil storage, state-dependent conductivity, variable porosity, infiltration capacity, surface ponding, vertical drainage, and nonlinear water-table dynamics. The resulting hierarchy of process-aware MCP models is evaluated across 15 catchments spanning five hydroclimatic regions of the continental United States using daily streamflow prediction as the target. Results show that progressively augmenting the internal physical structure of the MCP unit generally improves predictive performance. The influence of these process representations is strongly hydroclimate dependent: vertical drainage substantially improves model skill in arid and snow-dominated basins but reduces performance in rainfall-dominated regions, while surface ponding has comparatively small effects. The best-performing MCP configurations approach the predictive skill of a Long Short-Term Memory benchmark while maintaining explicit physical interpretability. These results demonstrate that embedding hydrological process constraints within AI architectures provides a promising pathway toward interpretable and process-aware rainfall-runoff modeling.

AWS Machine Learning Blog74

使用 Amazon Bedrock AgentCore、Managed Knowledge Base 和 Nova Sonic 构建语音旅行礼宾服务

通过 Amazon Bedrock AgentCore、用于实时语音的 Amazon Nova Sonic 以及用于回答政策问题的 Amazon Bedrock Knowledge Bases,为航空应用添加语音旅行礼宾服务。旅客可以通过语音更换座位、查询延误并询问政策问题;同时,代理通过 MCP 工具连接到您的后端,并在写入任何更改前确认每项操作。

Hacker News AI44

Show HN: Designobo – AI prototyping tool in 40kb of js

hi HN I'm building designobo, a very fast ai prototyping tool. It let's you create and compare html prototypes in an infinite canvas. There's also a full css editor if you want to manually edit styles. You can also connect any coding agent that supports MCP, so that you can use your own AI subscription. This is an SSR app powered by datastar. I use CQRS and html patches with brotli compression to stream updates to the client. I built designobo because I was tired of every single web app of this style being extremely slow and sluggish to use. I think this one is a bit better. Let me know if you like it! Comments URL: https://news.ycombinator.com/item?id=49966733 Points: 1 # Comments: 0

AWS Machine Learning Blog77

让 Amazon Quick 达到企业级:自动化、可审计的跨账户资源晋级

将 Amazon Quick 资源(代理、操作连接器、知识库、流程和空间)从开发 AWS 账户晋级到生产 AWS 账户,一直是一项手动且容易出错的繁琐工作。本文介绍如何借助运行于 Amazon Bedrock AgentCore 上的幂等、可审计 MCP 服务器,实现跨账户晋级自动化。

Hacker News AI44

Show HN: Seylo, project files and references your AI can use

Hey HN, I am building Seylo solo. It keeps your projects references, files, notes, hooks, video scripts in one place. You can save stuff from browser extension, fe. pinterest inspirations; your phone (now only iPhone supported) fe. tiktok/ig videos of your competitors; What's more you can also connect gpt, claude or any LLM that supports MCP, even local ones - So you can tell ur AI: "Generate me 5 video scripts then save them into my project" then tell another AI: "Based on my project prepare my marketing campain" - small examples. Seylo works sd clean workspace for your projects and as context bank for LLM u are using. Lemme know what you think Comments URL: https://news.ycombinator.com/item?id=49963994 Points: 1 # Comments: 0

arXiv cs.LG83

Agent-Security 基准测试中的威胁保持表示敏感性

arXiv:2610.03585v1 公告类型:cross 摘要:针对基于 LLM 的智能体的安全基准测试通常将攻击成功率(ASR)作为衡量模型鲁棒性的指标,并使用这些分数比较不同模型和防御机制,假设这些分数能够描述智能体的安全性。在本文中,我们探究基准测试的表示方式是否也会影响其测量结果。为衡量基准表示方式的影响,我们引入威胁保持表示敏感性(TPRS),用于测量在保持底层任务、有害行为、安全策略、真实标签、环境和评估标准不变的情况下,仅改变智能体可见的表示方式时,ASR 的变化程度。在 Agent Security Bench(ASB)上,将与威胁相关的工具名称替换为与威胁中性的名称后,GPT-5-mini 的已实施攻击成功率提高了 11.67 个百分点,Claude Haiku 4.5 提高了 13.21 个百分点。在 MCPTox 上,将原本中性的工具名称替换为明确与威胁相关的名称后,GPT-5-mini 的 ASR 降低了 11.00 个百分点,Claude Haiku 4.5 降低了 4.11 个百分点。在 AgentDojo 上,向与攻击相关的工具添加与威胁相关的措辞后,GPT-4o-mini 的 ASR 仅变化了 0.50 个百分点,但在需要使用该工具的任务中,良性效用下降了 5.36 个百分点。我们在 MCPTox 上开展了一项实验,观察到一个在 token 数量、长度和大小写方面均匹配的威胁中性名称,可以复现大部分由明确威胁相关名称引起的变化(在 GPT-5-mini 上为 11.00 个百分点中的 8.54 个百分点)。结果表明,在一种表示方式下测得的安全分数,可能无法推广到同一安全问题的其他威胁保持表示方式。因此,鲁棒性声明应由在一组受控的威胁保持表示方式上的表现加以支持,而不应依赖单一且受表示方式影响的分数。

arXiv cs.LG84

评估和提升大型语言模型对输入序列变化的鲁棒性

arXiv:2610.02432v1 公告类型:cross 摘要:生产系统中的大型语言模型(LLM)面临提示注入、木马(后门)以及对自动质量指标的操纵。本论文提出用于评估和提升LLM对对抗性输入序列变化鲁棒性的模型、方法和算法。我们提出 R_stab(f),一种基于小幅输入扰动下逐步输出分布之间 Jensen-Shannon 散度的生成式鲁棒性指标。对于局部攻击,我们证明 V(h) <= 1 - R_class(h),其中 R_class(h) 表示决策算子 h 在小幅扰动下保持其决策的概率。对于非局部攻击,我们提出一种经过校准的经验模型。针对 LLM-as-a-Judge 系统,我们开发了 ASA,这是一种自适应进化式黑盒攻击,其攻击成功率(ASR)最高可达 73.8%,在开放模型之间的迁移率最高可达 62.6%。在 Trojan Detection Challenge 2023 数据(Pythia-1.4B)上,替代触发器的 REASR 约为 0.99,而真实触发器的召回率约为 0.17,基线约为 0.14。在 SaTML CTF 2024 中,我们系统化总结了多层防御的四类绕过方法,将 ASR 从 90% 降至 15-25%。由 5-7 个异构模型组成的委员会将 Gemma-3-4B 的 ASR 降低 47-55 个百分点;使用 7 个模型时,ASR 降至 19.3%。针对基于 Model Context Protocol(MCP)的智能体系统,我们提出 AttestMCP,该方法使用受 HMAC 保护的数据包对工具调用进行证明认证,每次调用耗时低于 0.1 毫秒,并提出 Commit Boundary 隔离模式。在包含 847 个场景的 MCPBench 基准测试中,这些方法将平均 ASR 从 53.7% 降至 12.4%。相关方法已在 JudgeGuard 和 TrojanArmor 软件套件以及 MCPSec 模块中实现。

arXiv cs.AI85

代理安全基准中的威胁保持表示敏感性

基于 LLM 的代理的安全基准通常将攻击成功率(ASR)作为衡量模型鲁棒性的指标,并利用这些分数比较不同模型和防御机制,默认这些分数能够描述代理的安全性。本文探讨基准的表示方式是否也会影响其测量结果。为衡量基准表示方式的影响,我们引入威胁保持表示敏感性(TPRS),用于衡量在保持底层任务、有害操作、安全策略、真实标签、环境和评估标准不变的情况下,仅改变代理可见表示时 ASR 的变化程度。在 Agent Security Bench (ASB) 上,将与威胁相关的工具名称替换为威胁中性的名称后,GPT-5-mini 的已提交攻击成功率提高了 11.67 个百分点,Claude Haiku 4.5 提高了 13.21 个百分点。在 MCPTox 上,将原本中性的工具名称替换为明确与威胁相关的名称后,GPT-5-mini 的 ASR 降低了 11.00 个百分点,Claude Haiku 4.5 降低了 4.11 个百分点。在 AgentDojo 上,仅向与攻击相关的工具添加与威胁相关的措辞,就使 GPT-4o-mini 的 ASR 变化了 0.50 个百分点;然而,在需要使用该工具的任务中,无害效用下降了 5.36 个百分点。我们在 MCPTox 上进行了一项实验,发现一个在 token 数量、长度和大小写方面均相匹配的威胁中性名称,可以重现由明确威胁相关名称造成的大部分变化(在 GPT-5-mini 上为 11.00 个百分点中的 8.54 个百分点)。结果表明,在某一种表示方式下测得的安全分数,可能无法推广到同一安全问题的其他威胁保持表示方式。因此,鲁棒性声明应由在一组受控的威胁保持表示方式上的表现加以支持,而不应依赖单一的、受表示方式影响的分数。

arXiv cs.AI71

Toward SLM-based agentic task-tool intent matching

Tool-equipped AI agents use tool calls to access data and act on external systems. Horizontal growth of agentic systems increases the number of these interactions, and further motivates the need for automated, per-call oversight that can operate at low latency and/or on-prem. Conventional authorization schemes can determine whether an agent is allowed to invoke a tool, but cannot assess the agent's underlying cognition, specifically, whether the tool selection represents a logical, relevant step toward satisfying the intent of the task or not. Consequently, an allowed call may still deviate from the task's intent: a rogue agent might deviate the calls or nudge other agents to make a combination of calls that would not align with the intent of the task. Therefore, every call needs to be verified. In this study we investigate the applicability of Small Language Models (SLMs) to this purpose: an SLM functions as a task-tool relevance classifier that evaluates every selected tool independently against the assigned task and returns a relevance signal for downstream enforcement. Equipped with a novel dataset with multi-tool tasks whose required tools span distinct Model Context Protocol (MCP) servers, we used prompt-optimization, supervised fine-tuning, and reinforcement learning through GRPO to optimize and specialize SLMs.

SiliconANGLE AI58

Equals Money lets customers’ AI tools read data but not move money

Opening a Model Context Protocol server, or MCP server, to customers’ AI tools is becoming standard for fintech companies, but in payments a rogue agent does not just leak data — it moves money. That raises the bar for how agents are identified, logged and stopped. Identity providers are adding controls for that separation, with […] The post Equals Money lets customers’ AI tools read data but not move money appeared first on SiliconANGLE .

Hacker News 熱門47

Show HN: Google Maps Scraper MCP

Connect your AI agent to synchronous business search and structured listing data through one secure MCP connection. Comments URL: https://news.ycombinator.com/item?id=49940653 Points: 4 # Comments: 0

Hacker News 熱門60

Show HN: Use all Codex Plugins inside Pi

I just realized that codex now exposes local server endpoints for all plugins without extra auth. So you can just use them from any model or harness. Im soooo excited!!! One auth for everything! For Pi: pi install npm:@wileai/pi-codex-connector For any harness: npx -y @wileai/codex-connectors-mcp@latest Comments URL: https://news.ycombinator.com/item?id=49929381 Points: 5 # Comments: 0

arXiv cs.AI76

LLM 驱动的基于技能的智能制造多智能体控制

工厂正转向小批量、高度定制化生产,这要求对灵活且可重构的自动化系统进行频繁重新编程。基于 LLM 的智能体可以承担两种互补的角色:在离线状态下,它们生成确定性的生产序列,从而减少编程工作量;在线状态下,它们操作实际运行的机器,并处理静态程序无法预见的运行时突发故障。我们提出了一种解决方案:为每个工厂模块配备一个专用的基于 LLM 的智能体和一个 MCP 工具服务器,通过 OPC UA 方法调用公开该模块的技能;各智能体通过 MQTT 协同,并以工厂状态的实时更新为依据。我们在一个六模块六边形实体工厂的仿真环境中,针对九项复杂度逐步增加的生产挑战(包括静默硬件故障检测),比较了三种智能体架构:编排器、点对点和单体式。单体式和点对点架构均取得了最高的平均解决率(93\%);而编排器架构具有独特优势,在十次运行中均通过自主将板件绕过受阻区段重新路由,解决了传送带静默故障。所有架构都表现出了涌现式故障诊断行为,尽管没有任何显式的故障处理逻辑,这证明了标准化 MCP 工具、基于 MQTT 的智能体间通信以及实时状态注入,可以作为由 LLM 编程的智能制造系统的一种可行且可复现的基础。

Hacker News 熱門71

Show HN:Strata——一个能够对你的 LLM 说“不”的富有表现力的语义层

大家好,我是 Ajo,我构建了 Strata。 我在 Netflix 工作了 4 年,为非技术业务用户解决自助服务问题。我认为,凭借我在语义层设计方面的独特方法,我已经找到了答案。对我们的非技术同事来说,关键挑战是在表达能力和易用性之间取得平衡。恰好,这种专注也让它与 LLM 配合得相当不错。 Strata 是一个全栈解决方案,包括语义层、仪表板、订阅和 Google Sheets 导出功能。所有操作都可以通过查看代理对话或使用 MCP 完成。 一些主要概念和功能: 名称是严格的。一个项目中只能存在一个名为 Revenue 的对象。如果 Revenue 映射到多个表,查询粒度和速度将共同决定使用哪个表。 严格的命名规范有助于实现跨事实域的自动数据混合。 支持分区和聚合感知的语义路由。这样,你可以将部分数据加载到 Druid 或 ClickHose 之类的更快计算引擎中,同时将完整历史数据保留在 Trino 或其他成本更低的系统中。如果查询可以在那里完成,查询引擎就会选择速度更快的层。 复杂度量:开箱即用地支持快照、LOD(包含/排除)、复合度量和自动分层复合度量。 在语义层之上,用户可以创建跨越多个事实域的自定义计算。 另一个有趣的功能是创建群组,并将其作为过滤器应用于整个查询,或查询中的单个度量。 我们有意不构建一个供 BI 工具连接的语义层。我认为那是一条死路。我们提供 API 和 MCP,供你在其上构建任何自定义功能。 通过 Docker 免费试用: https://strata.do/try/ 入门文档: https://strata.do/docs/ 这是早期 Beta 版本,并非开源。不过,免费层级最多支持 25 位用户。你应该可以完全在自己的机器上通过 Docker 运行它。 我非常期待听到你们的反馈,尤其是正在使用 Looker 和 Cube 的朋友。 感谢阅读! 评论地址: https://news.ycombinator.com/item?id=49909913 得分:8 评论数:6

Hacker News 熱門72

Show HN:Strata——一个能够对 LLM 说“不”的高表现力语义层

大家好,我是 Ajo,Strata 由我打造。 我在 Netflix 工作了 4 年,为非技术业务用户解决自助服务问题。我认为,凭借自己独特的语义层设计方法,我已经找到了答案。对我们的非技术同事来说,关键挑战是在表现力与易用性之间取得平衡。事实证明,这种专注也让它与 LLM 配合得相当不错。 Strata 是一个全栈解决方案,包含语义层、仪表板、订阅和 google sheets 导出功能。所有这些都可以通过 agent 对话或 MCP 完成。 一些核心概念和功能: 名称是严格限定的。一个项目中只能存在一个名为 Revenue 的对象。如果 revenue 映射到多个表,查询粒度和速度将决定使用哪个表。 严格的命名规范有助于实现跨事实域的自动数据混合。 具备分区和聚合感知能力的语义路由。这使你能够将部分数据加载到 Druid 或 ClickHose 等速度更快的计算引擎中,同时将完整历史数据保存在 trino 或其他成本更低的系统中。如果查询可以在那里完成,查询引擎就会选择更快的层级。 复杂度量:开箱即用地支持 snapshot、LOD(include/exclude)、Compound 和 Auto leveling compound 度量。 在语义层之上,用户可以创建跨越多个事实域的自定义计算。 另一个有趣的功能是能够创建群组,并将其作为过滤器应用于整个查询,或应用于查询中的单个度量。 我们有意不构建一个供你的 BI 工具连接的语义层。我认为那是一条死路。对于你想在其上构建的任何定制功能,我们提供 APIs 和 MCP。 在 docker 上免费试用: https://strata.do/try/ 帮助你入门的文档: https://strata.do/docs/ 这是一个早期 beta 版本,并非开源。不过,免费层最多支持 25 位用户。你应该可以通过 docker 完全在自己的机器上运行它。 非常期待听到你的反馈,尤其是正在使用 Looker 和 Cube 的朋友。 感谢阅读! 评论链接: https://news.ycombinator.com/item?id=49909913 得分:4 评论数:0

arXiv cs.AI76

可审计的长期记忆:在 LongMemEval-S 上测得 500 题中 479/475 的确定性检索链

我们在 LongMemEval-S 上评估了一个可审计的长期记忆系统。其检索链使用混合候选检索、cross-encoder 重排序、覆盖优先的数据包编译,以及确定性推理脚手架;LLM 仅作为可替换的最终阅读器使用。该链在 470 个可回答问题中的 468 个问题上将所有黄金会话放入候选池,并在 470 个问题中的 462 个问题上生成黄金完整的数据包。通过未固定的 CLI 别名调用 Claude Opus 阅读器,在两次 500 题运行中,在 GPT-4o 评判下分别得到 479/500 和 475/500。72 条可回答的知识更新行使用了实质性修改过的评分提示,其在官方文本下的影响尚未测量。这一组结果横跨 Chronos High 已发布的 478/500;阅读器生成、评分提示以及可能的数据版本的差异,加上系统内方差,既不能证明优越性,也不能证明等价性。在相同数据包上,grok-4.6-high 阅读器得分为 476/474,而一个最大推理努力的 agentic 变体退化到 461/465。标题结果的两次运行在八个判决翻转行上存在差异。第二个评判器在每次运行中都与标题评判器在 493/500 行(98.6%)上一致,并给两次运行均评分为 472/500;官方评判器在重新评分字节完全相同的第 1 次运行答案时,也翻转了三个判决。负对照否定了一个验证器:它修复了三个错误草稿,但破坏了十一个正确草稿。所有组件均在同一组 500 个问题上开发,没有留出评估或独立人工裁决;检索与脚手架方法来源以及从转录记录导出的审计均已保留;标题阅读器接收了额外的操作员上下文,其完整请求未被保留,且 MCP 工具可用性尚未解决。我们发布了物化数据包、脚手架、阅读器输出、评判器判决和对照,以供检查和重新评分。

arXiv cs.AI80

WEFT: Scaling Tool-Use Post-Training for General-Purpose Agents

Recent efforts to scale tool-use post-training have largely centered on the synthesis of executable environments, which constitute only one component of a broader agentic interaction system comprising the environment, task, agent harness, and evaluator. Scaling environments in isolation, however, does not guarantee commensurate gains in model performance, because reliable learning signals depend on coherent interactions among all components of the agentic interaction system. To address this problem, we introduce WEFT (Whole-system Evolution For Tool-use Post-training), which couples scalable agentic interaction system construction, execution-driven self-evolution, and stable post-training. WEFT scales agentic interaction system construction across environment breadth, task complexity, and interaction diversity. Execution-driven self-evolution iteratively uses execution traces and state evidence to attribute failures and revise the responsible components, with fresh rollouts evaluating the changes and providing evidence for subsequent evolution rounds. For stable post-training at scale, WEFT addresses both optimization and execution reliability: prefix-preserving sampling retains verified progress and atomic-turn credit assignment localizes learning signals, while MegaMCP maintains isolated, recoverable state across concurrent rollouts over shared tool services. Extensive experiments across various models and benchmarks demonstrate the effectiveness of WEFT for tool-use post-training. WEFT-8B and WEFT-14B outperform all evaluated matched-size environment-scaling baselines on BFCL V4, $τ^2$-Bench, and Claw-Eval. In particular, WEFT-14B improves over Agent-World-14B by 6.41, 2.23, and 12.27 percentage points. WEFT-35B-A3B further extends these gains to more challenging long-horizon workflow benchmarks, including Toolathlon-Verified and AutomationBench.

Hacker News 熱門70

Launch HN:Vespper (YC F24) – SOTA Docx MCP

Hey HN!我们是来自 Vespper( https://vespper.com )的 Dudu 和 Topaz。Vespper 是一个 MCP,可让 AI agents 高效编辑 Word 文档,由我们微调的模型驱动。目前它比最接近的替代方案快 3 倍、便宜 2 倍,而且更准确。可以在这里查看产品工作方式概览: https://youtu.be/odKxsgPjzzw 我们是在为制药公司构建 AI 文档编辑器一年后,开始研究这个问题的。在那之前,Topaz(我本人)是 Snyk 的高级 SWE,负责分布式系统;Dudu 是 Viz.ai 的深度学习工程师,构建用于中风检测的计算机视觉模型。 我们的编辑器帮助制药公司生成监管文档(例如 CSR),以加快其提交流程。最初,输出是 Markdown,并显示在 WYSIWYG 编辑器中。然而,用户更愿意使用自己的 Word 模板。这就是问题开始的地方。 AI agents 并不擅长编辑 Word 文档。一个 Word 文档是一个由冗长 XML 文件组成的 zip 文件,遵循 OOXML 规范。即使是“很小”的改动也需要大费周章,例如:添加编号列表需要在 numbering.xml 中用一个新的 ID 创建条目,并在 document.xml 中把它链接回去;加粗一句话需要把它拆分成 3 个以上的 run 元素。类似问题还有很多。 这使得直接编辑 zip(unzip + grep + sed)对 agents 来说是个坏主意,因为它们会在这些机制上消耗大量时间和 tokens。 在实践中,今天的工具大致分为三类。你可以让 agent 针对 python-docx 或 Open XML SDK 这类底层库编写代码;你可以给它一个带有主观编辑工具的 MCP(SuperDoc、Office CLI、Adeu 等);或者你可以用 pandoc/mammoth.js 之类的工具把文件在 Markdown/HTML 之间来回转换。 它们都不太行。前两类仍然会把 agent 的上下文消耗在 Word 机制上,而不是手头任务上(MCPs 还会引入一种需要学习的新 DSL);第三类则损失很大(pandoc/mammoth.js/等无法保留足够的保真度)。 根据我们的亲身经验,这些问题会损害下游任务的性能。 当我们尝试让 agent 填写大型文档时,事情很快就崩了。上下文窗口已经塞满了客户数据(文件、用户上下文、全局规则等),而 agent 又把 tokens 和时间消耗在探索文档以及调试失败的编辑上。填写一份 CSR(临床研究报告)大约需要 50 分钟,而且结果很糟(漏掉字段/章节、样式损坏等)。Harvey.ai 的团队也得出了类似结论: https://www.harvey.ai/blog/building-an-agent-for-complex-doc... 就在那时,我们转移了关注点。我们设计了一个 MCP,让 agents 像编辑 HTML 一样编辑 Word 文档。agent 接收 HTML,进行查找和替换编辑,然后我们把这些编辑协调回原始 .docx 文件中。 我们选择 HTML 而不是 Markdown,是因为它在结构上与 OOXML 更接近,而且 CSS 将样式与元素关联的方式大致类似于 OOXML。我们不得不编写自己的 DOCX→HTML 转换器,因为 pandoc 和 mammoth.js 无法保留足够的保真度。 需要说明的是,我们的 DOCX → HTML 转换也有损。但这没关系,因为我们从不把 HTML 再转换回 DOCX。HTML 只是给 agent 的一个投影,因此它只需要具备足够的保真度,让 agent 理解正在编辑内容的结构和样式。原始文件始终是真实来源,我们会原地修改它。 这也意味着 agent 不需要学习新的 DSL。编辑 Word 文档感觉就像在文件系统上编辑 HTML 文件一样,而这是 agents 已经很擅长的事情。许多 DOCX MCPs 会一次性交给 agents 几十个甚至上百个工具,让它们临场摸索。我们的 MCP 只暴露三个工具(read、search、edit)。Word 文档被完全抽象掉了。 在 agent 向我们发送编辑请求(一个“old_html”和“new_html”对)后,我们会将其协调到原始 .docx 文件中。这个协调过程由我们微调的模型驱动,它是一个 3-8B base,带有 LoRA adapter。它以 HTML diff 以及原始的局部 OOXML block 作为输入,并输出新的 OOXML。“定位”是确定性完成的:我们获取 agent 指定的锚点,并尝试找到它们对应的 XML 双胞胎,因此协调模型只承担单一职责。 在这个狭窄任务上,一个小模型可以达到经过良好 prompt 调优的前沿模型水平,同时又足够小、足够快,可以放在热路径中。 这个项目最终变成了数月的工作,但我们很高兴发布 v1。我们的内部基准显示,它比 DOCX skill 和原始 python-docx 更准确,同时便宜约 2 倍、快约 3 倍,主要原因是它每个任务只需要 3 次工具调用(p50),而 DOCX skill 需要 10 次,Office CLI 需要 13 次。 目前还不完美。例如,我们暂时不支持操作图片或评论。尽管如此,我们已经看到人们以各种方式使用我们的 MCP: - 法律科技公司用它驱动其在 Office.js 中的实时编辑流程。 - AI startup 用它优化人们的简历,并代表他们投递申请。 - 需要起草政策备忘录的 govtech。 - 一家生命科学 startup 使用长时间运行的 agents 来完成监管表格。 关于隐私的一点说明:我们的 MCP 运行在云端,因此用户会把他们的 .docx 文件发送给我们。我们不会用用户数据进行训练,团队也可以选择 ZDR 或 self-hosting。 我们有一个免费层级,每月 500 次编辑,也很希望大家都来试试。我们以后想提高这个额度,但我们是个小团队,运行微调模型并不便宜 :( 我们很想听听你们关于 docx 编辑的想法和评论!接下来几个小时我们会在评论区回复 评论 URL: https://news.ycombinator.com/item?id=49881505 Points:6 # 评论:2

Hacker News 熱門65

Show HN:HN.watch – 所有 Hacker News 帖子的视频

大家好 HN,我是 Per,Scrimba(YC S20)的创始人。在过去十年里,我们一直用一种基于 HTML 的视频格式教人们编程。现在我们把 LLM 接入了其中,让人们可以创建关于任何内容的讲解视频。它叫做 “Scrimba Explain”。 为了向 Hacker News 演示这项技术,我们构建了 HN.watch。它就像 HN,但用讲解视频代替文章。我们会在有人第一次点击某个链接时即时创建这些视频。 虽然使用 HTML 而不是扩散模型有明显的视觉缺点,但它有三大优势:- 速度:比基于像素的视频生成快得多(从点击到播放只需几秒)- 成本:我们每个视频的成本约为 0.04 美元。(不包括某些视频会使用的图像生成;这会很快推高成本)- 易于编辑:上述优势也让 AI 辅助编辑变得便宜且快速 我们的假设是,如果视频创作从“几美元和几分钟”变成“几美分和几秒钟”,就会解锁一批新的使用场景。以下是我们已经看到的一些:- 为每一个 Pull Request 提供视频讲解(我们内部就是这样做的)- 为你的内部/外部文档中的每个页面配一个视频 - 在约 4 秒内把一篇复杂文章变成视频(通过我们的 Chrome 扩展)- 课程创作者可以在录制正式内容前快速起草课程 - 人们还会创作很多个人内容,比如给孩子的故事、婚礼邀请、生日等 这个技术栈基于一种开源编程语言(Imba),由我们的 CTO Sindre Aarsæther 创建。它会编译成 JavaScript,因此能与 npm + node 生态系统完全互操作。你可以在这里了解更多: https://imba.io/ 我们还构建了自己的同步引擎(OP),以及一个用于代理的上下文管理系统(Q)。我们原本担心这会让 LLM 在为我们写代码时遇到困难,因为这两者都不在它们的训练数据中(其中 Imba 的数据也很少)。然而,我们惊喜地发现 LLM 实际上非常擅长我们的技术栈。这可能是因为这个技术栈极其紧凑。Imba 很简洁,OP 也是如此,一个声明就能设置存储、同步、权限、UI,以及 AI 能看到的内容。这意味着前端、API、数据库和 JSON 之间不需要相互转换,模型也就不容易混淆和出错。 简单来说,我们没有使用 React.js、Express、Supabase 和 LangChain,而是从零开始全部自己构建。绝对是深受“非我发明”综合征之苦,哈哈!至于模型,我们使用 Gemini、GPTs、Inworld、ElevenLabs 以及其他一些模型。 如果你想试试,可以任选一种:- Web UI(scrimba.com/explain)- MCP(添加到你的编码代理中)- ChatGPT Plugin - Chrome Extension 你可以在我们的文档中找到以上所有内容的链接: https://docs.scrimba.com/explain/introduction 最后,这是该工具的一个真正基于像素的视频: https://www.youtube.com/watch?v=k6rbHmBxSEs 很想听听你的反馈,也想知道是否有人对其他使用场景有想法。 PS:考虑到 HN 群体有多偏爱文本,我预计这次发布会在 HN 上遇到相当多的反对意见。这类工具并不适合所有人。但如今确实有很多人更喜欢视频而不是文本,尤其是年轻一代。 评论 URL: https://news.ycombinator.com/item?id=49879401 积分:18 评论数:8

arXiv cs.AI64

A Safety-Bounded SDC-to-MCP Gateway for Medical AI Agents

The Model Context Protocol (MCP) provides a common interface through which AI applications discover and use external resources and tools. It allows language-model agents to ground their reasoning in current system state and interact with heterogeneous services. In medical environments, however, exposing device state and action affordances requires deterministic constraints on possible effects. We present an IEEE 11073 Service-Oriented Device Connectivity (SDC)-to-MCP gateway that exposes metrics, alarms, context references, and semantic metadata as read-only resources, while representing selected action affordances as policy-validated dry-run tools. The term safety-bounded denotes a narrow no-execution property: agent-facing requests dispatch no SDC device operation. A Python prototype supports simulated fault and lifecycle experiments, a software-reference protocol path spanning independent Java and Python implementations, deterministic baselines, representation ablations, and multi-model agent evaluation. The results show semantically explicit resource exposure, visible rejection of invalid or outdated state, and preservation of the no-execution boundary across resource, proposal, and authorization paths. Explicit semantic metadata improved conformity to required metric identifiers in structured alarm outputs relative to a generic representation, while retained structured-output failures reveal a distinction between plausible narrative answers and task-compliant machine-readable results.

Hacker News 熱門77

Show HN:Critic——与编写代码的智能体一起审查代码

各位 HN 用户好,我是 Feyn 的 Shreyash。我们帮助企业利用其数据构建定制模型。今天我们发布了 Critic,这是一个变更审查平台,让你可以直接与编写代码的 AI 交流。 智能体编写了我们的大部分代码。虽然这提高了我们的生产力,但理解一项变更及其后果已经变得极其困难。随着公司采用越来越多的智能体工具,我们发现,让人们了解某个 PR 的影响和项目状态变得更加困难。于是我们构建了 Critic 来解决这个问题。 Critic 可以让 AI 智能体介绍其代码、为关键代码块添加注释,并提供相关证据(例如屏幕截图以及如何在本地运行的说明)。任何查看该变更的人都可以直接与编写它的智能体交流。你可以 在这里观看演示 。 Critic 通过 Codex 或 Claude Code 的插件运行。当你的智能体编写代码时,插件会要求它同时撰写一份叙述,介绍这项变更背后的故事,并突出显示其中的假设、决策或复杂代码。随后,你可以在 critic.run 上查看这项变更,或者让你的智能体通过内置的 MCP 获取它。Critic 中的每项功能都可以通过 MCP 使用,因此你的智能体无需离开其运行环境,就能获得完全相同的上下文。 你可以通过控制面板或 MCP 直接与负责编写代码的智能体聊天。当 Critic 收到问题时,它会分叉出编写代码时的会话,并将你的问题转发到该会话中。这样,你的主线程可以保持整洁并继续工作。 本地变更只有所有者可见。推送到 GitHub 的任何内容都会被镜像,并对在 GitHub 上拥有查看该变更权限的所有人可见。 构建 Critic 时,安全性是我们的首要考虑事项之一。AI 智能体通常会以自动模式运行,并且可以在你的计算机上执行许多操作。我们希望确保,让他人访问你的智能体并不意味着同时让他们访问你的计算机。所有 Critic 分叉出的会话都会移除写入工具。它们只能回答有关该工作区中的变更和进行中工作的相关问题。 Critic 帮助我们在几起事件进入生产环境之前发现了它们。最常见的问题是模型没有复用已有的资源,例如现有的样式、组件或函数。由于深入了解智能体的工作并向它提问变得非常容易,我们还发现了更多模型误诊问题或编写无用代码的情况。由于 Critic 的界面比 GitHub 更快捷、更适合智能体使用,我们的团队也能更快地回复反馈。 Critic 可免费使用。请在 https://critic.run 注册。如果你有任何反馈或问题,请告诉我。 评论地址: https://news.ycombinator.com/item?id=49834098 得分:5 评论数:1

Hacker News 熱門

Show HN: I built a post-mortem debugger for native Windows x64/x86 crashes

Hello HN! I've spent years debugging Windows crashes with tools that were either friendly but limited (e.g. Visual Studio) or powerful but archaic (e.g. WinDbg). I developed patterns and methods for understanding what was going on, and decided to build it into a much more effective debugging tool called ForensicDbg. I built a modern interface to minimize the friction when debugging. All of the data shown to you is analyzed, interpreted, and presented to you clearly, so you can focus on what matters. Everything is interlinked so you can quickly and intuitivly navigate through the process space. ForensicDbg comes with an MCP server which allows for agenic debugging. The work done to interpret and interlink your data also benefits AI tools. It removes the risk of hallucinations while building a stable foundation for them to work from without spending tokens. If you want to try it out you can sign up and get a free beta license here: https://www.forensicdbg.com/beta Comments URL: https://news.ycombinator.com/item?id=49821086 Points: 3 # Comments: 0

arXiv cs.AI85

A2M:MCP 生态系统中经轨迹优化的智能体劫持

使用 Model Context Protocol (MCP) 的智能体依赖语义匹配从第三方服务器中选择工具,这使攻击者控制的元数据和输出暴露出语义供应链风险。我们提出了 A2M(吸引—操纵),这是一个用于劫持 MCP 智能体的两阶段黑盒框架。吸引阶段优化工具元数据,以提高工具被调用的概率;操纵阶段利用执行轨迹来改进对抗性工具返回结果,引导智能体朝向攻击者期望的结果。在 LiveMCPBench 上,针对 GLM-4.6 优化并评估的直接攻击,在四种场景下实现了 93.6% 的恶意工具调用率宏平均值;在认知拒绝服务场景下,将加权令牌成本提高至良性基线的 32.4 倍;并在信息窃取、环境完整性破坏和推理偏离三个场景下取得了 74.4% 的平均攻击成功率。在无需重新优化的情况下迁移到另外四个模型后,相应的宏平均值分别为 63.6%、2.7 倍和 24.5%。这些发现表明,MCP 生态系统需要更严格的工具审查和运行时隔离。代码已公开发布于 https://github.com/Lilaizhen/A2M。

Hacker News 熱門56

Launch HN: Coverage Cat (YC S22) – Umbrella insurance via your personal agent

Hey HN! We’re Max and Gabriel the co-founders of Coverage Cat. We’ve been friends for over a decade, met in college then hung out mostly on the internet. We love building products that help people optimize the crufty corners of their lives. Max is a former Google/Microsoft/Two Sigma PM and Gabriel has been working in startups for over a decade. We’re building Coverage Cat: an AI-native, you can shop with your AI agent or via a form, insurance brokerage for consumers. Our current focus is helping tech folks (think L3-L8) buy umbrella insurance. For those who are unfamiliar with this type of coverage, here’s a blurb from one of our insurance agents: “Umbrella liability insurance is a policy that provides additional coverage above the limits of existing auto, homeowners, renters, or landlord policies. It kicks in after the underlying policy limits are exhausted and may also cover personal injury claims like libel, slander, or defamation that standard policies often exclude. Policies typically start at $1 million in additional liability coverage and can protect you, your spouse, dependents, and even pets in your household.” Buying insurance online is a miserable experience. You fill out a bunch of forms that say they’re going to give you quotes. Most don’t and then you end up with tons of unwanted phone calls and spam. Even if you wade through the muck, you’ll often still end up with sub-optimal prices and coverage because of a lack of market transparency and poorly-aligned advisory incentives. We came to this problem because Max is a classic personal finance obsessive. He's the type of person that needs to know that he has the best possible price for something (everyone has one friend with the patience for a two hour phone call with the bank for some $10 fee) or that his insurance coverage is as tailored to his risk profile as the market will allow. He actually reads insurance policies end to end. Years ago, when he shopped for his homeowners insurance it took him 10+ phone calls and dozens of online form fills to find the right deal. He also suffered tons of collateral damage in the process: websites sold his information to dozens of agents who proceeded to call, text, and email him a spam hoard that grows to this day. After this painful search made us aware of the problem, we also spent a lot of time doing user research with wealthy-ish tech employees to see if they felt the same way. They did, and also complained that they 1) often felt like they'd left money on the table, 2) didn’t really understand their coverages, and 3) that brokers were slow, hard to communicate with, and unreliable. To solve the problem, we set out to build Coverage Cat. Our approach has three major components: First, we work really really hard to find and partner with insurance carriers that offer high-quality, competitively-priced products. We've also taken time to identify insurers that work on a direct-to-consumer basis or transparently list their prices online so we can make our customers aware of all the options available to them. We get paid commission when we match users to great insurance deals, but we still show and recommend folks deals that we don't make money on when they're accessible and will always recommend users buy what's best for their personal financial situation. Our goal is to meaningfully improve price transparency so consumers (and their AI agents) can make informed coverage decisions and not get nickel-and-dimed! Second, we automate every possible part of the insurance process. Some forms, portals, & approvals still need human review due to regulatory constraints, but if it's not restricted, we're automating it. LLMs have given our small team tremendous leverage and enabled us to tackle problems at a scale that would've been unfathomable five years ago. Finally, we build for agents first (a remix of the more classic adage, build for developers/APIs). We've always been big believers that personal finance would be the killer use-case for the AI revolution and have done our best to position ourselves to surf the wave. As personal assistants have started to explode onto the mainstream (think Muse, Instinct, Town, Codex, CC etc.) we've ensured our shopping and comparison process works via API/MCP so agents can present their users with all the information they need to make a good decision and transform a miserable shopping experience into a delightful one. Coverage Cat is an unusual business because, while we also help folks find homeowners insurance in California and Texas, our main focus is on umbrella insurance. Most brokerages only sell umbrella coverage as a customer retention product, but it makes them almost no money. We focus on it as our core business because: 1) it's one piece of the insurance puzzle that many folks in tech overlook and/or are confused about even though it can have a huge impact on their financial well-being. 2) Existing online tools and brokerages broadly don't make it easy to comparison shop for. 3) It was, for us, the most technically feasible candidate for automation given startup resource constraints. Insofar as we know Coverage Cat is the first instance of a tool/portal that allows AI agents to complete most of the comparison and shopping steps required to allow people to buy insurance. We’d love your feedback so please do try it out. Just feed the prompt: “Shop for umbrella insurance with Coverage Cat” to your personal agent and let us know what you think! If you want to watch a couple of agents navigate the flow before you try it out there’s a video here: https://youtu.be/1BUkgAn6s-I Also happy to answer any questions about the product, the problem space, and even some insurance questions (Max is a licensed agent) where regulation permits. Cheers! Comments URL: https://news.ycombinator.com/item?id=49804931 Points: 3 # Comments: 0

Hacker News 熱門72

Show HN:AI·rete·RAG——Rete 规则引擎作出决策,RAG 解释原因

大家好,我构建了 ai·rete·rag,因为我不断看到一些团队让 LLM 负责那些需要可审计的决策(贷款、欺诈、临床分诊),然后事后再加上“护栏”。 这个项目改为让两者串联运行: 1. 纯 Python 实现的 Rete 引擎根据事实评估 YAML 规则。判定结果只来自这里。相同的事实,每次都得到相同的判定,并通过基于显著性的冲突解决机制处理冲突。 2. RAG 从你自己的政策文档中检索段落,然后由 LLM 撰写通俗易懂的决策解释,引用这些段落。它无法改变判定结果。 有几件事的发展超出了我的预期: - 规则是一个图,而不是扁平列表:支持嵌套的 all/any/not,并且规则可以断言供其他规则使用的事实(前向链接)。决策追踪会展示因果链。 - 审计模式会记录评估过的每一条规则,包括那些未触发的规则,逐条件记录,并保存规则集快照以便重放。 - 规则可以引导检索(触发的规则会缩小要搜索的文档范围),检索到的文本也可以转换为供引擎使用的事实。 - 非技术人员可以在可视化编辑器中构建规则,也可以粘贴政策文档,让 LLM 起草带引用的规则。未经审核,草稿绝不会被保存。工程师仍然可以使用 YAML。 落地页提供无需注册的在线演示(涵盖 8 个演示领域:贷款、欺诈、临床、保险、法律、运营、电子商务、区块链)。此外还有一个 MCP 服务器,因此 Claude 和其他代理可以将 /decide 作为工具调用:`uvx ai-rete-rag-mcp`。 坦率地说:这是一个提供免费套餐的托管产品。MCP 客户端采用 MIT 许可证并已开源(github.com/zaharajabeen13-create/ai-rete-rag-mcp);引擎和平台目前并未开源。 我尤其想听听曾经需要向监管机构或审计人员解释自动化决策的人分享经验:他们实际要求了什么? 评论链接: https://news.ycombinator.com/item?id=49803683 得分:6 评论数:0

Hacker News 熱門70

Show HN: Foremerge – Catch Intent Conflicts Between Parallel Coding Agents

At, GPTree, we run several coding agents across our team on one repo using parallel worktrees. Apart from wasted time reviewing and fixing conflicts at PR time, the failures that hurt the most are when multiple plans or tickets cause architecture changes that cannot both be true. Ex. one agent replaces a class while another one is in the process of extending it. Git only notices if the resulting patches happen to touch the same lines and the review only catches it if they are familiar with both tickets. Foremerge is a local "git like" coordination layer that sits above git (ie. does not interact with or change the way git and worktrees function), Before editing each agent publishes an intent and the scopes it will change, with the operation it plans to complete on each one. foremerge intent publish --agent "$A" \ --summary "Replace PaymentService with StripePaymentService" \ --scope symbol:PaymentService=replace foremerge intent publish --agent "$B" \ --summary "Add PayPal support to PaymentService" \ --scope symbol:PaymentService=extend The publish by the 2nd agent returns a HIGH destructive_vs_additive finding before writing any code. Agents keep their own worktrees and the shared state is one SQLite file in gits common direectory. No hooks, no merge drivers, nothing rewrites your history. It ships as one Rust binary with a CLI and MCP server with 18 tools and `foremerge setup all` wires it into Claude Code, Codex and Cursor. Because the protocol has nothing provider specific, a Claude agent and a Codex agent coordinate through the same store. Before any work is accepted, Foremerge runs a named check that you configured against the exact git state of the change. An agent that says tests pass is recorded but it dosnt satisfy the acceptance gate without running the check itself. Detection is deterministic, no judge model reading your code. HIGH conflicts are only asserted for declared operations, ie. matches inferred from prose cap out below high. Claims are advisory leases, not locks so two agents can still hold the same scope without deadlock. The open source version is single matching and so not a distributed consensus. We have tested this up to 98 parallel agents all working on the same repo with zero conflicts (was supposed to be 100 but 2 agents failed to run due to resource limitations) I replayed 76 intents on my own agents from a build last week in the order they happened. The sample had exactly 1 conflict (which was flagged) and the review found a blind spot where one agent claimed scope by class name and the other claimed it by an internal method. We are working on fixing that for the next release. Setup is a 30s install by pasting the quickstart instructions from the readme.md into your agent or manually: `curl -fsSL https://foremerge.com/install.sh | sh` or `cargo install --locked foremerge`, then `foremerge init && foremerge setup all` in a repo. Apache-2.0. The feedback I want most is which conflicts between your agents plans would you actually want flagged and which would you tollerate as noise? Repo here: https://github.com/naw103/foremerge Website: https://foremerge.com More information on the problems this solves: https://foremerge.com/blog/ Comments URL: https://news.ycombinator.com/item?id=49789356 Points: 4 # Comments: 0

Hacker News 熱門78

Launch HN: Skillsync (YC W26) – AI chat sessions made portable across agents

Hey HN, we're Nars & Nishant, founders of Skillsync ( https://skillsync.com ) Skillsync lets you move your AI chats across every coding agent. Most of our work exists as conversations, which are currently scattered across our agents. Though stored locally, these conversations use different formats. This is annoying because you cannot simply switch between agents without starting over. We get locked into a single provider and their agent as we invest in skills and memories over time. Skillsync acts as a universal converter. It moves the entire session, including all the messages, reasoning and tool calls so you can pick up right where you left off. Skillsync collects all your sessions in one place and makes them searchable. It breaks down what each session is carrying, including which loaded skills the agent is actually using, making stale context easy to spot. You can also create shared workspaces to sync sessions across your team. You can build your own closed loop systems. Everything runs locally except when you share to workspaces. The core is an open-source Rust engine called txcript ( https://github.com/skillsynchq/txcript ). It translates a session from one agent's on-disk format into another's, mapping conversation, reasoning, and tool history. Think ffmpeg or pandoc, but for agent sessions. On top of that engine is a local-first desktop app. Your agent sessions are normally scattered across different tools' folders in formats you'd never read by hand; the app surfaces them in one place with a UI that makes them actually readable, the conversation, the reasoning, and the tool calls, so you can revisit what happened, move a session into another agent, or share it with a teammate. Skills and memory are stored as portable, human-readable markdown you own, and exposed to any agent over MCP for search and selective retrieval. Sessions and translation run locally on your machine. The one thing that leaves is what you explicitly share into a team workspace. It’s been surprising to us to see how locked-in people already are without realizing it. You don't notice you're trapped in one agent or harness until you try to leave, and by then you've got months of sessions stuck in a format only that tool can read. The lock-in is invisible right up until it's expensive. Once sessions are portable, they stop being disposable logs and become something you can actually build on, spotting patterns in how you work, handing a session off to someone else, letting a non-technical teammate pick up where an engineer left off. The session turns out to be the unit of collaboration, and right now it's being thrown away. Before Skillsync, Nars and I built an open-source payment orchestrator that let merchants route across many processors instead of getting locked into one (30k+ GitHub stars). Fighting vendor lock-in by making incompatible systems interoperate was the whole job. We came into YC with a different idea, but the more we lived inside coding agents the more we saw the same problem from the other side: your context is locked into whatever agent you start with, because every agent stores sessions differently and none of it moves. Some of the things we’re seeing people do with Skillsync are: - Moving a session between Claude Code, Codex, and Cursor mid-task, including when you hit a usage limit on one and want to keep going on another. - Thinking through a problem in a browser Claude chat, then handing the whole thread to Claude Code or Codex to build. - Sharing research sessions with a team. Everyone uploads their sessions, so teammates and their agents can build on each other's work instead of repeating it. It's available as a Mac app, CLI and MCP. Here's the demo: https://youtu.be/7hVhSnSKGl8 . Would love to hear your feedback and answer questions! Comments URL: https://news.ycombinator.com/item?id=49743049 Points: 10 # Comments: 2

Hacker News 熱門78

Launch HN: Skillsync (YC W26) – AI chat sessions made portable across agents

Hey HN, we're Nars & Nishant, founders of Skillsync ( https://skillsync.com ) Skillsync lets you move your AI chats across every coding agent. Most of our work exists as conversations, which are currently scattered across our agents. Though stored locally, these conversations use different formats. This is annoying because you cannot simply switch between agents without starting over. We get locked into a single provider and their agent as we invest in skills and memories over time. Skillsync acts as a universal converter. It moves the entire session, including all the messages, reasoning and tool calls so you can pick up right where you left off. Skillsync collects all your sessions in one place and makes them searchable. It breaks down what each session is carrying, including which loaded skills the agent is actually using, making stale context easy to spot. You can also create shared workspaces to sync sessions across your team. You can build your own closed loop systems. Everything runs locally except when you share to workspaces. The core is an open-source Rust engine called txcript ( https://github.com/skillsynchq/txcript ). It translates a session from one agent's on-disk format into another's, mapping conversation, reasoning, and tool history. Think ffmpeg or pandoc, but for agent sessions. On top of that engine is a local-first desktop app. Your agent sessions are normally scattered across different tools' folders in formats you'd never read by hand; the app surfaces them in one place with a UI that makes them actually readable, the conversation, the reasoning, and the tool calls, so you can revisit what happened, move a session into another agent, or share it with a teammate. Skills and memory are stored as portable, human-readable markdown you own, and exposed to any agent over MCP for search and selective retrieval. Sessions and translation run locally on your machine. The one thing that leaves is what you explicitly share into a team workspace. It’s been surprising to us to see how locked-in people already are without realizing it. You don't notice you're trapped in one agent or harness until you try to leave, and by then you've got months of sessions stuck in a format only that tool can read. The lock-in is invisible right up until it's expensive. Once sessions are portable, they stop being disposable logs and become something you can actually build on, spotting patterns in how you work, handing a session off to someone else, letting a non-technical teammate pick up where an engineer left off. The session turns out to be the unit of collaboration, and right now it's being thrown away. Before Skillsync, Nars and I built an open-source payment orchestrator that let merchants route across many processors instead of getting locked into one (30k+ GitHub stars). Fighting vendor lock-in by making incompatible systems interoperate was the whole job. We came into YC with a different idea, but the more we lived inside coding agents the more we saw the same problem from the other side: your context is locked into whatever agent you start with, because every agent stores sessions differently and none of it moves. Some of the things we’re seeing people do with Skillsync are: - Moving a session between Claude Code, Codex, and Cursor mid-task, including when you hit a usage limit on one and want to keep going on another. - Thinking through a problem in a browser Claude chat, then handing the whole thread to Claude Code or Codex to build. - Sharing research sessions with a team. Everyone uploads their sessions, so teammates and their agents can build on each other's work instead of repeating it. It's available as a Mac app, CLI and MCP. Here's the demo: https://youtu.be/7hVhSnSKGl8 . Would love to hear your feedback and answer questions! Comments URL: https://news.ycombinator.com/item?id=49743049 Points: 4 # Comments: 0

Hacker News 熱門56

Show HN: Free WhatsApp MCP (+UI) – Give Your AI Agents Access to WhatsApp

Hi, I built Chat-Man because I wanted a cheap way to give my agents access to WhatsApp without integrating a WhatsApp library separately in every project. You get WhatsApp MCP server, so you can connect WhatsApp to an agent and programmatically read, search, extract and send messages - but also have a web UI for non-techies. You can also receive webhooks for incoming messages for starred conversations. What you can do with the MCP? -Read WhatsApp messages and turn them into CRM records -Summarise conversations or groups -Extract structured information from messages -Find messages, participants or other WhatsApp data -Send messages -Manage group memberships Of course.. you always need to follow data protection regulation. The web UI: -Edit group details -See who joined or left -See who is most active -Export group members -Match members against a CSV (e.g. from a CRM) -Bulk message members -Bulk kick members -Create invite links For individual contacts, you can send messages directly from the UI. Why I built it for myself? I needed WhatsApp access for several projects (hermo.ai, florahaus.co.uk, …) and didn't want to pay for a WhatsApp integration for each project. Link: https://chat-man.net I’d love to get some feedback, especially from people building agents that need access to WhatsApp. Fabian Comments URL: https://news.ycombinator.com/item?id=49728159 Points: 4 # Comments: 0

Hacker News 熱門81

Show HN: Pizza Bot – An inbox for AI agents that work in the background

Hi HN - long-time lurker (since 2012!), first time poster. Pizza Bot is a self-hosted desktop app for Mac, Windows, and Linux that runs AI agents in the background and exposes them through an email-like UI. Finished work shows up in Unread, and anything waiting on your approval shows up in Action. It's Apache 2.0-licensed, there's no signup and no telemetry, and you bring your own model provider: Anthropic, Amazon Bedrock, Google Gemini, OpenAI, OpenRouter, or a local model through Ollama. There are builds on the releases page, or you can run it from source. Pizza Bot started as an internal passion project I worked on with a small team at Amazon. The whole thing came out of my frustration at having to manually log CRM activities through a browser form. I built a simple REST API called "JoeBot" that connected to my authenticated browser session over CDP and filled out the form for me using Playwright. Then I hacked up a quick Obsidian plugin so I could trigger it from my local notes (no AI and no MCP servers involved). This caught on quickly. My fellow AWS Solutions Architect Igor Fil joined up with me, and we rebranded the project as "Pizza Bot," named after Amazon's two-pizza teams. We started seeing what other automations we could build. We found a GraphQL API we could query and hacked up some "recipes" to pull data out of the CRM to help with meeting prep. That worked great, and it was right around the time MCP servers seemed to be taking off, so we decided to expose Pizza Bot as an MCP server instead, so it would be available to AI tools through natural language. This was a decent solution for technical users, but the Account Managers who live inside our CRM system wanted something too. We decided to rebuild Pizza Bot as an Electron desktop app modeled after an email inbox, so it would be familiar to non-technical users and would run on both Mac and Windows. We also bundled internal MCP servers as OCI images and hosted them in Amazon ECR as an "addon marketplace" so users could install them with one click without having to set up Amazon developer tooling. The project took off organically and expanded outside of AWS into the wider Amazon organization globally. More than 2,000 people ended up using it for meeting prep, email drafting, Slack summaries, CRM logging, prioritizing their day, and web research. Once apps like Claude Cowork and Amazon's own Quick Desktop came out, we realized the real growth opportunity was outside of Amazon. Rather than try to rip out the Amazon-specific integrations, we rebuilt Pizza Bot once more as an open source project. We leaned on coding agents heavily, which is the only reason a team our size could pull off a full rewrite. I'm pleased to say it's finally public, and we're hoping to bring in community members and see where it goes. We'd like to do for knowledge workers what Claude Code and Codex have done for programmers. A couple of things to know up front. Most of what made Pizza Bot useful on day one inside Amazon came from that internal catalog of skills and MCP servers for Amazon's own systems, and none of it could come out with the app. So it ships thinner than the version those 2,000 people used, and building that catalog back up for tools other people actually use is where we need the most help. It's also a community project and not an AWS service, so there's no support or SLA behind it. The Windows and Linux builds aren't signed yet either. On the technical side, Pizza Bot is a server and a client. The desktop app bundles both, or you can point a client at a remote backend; personally, I self-host the server on my home network and reach it from my phone over Tailscale. The server owns the thread lifecycle and checkpoints state with DeepAgents and LangGraph, and clients rehydrate from it as needed, so you can disconnect mid-run and pick the thread back up from another client. Approval pauses outlive the session that created them and collect in an Action filter, so you can answer an hour later from a different device. The agent you talk to has a sandboxed QuickJS interpreter that can reach your filesystem only if you grant it a folder, but its main job is to delegate. Each subagent is a 1:1 mapping of a Skill, and an Activity bar shows that subagent and the tool calls it's making as it works. Memory is opt-in and stored as plain markdown files on your machine. Every tool call is explicit, including looking up a memory - we err on the side of transparency to reduce surprises. Tools come from MCP servers, and skills are ordinary SKILL.md files with a per-tool approval policy, so existing skills that don't require a code interpreter should still work. What I'd most like to hear about is where the app itself gets in your way, the kind of problem you can't fix by writing a skill or an MCP server. I'm around today to answer questions! Comments URL: https://news.ycombinator.com/item?id=49713894 Points: 15 # Comments: 5

arXiv cs.AI76

EvoOntology:面向数据智能体的自演化本体层

数据智能体旨在根据自然语言指令处理异构数据,包括表格、文件和数据库。然而,数据智能体面临着严峻的智能体—数据鸿沟:异构数据位于智能体之外,而智能体只能通过通用工具访问这些数据(例如列名和文件路径)。现有方法要么让智能体直接探索原始数据源,要么将人工构建的语义层注入提示词。然而,这两种方法既难以扩展到大型异构数据源,也无法适应不同的智能体行为。本文提出了 EvoOntology,一种面向数据智能体的自演化本体层。EvoOntology 将本体封装为一个由模式层、内容层和工具层组成的 MCP 服务器,使智能体能够在运行时主动查询和交互本体。为此,我们引入了一个用于自主构建本体的构建器智能体,以及一个自演化循环,通过归因引导的类型化编辑持续完善本体;这些编辑只有在经过基于骨干模型的成对评估后才会被接受。在三个广泛采用的数据智能体基准和四个 LLM 骨干模型上的实验表明,EvoOntology 始终优于强基线方法和现有语义层方法,有效弥合了智能体—数据鸿沟,并实现了与异构数据更高效的交互。代码:https://github.com/ruc-datalab/EvoOntology

Hacker News 熱門55

Show HN: Clawfight.ai MCP-driven agentic game play

How should agents interact with other agents? What happens when they rap or fight against each other with the pressure of human spectators? Clawfight.ai is an experiment to explore this space. This is my first post about it. The journey began on a beefed up machine I purchased with a decent GPU (5090). I installed claude code and set to dangerously skip permissions, enabled /rc and became completely submerged in the all-hours modern AI builder workflow. I stood up openclaw to see if I could have an agentic org drive this project. I spent a good amount of time on “openclaw ops”, babysitting 3 agents and trying to make them the best versions of themselves. They still do stupid things that cost me tokens. For the game render, I started out using Unreal Engine and allowing agents to remote control their players, but the quality just wasn’t there. I recently moved to doing near-real time video renders of the match and will bring UE back in for multi-agent games. Everything is AI generated. I’m fascinated by the future of realtime video generation and building out native MCP infrastructure. You can play directly from model provider apps (claude connector or openai plugin) and has fallback support for more basic HTTP clients. But the architecture and gameplay is MCP first. Tell your agent/app “go read clawfight.ai/agents.md and play” Comments URL: https://news.ycombinator.com/item?id=49658483 Points: 5 # Comments: 0

arXiv cs.AI78

CUA-Universe:一个面向混合 GUI+CLI 智能体的可扩展动态环境

computer-use 智能体已在 OSWorld 和 AndroidWorld 等基准上取得进展,但它们仍然主要通过 GUI 进行操作,往往会产生低效的轨迹。真实世界的计算机工作是混合式的,结合了视觉状态检查与精确、高吞吐量的命令行操作,因此有能力的智能体必须在共享的应用状态上协调这两种模态。然而,可扩展的混合环境仍然稀缺,因为要在真实应用上同时支持 GUI 和 CLI,通常需要针对每个应用进行大量手工工程。现有智能体在互补使用这两种接口方面也表现不佳:原生 CLI 智能体缺乏对涉及界面状态或布局任务的视觉感知,而原生 GUI 智能体在更适合通过命令执行的操作上效率较低。我们提出 CUA-Universe,这是一条可扩展的环境到数据流水线,可将真实桌面软件转化为混合 GUI+CLI 环境。App-Forge 将应用适配为可复现的 VM 和其发现、封装或生成的命令行界面,扩展到 16 个应用;Task-Weave 基于种子文件上的可复用操作,合成难度可控的多样化混合任务;Path-Steer 沿高效的混合路径引导 rollout,并收集经过验证的轨迹用于后训练。在这些数据上训练后,模型行为从低效的 GUI 交互和脆弱的 CLI 脚本编写,转向有效的 GUI+CLI 协同。我们的 9B 模型在 CUA-Verse 上同时提升了成功率和效率(Score +39.3 分;步数 -37%;tokens -60%),在 OSWorld 上(SR +16.8 分;步数 -57%;tokens -44%),以及在 OSWorld-MCP 上(Score +7.84 分;步数 -27%;tokens -30%)。CUA-Universe 为构建更有能力、更高效的 computer-use 智能体提供了一条可扩展路径。

Hacker News 熱門48

Show HN: Moadim.io – A scheduler for agents

Why can't we get an agent scheduler that supports all of the following: - git compatible - agent agnostic - 100% open source - os and system-agnostic - multi-runner support - support mcp/ui/http - unlimited routines/crons So I built one, moadim.io is a local Rust daemon you install in the target machine, give it a name and manage its routines via a Git repository, wants a new routine that send you a daily message from this machine? Create a pr and merge, have another routine that run every hour to pull the latest changes to the ~/.config/moadim folder. With more than 1,000 users, I define this project as almost "done" and ready for production. Me and thousand more people are use it in a daily manner. It currently supports Claude, Codex, Hermes, and Pi, and you are welcome to add your agent of choice as well because it's 100% configurable. You are welcome to have a look at the source code of the daemon in " http://github.com/moadim-io/daemon " Feel free to provide me with suggestions for more features around this topic. I don't want to branch out to new off road topics likt webhooks, this is a "done" software in the realm of agents schedulers that focus on cron-like work. Also feel free to start the github repository and open issues and PRs for your suggestions. Comments URL: https://news.ycombinator.com/item?id=49571537 Points: 3 # Comments: 0

arXiv cs.AI82

用于 AI Agents 的 Natural Language Interaction Protocol 和标准

AI agents 正在通过异构的 agent-development frameworks、AI models、tool interfaces、protocols 和 execution environments,越来越多地在各类组织中被开发和部署。为了实现其潜在的社会和商业影响,这些 agents 必须能够通过一种通用通信协议实现互操作。Natural Language Interaction Protocol (NLIP) 由来自公司和大学的研究人员与实践者共同开发,并由 Ecma International 标准化,针对这一需求定义了一种基于标准的 AI-agent interaction 应用层协议。NLIP 提供了一个轻量级的语义消息封装,可承载于现有传输之上,例如 HTTP/HTTPS、WebSocket 和 AMQP,同时允许支持 NLIP 的 agents 和 gateways 在 clients、agents、local context stores、ontologies、tools、enterprise services 以及异构底层协议之间进行适配。本文介绍了 NLIP 的动机和设计原则、其消息模型和传输绑定、安全设计考虑、参考实现、代表性应用、采用信号,以及它与 MCP 和 A2A 等新兴 agent protocols 的关系。

Hacker News 熱門43

Ask HN: Who is using MCP in production?

I’ve been following MCP since it first came out. It got a lot of attention early on, but I haven’t come across many people using it in production. I may simply have missed them. If you’re using MCP in production, what are you using it for? What advantages have you found over a normal API or direct tool integration or just CLI? Comments URL: https://news.ycombinator.com/item?id=49548600 Points: 15 # Comments: 26

Hacker News 熱門66

Launch HN: Mireye (YC S26) – 面向物理世界 AI 代理的基础设施

嗨,HN,我是 Ansh,Mireye 的创始人( https://www.mireye.com )。我正在构建 AI 代理用来对物理地点做决策的基础设施:面向任何美国地点的数据、增强、工具和信号,通过一个 API 和 MCP server 提供。 这里有一个演示视频: https://www.youtube.com/watch?v=haqO6UbUqU0 要试用的话,把 https://www.mireye.com/skills.md 粘贴到你的 agent 里,然后到 mireye.com 领取一个免费 key(5,000 credits,不需要信用卡)。文档在 https://docs.mireye.ai 。最快的上手方式是向 API 询问任何关于美国某个地点的问题。你可以拿一个你熟悉的地方来测试,先不知道答案,再根据你掌握的信息给它打分。 在 Mireye 之前,我一直在做建筑类 agents,自己也碰到了这堵墙:我的 agent 能推理任何网上的东西,却对脚下的土地一无所知。后来一家 Fortune 500 保险公司告诉我,他们的工程师也因为同样的原因放弃了 underwriting agents。前沿模型在被问到某个特定地点的具体问题时,仍然会胡编乱造。 我的第一个产品是一个小众的 site-screening 应用。客户拿他们熟悉的地点来测试,答案都站得住脚,但没人关心这个应用本身。他们想要的是底层引擎。使用情况也印证了这一点:目录中的 317 个字段里有 311 个都被查询过,而且没有哪个用例占绝对主导。所以我砍掉了应用,转而开始做基础设施。 Mireye 不是一个上面套了 API 的数据集,因为事实本身并不等于决策。一个 agent 会通过它完成整项工作:带引用的事实、把一个裸地址补全为所有者、英亩数、建筑物和附近供电信息的丰富数据、那些运营模型经常算错的工具,以及在某些情况发生变化时发出的信号,比如重新分区申请。数据、增强、工具、信号。 这些工具来自我观察 agent 失败的过程。我们在自己的基础设施上构建 agents,而同样的问题反复出现:agent 会凭肉眼估算距离而不是计算,给一个地址抓错地块,或者在批处理进行到一半时耗尽全部预算。每一种失败,最后都变成了 agent 可以调用的东西:确定性的几何和行车时间工具、地块解析、在任务运行前定价的 quote endpoint,以及把整套工作流打包起来的 skills,比如筛选一个地点或对一个地址做 underwriting。 最让我意外的是难点所在。每个来源都必须被采集(有时要按县逐个采集,而且要适配每个县发布的格式)、归一化到同一 schema、签订契约(它来自哪里、每个值意味着什么、多久刷新一次),然后还要永远保持最新。我们现在为 366 个字段运行这套循环,并通过一个索引以 multi-tenant 方式提供服务,而且每个来源的阻力都不同。Maryland 发布了一个数据集,标题就叫 “Hidden Property Owner Names.” 我在 North Carolina 提交了公共记录申请,因为没人索引 sewer mains。 更深层的问题是语义。两个县发布了同名字段,但含义不同。而最危险的值是 null。它是表示“这里没有 flood zone”,还是“这个县根本没绘制过 flood 数据”?把模型放到这个空缺面前,它就会用一个看起来合理的数字把沉默补上。所以我们把缺失也类型化了。每个字段都会返回 ok、absent 或 failed。客户告诉我,他们之所以信任它,正是因为这些拒绝。 最新的部分是按需索引。要是你请求一个我们还没有的字段,一个长期运行的 agent 就会去研究来源、收集数据、用 ground truth 做测试,然后把它编入索引,通常一天内就能完成。我会从这个帖子里挑几个字段请求,回头告诉大家它做了什么。 人们已经用它做出了我没预料到的东西:保险团队筛查 flood、wind 和 wildfire 风险的投资组合;一家 proptech 通过增强数据清洗杂乱的房源地址;一个 wellness brand 评估街角投放 poster spots 的得分;一家机器人公司寻找仓库;数据中心选址;无人机部署规划;某个城市的校车路线;以及人类贩运调查中的信号。我们的使命是把地球的每一寸都编入索引,让它像 web 一样可查询。 定价是公开的:免费层每月 5,000 credits,$19/月可得 25,000,$99/月可得 120,000,企业版定制。 我很想知道你正在构建的 agents 会在哪里接触物理世界。如果你能在一个你熟悉的地方运行 Mireye,并告诉我我们哪里做错了,我会更开心。 Comments URL: https://news.ycombinator.com/item?id=49552616 Points: 15 # Comments: 0

Hacker News 熱門77

发布 HN:Mireye (YC S26) – 物理世界 AI Agent 基础设施

大家好,HN,我是 Ansh,Mireye 的创始人。我正在构建 AI agents 用来对物理地点做决策的基础设施:针对任何美国地点的数据、增强、工具和信号,全部通过一个 API 和 MCP server 提供。 这里有一段演示视频: https://youtu.be/haqO6UbUqU0 要试用的话,把 https://www.mireye.com/skills.md 粘贴到你的 agent 里,然后到 mireye.com 领取一个免费 key(5,000 credits,无需信用卡)。文档在 https://docs.mireye.ai 。最快的上手方式是让 API 回答任何关于美国某个地点的问题。找一个你熟悉的地方来测试,把结果冷静地和你已知的信息对比打分。 在 Mireye 之前,我自己在做建筑 agents 的过程中也撞上了这堵墙:我的 agent 也许能推理任何线上信息,但对其脚下的地面一无所知。后来一家 Fortune 500 保险公司告诉我,他们的工程师也因为同样的原因放弃了核保 agents。前沿模型在被问到某个特定地点的具体问题时,仍然会胡编乱造。 我的第一个产品是一个小众的场地筛选应用。客户拿他们熟悉的地点来测试,答案表现不错,但没人关心这个应用本身。他们想要的是底层引擎。使用情况也印证了这一点:目录中 317 个字段里有 311 个被查询,而且没有哪一种用例占主导。所以我砍掉了应用,转而开始构建基础设施。 Mireye 不是一个上面套了 API 的数据集,因为事实本身并不等于决策。agent 通过它完成整个工作:带来源标注的事实、把一个普通地址增强成所有者、面积、建筑物和附近电力设施的地址信息、让运营模型容易出错的工具,以及当某些事情发生变化时的信号,比如重新分区申请。数据、增强、工具、信号。 这些工具来自对 agent 失败的观察。我们基于自己的基础设施构建 agent,而同样的事情不断出错:agent 会凭目测估算距离,而不是计算;会把地址对应到错误的地块;或者在批处理到一半时把全部预算耗光。每一种失败都变成了 agent 可以调用的东西:确定性的几何和行车时间工具、地块解析、在任务运行前给出价格的 quote endpoint,以及把完整工作流打包起来的 skills,比如场地筛选或地址核保。 最难的部分出乎我的意料。每个数据源都必须被采集进来(有时要按县逐个处理,而且每个县发布的格式都不同)、归一化到同一 schema、注明约束条件(它来自哪里、每个值是什么意思、多久刷新一次),然后永远保持最新。我们今天为 366 个字段运行这个循环,并通过一个索引以多租户方式提供服务,而且每个数据源的抵抗方式都不同。Maryland 发布了一个数据集,标题就叫“Hidden Property Owner Names”。我在 North Carolina 提交了公开记录请求,因为没人会索引下水管主管道。 更深层的问题是语义。两个县发布一个同名字段,但含义却不同。而最危险的值是 null。它的意思是“这里没有洪水区”,还是“这个县从来没绘制过洪水区”?把模型放在这个空白前,它就会用一个看似合理的数值把沉默填满。所以我们要为缺失建模。每个字段都会返回 ok、absent 或 failed。客户告诉我,正是这种拒绝回答的机制让他们信任它。 最新的部分是按需索引。如果你要一个我们还没有的字段,一个长期运行的 agent 会去研究来源、收集数据、用真实地面情况进行测试,然后把它编入索引,通常一天内就能完成。我会从这个帖子里挑几个字段请求,并回来汇报它构建了什么。 有人已经基于它做出了我没预料到的东西:保险团队用它筛查洪水、风灾和野火风险的组合资产;一家 proptech 通过增强清洗杂乱的房源地址;一个健康品牌用它给街角的海报点位打分;一家机器人公司用它寻找仓库;数据中心选址;无人机部署规划;某城市的校车路线;以及用于人口贩卖调查的信号。我们的使命是把地球上的每一寸土地都编入索引,并让它像 web 一样可查询。 定价是公开的:免费套餐每月 5,000 credits,$19/月可得 25,000,$99/月可得 120,000,企业版定制。 我很想听听你们正在构建的 agent 会在现实世界的哪些地方落地。如果你能用 Mireye 在一个你熟悉的地方跑一下,并告诉我哪里错了,我会更开心。 Comments URL: https://news.ycombinator.com/item?id=49552616 Points: 2 # Comments: 0

arXiv cs.AI78

CivBench:面向《文明 VI》中工具介导智能体的长时程基准

我们提出 CivBench,这是一个开源基准,用于通过 Model Context Protocol (MCP) 评估长时程、工具介导环境中的语言模型智能体。单个回合跨越 300+ 个回合,并在大动作空间上产生数千次工具调用,要求在部分可观测性下持续进行规划、状态监控和执行。该环境暴露了 76 个 MCP 工具,以及一层叙述模块,可将视觉游戏状态转换为结构化文本。 我们使用 CivBench 在 23 次有效运行中,刻画四个模型家族的智能体行为。该样本是试点研究,不是模型排名:在这一规模下,总体结果并不能可靠地区分不同模型。相反,我们提出了两个环境使其可测的接口层指标:Proactive Monitoring Rate (PMR),用于衡量智能体是否主动查询潜在的战略状态;以及 RAG@10,用于衡量结构化规划反思中陈述的承诺是否会在随后十回合内执行。 在共享 playbook 协议下,我们在多次运行中观察到两个一致模式。智能体对可用但需要显式查询的、与战略相关的状态监控不足:尽管 playbook 建议每 20 回合查询一次胜利进度,它们实际只会每 30 到 75 回合查询一次;并且在 20 场可检测到的失败中,有 7 场它们未能在游戏结束前的 20 回合警示窗口内进行查询。智能体也经常未能执行自己规划反思中陈述的近期承诺(不同模型的 RAG@10 在 48.2% 到 65.8% 之间)。这两种模式都出现在具备工具访问权限和明确指导的情况下,我们将其解读为在指令下的偏差,而非能力缺失。 我们在 https://github.com/lmwilki/civ6-mcp 发布环境、场景、日志、指标和分析流水线

arXiv cs.AI82

ASIL:用结构化状态和语义动作取代截图点击

强大的代码智能体可以执行脚本、调用工具并管理文件,但许多重要应用仍主要通过图形用户界面访问。我们认为,截图点击对于操作软件的智能体来说是一种低效接口:截图无法完整反映状态,而 GUI 操作脆弱、语义弱,并且与长程规划并不匹配。我们提出 ASIL(Agent-Software Interaction Layer),一种智能体原生接口,通过结构化 JSON 观察和可由代码执行的语义动作来暴露软件,并针对每个应用采用所能实现的最深访问路径。我们在 15 个应用上实现了 ASIL,并在一个包含 300 个单应用任务和 80 个多应用任务的基准上进行了评测。ASIL 在闭源模型上得分超过 80,且每个任务执行的动作少于 5 次。在修复后的运行时和 50 步截图预算下,同样的任务在截图点击控制下仅获得 6.6 和 26.6 的严格成功率,在更容易、可与 OSWorld 相比的区间上则提升到 15.0 和 53.3。与匹配任务上的应用原生接口相比,ASIL 比 LibreOffice 的 UNO API 高出 28-38 个严格分,但与 draw.io 的 MCP 内容契约仅持平。这种结构化模态也适合训练:小规模 SFT 将 Qwen3.5-2B 从 58.0 提升到 72.1,将 Qwen3.5-9B 从 66.6 提升到 80.4,而资源受限的 on-policy RL 进一步将它们提升到 74.4 和 82.2。

Hacker News 熱門

Show HN: Watches user sessions, finds bugs that matter, and fixes them

Hey HN, I’m Abhishek. I'm building Opslane, an open-source agent that identifies user-facing issues and investigates them. It only creates a PR if it can verify the fix. Demo: https://youtu.be/ccuOTYQMeYg Docs: https://docs.opslane.com At my last job at Robinhood, we used to do a quarterly bug bash. We would go through our Sentry backlog and try to fix as many of them as possible. We only fixed bugs we knew were reported by customers. We had hundreds of bugs, and Sentry’s default priority levels made no sense. After the bug bash, we would declare bankruptcy - select all remaining bugs and mark them as resolved. This problem has only gotten worse since coding agents have become more prevalent. So I started thinking: what would Sentry look like if it were built in 2026? To me, error trackers have two failure modes: 1. False positives: They show you thousands of errors, and you can’t tell the impact on the user 2. False negatives: Many user-facing issues don’t throw exceptions, so they go unnoticed. Opslane combines error tracking and session recording. And there is an agent that acts on both. To get started, you install the Opslane SDK. It captures everything the user did: errors, console logs, network requests, and session recordings. Opslane reduces false positives by ranking issues based on how many users are facing a particular issue. It also learns about your product by reading your code and watching your session recordings. False negatives are harder. Opslane reviews session recordings to spot frustration. They look for rage clicks, dead clicks, and abandoned forms. This recently caught a bug in an early customer’s onboarding flow: a dropdown that closed itself when clicked. No exception, no bug report. The recordings showed users clicking it, selecting nothing, and dropping out of onboarding. Opslane flagged it and the team fixed it. Three guiding principles when building Opslane: 1. Open Source: Self-host with one Docker Compose file. 2.Agent-first: I never want to open an error dashboard again. Opslane ships an MCP server, so you can ask "what broke for users this week" from Claude Code. You get back issues that need your attention and you drive the resolution. 3. It knows about your product: Opslane is continuously learning about your product. Every investigation begins with what it knows about your product. It’s early. Frontend apps work end to end today.I am currently focused on improving reliability and accuracy. Here is a link to our repo: https://github.com/opslane/opslane Would love to get feedback from folks on our approach to this problem! Comments URL: https://news.ycombinator.com/item?id=49466704 Points: 3 # Comments: 0

Hacker News 熱門70

WebMCP 挑战 – OpenAI

文章链接: https://openai.com/webmcp-challenge/ 评论链接: https://news.ycombinator.com/item?id=49455713 得分:3 评论数:0

Hacker News 熱門67

WebMCP:教你的网站与 AI 代理对话

文章链接: https://sreenathmenon.com/blog/2026-08-04-webmcp-teaching-websites-to-talk-to-ai-agents/ 评论链接: https://news.ycombinator.com/item?id=49450417 分数:16 # 评论数:6

arXiv cs.AI79

StarHarness:利用分层搜索演化面向企业环境的代理执行框架

我们提出 StarHarness,这是一个在保持模型权重固定的同时,为特定环境演化代理执行框架的框架。演化后的框架可以包含提示与任务表述、工具接口、技能、由 MCP 支持的提供方、子代理结构以及代理循环配置。StarHarness 通过根据基线失败行为对任务进行分层来构建一个紧凑的演化池,将提议者可见的搜索任务与提议者不可见的选择任务分离,并保留留出任务用于评估泛化能力。在 ITBench SRE、EnterpriseOps-Gym ITSM 和 AutomationBench Finance 上,在每个环境接受 4-12 项更改后,框架演化使完整基准性能相较默认框架提升了 20-35 个百分点。这些提升在未参与演化的任务上依然存在,并且无需重新演化即可在 GPT 和 Qwen 模型家族之间迁移。轨迹分析将这些改进归因于接口修复、环境约定以及压缩搜索空间的运维知识;在若干设置中,这还带来了更少的假阳性诊断和更短的执行轨迹。因此,StarHarness 提供了一种实用方法,用于减少工具丰富的企业任务中持续存在的模型与环境不匹配。

arXiv cs.AI79

AID-Guard:用于委托代理效应的有状态授权

使用工具的 AI 代理会将委托任务转化为提供方效应,但授权往往止步于准入,而提供方状态、交付、重试和恢复仍在演化。请求可能在提交前发生变化,或者响应丢失可能导致替代请求从一次批准中产生第二个效应。我们提出 AID-Guard,一种有状态的授权到效应闭合协议。它会在提交时重新验证已批准的请求和提供方状态,在存在歧义时保留一个预留,并且只有在出现终止结果或带有交付栅栏的经认证无效应之后,才允许释放或一个后继。对于受支持的提供方契约,一个预留在重试和恢复过程中最多产生一个效应。据我们所知,这是首个经过评估的代理授权协议,将这些控制统一到一个生命周期中。 我们实现了一个 Python/SQLite 原型。在声明的回环 MCP 域中,13 次实时变更未造成任何未授权的提供方效应,三个并发历史是可线性化的,并且证据包支持公开验证和重放。全部 210 次 Stripe 提供方契约试验均与预先声明的结果一致。在 Stripe 和 Resend 上,40 个终止化后继调度、30 个重叠竞争以及 10 个崩溃恢复调度均在没有重复效应的情况下完成。在提议者完全被攻陷的情况下,AID-Guard 阻止了 44/44 次攻击,并接纳了 44/44 个匹配的合法提议。其严格的精确清单配置使良性效用降低了 35.4 到 43.8 个百分点;类型化前沿在未观察到不安全效应的情况下恢复了 9–10 次完成。组合研究阻止了 20/20 次准入后生命周期攻击,并保留了 8/8 次有效或精确重试执行。结果支持在所评估的效应路径清单、提供方契约和故障调度下进行授权到效应绑定。

Hacker News 熱門83

新的 MCP 路线图

文章 URL: https://blog.modelcontextprotocol.io/posts/mcp-roadmap/ 评论 URL: https://news.ycombinator.com/item?id=49399591 积分:4 评论数:1

Hacker News 熱門46

Show HN: OzBrain, a shared brain for knowledge between agents and your team

I think agent-first chat interfaces will be a primary software modality and busy dashboard/UI will go away. I’m not sure who exactly wins it, but I want my knowledge to grow/go with me. A lot of the “knowledge” ie research, analysis, reasoning will be done by agents as the primary user. Our current notes tools & tasks management systems were built for humans… I don’t care what the 17th thing on my bug backlog is. I want to conduct agents that can execute for me and do great work. What I built OzBrain to do: + Create a central place for agent reasoned knowledge to live + Be agnostic about what apps/agents connect to it + Capture everything and track it so I can audit it + Enable teams, collaborators or partners to share brains + Handle conflicts so many agents in the same article doesn’t blow up + Refactor knowledge into more token friendly chunks and map the index well + Close the knowledge loop so new thinking supersedes old thinking across the corpus. Don’t erase, depreciate and link + Keep user data safe and secure ++ Be easy enough to use that you don’t have to have any technical knowledge Some among us will always build their own custom solutions, but there are millions of tech professionals and small business owners that will use agents heavily and need a solution. So I’m trying to build that. Isn’t this like gBrain? Yes, similar. I think it’s like AWS vs Vercel. AWS is very powerful, configurable, and useful if you’re technical and want to invest the time into really fine tuning your system… but if you just want your web deploy/hosting to just work and be easy to deal with you use Vercel. // WHY I MADE IT I’ve been enjoying getting back to my technical roots, as I lost my coding skills more than a decade ago, but with AI I can focus on the system and the product in partnership with agent coding workflows. I recently built a Voice AI for older people. To build it I created an agentic engineering workflow (feel free to rip that up as I’m always looking to improve systems: https://ozbrain.com/resources/eng-flow ) My approach with coding agents is trust but verify, and I’m trying to replace the parts where a human would review with an adversarial or specialized agent who would give a better answer/review. I have workflows that will go high level task to shipped PR running in Claude cloud sessions. I use Claude Code locally and Cursor when I want a tighter loop on doing visual work like UI or layout. And Codex to either load balance usage for TokenThriffting or when I want a different llm to think thru something. It was a pain in the ass passing .md files around and keep track of which version was the most recent, so I built a hosted .md storage right in Supabase and any of my agents already have Supabase access. This let me build a solid, scalable, secure voice AI from my phone at the gym. All my agents have access to our knowledge, can write to it, update and refer to it as we build and improve the product and the systems we use. Out of 75 founder friends I asked about how they manage shared knowledge, 26 built their own custom knowledge systems… Obsidian vaults with 7k files synced through a VPS, markdown repos behind their own MCP servers, cron jobs stitching Supabase to a skills file… each a different Frankenstein they have to maintain. 32 said they felt the pain of moving static files around but didn’t have any solution for it. So I rebuilt my brain better and used it to build it. // HOW YOU CAN HELP Would love to have you try it out. The maintenance loop is still in alpha so not running it on customer data yet. If you built your own brain I’d love to hear how you did it. What criteria was most important for you in its design & function. If you are tired of shuffling .md files around I’d love to have you try out OzBrain and to give feedback, just ask your agent to put it in the shared bugs & features brain! Cheers! Bubs.co Comments URL: https://news.ycombinator.com/item?id=49394827 Points: 8 # Comments: 1

arXiv cs.AI72

MidTool:用于智能体式工具使用的中期训练数据合成

中期训练日益被认为是塑造大型语言模型能力的关键阶段。近期研究表明,有针对性的中期训练可以增强数学和科学等推理密集型能力,也可以提升软件工程场景中的智能体式能力。在这项工作中,我们研究了一种与之并行但探索较少的智能体式能力:通用工具使用。我们提出 MidTool,这是一个面向智能体式工具使用中期训练的开放语料构建流水线,将大规模网页、PDF 和代码数据与来自真实世界工具 API、MCP 技能以及基于文档的工作流的合成监督相结合。MidTool 旨在教会模型如何识别工具可供性、从上下文中定位参数、组合工具调用工作流,并从信息不完整的情况下恢复。我们在 MidTool-Mix 上对 Qwen3-4B-Base 和 Qwen3-8B-Base 进行中期训练,然后应用后续后训练,包括监督微调和强化学习。与基线相比,MidTool-Mix 在 BFCL、tau2-Bench 和 MCP Universe 上,在 SFT 和 RL 两种设置下都能持续提升下游性能。这些结果表明,通用工具使用与其他重要的 LLM 能力一样,受益于专门的中期训练,而不是完全留给后训练。

Hacker News 熱門

Launch HN: Vendo (YC S26) – Let users build features on top of your product

Hi HN, we’re Yousef & Nour, founders of Vendo ( https://vendo.run ). Vendo lets users create new features inside the software they already use. A user describes the dashboard, workflow, or small app they need, and Vendo builds it on top of the product’s existing data, API, and interface. Demo: https://www.youtube.com/watch?v=VdpHehY64ls We built Vendo because every SaaS eventually faces the same problem: every customer needs something slightly different. One wants a new report and another needs a workflow that only makes sense for their team. These requests either sit on the roadmap, become one-off engineering work, or force the customer into spreadsheets and external tools. We wanted the user to be able to create the missing feature themselves, without leaving the product. Here is how it works: - npx vendo init reads the product's API surface, theme, routes, and more. These are used so that the apps Vendo creates (1) look on-brand and native and (2) have the ability to read data and perform actions directly through the company's API - When a user asks for a feature, we have a custom Vendo harness that writes a React component with a bunch of Vendo add-ons and guardrails (ex. ability to make calls to the host API + our component library). Every save is compiled, type-checked, run against real API responses, and rendered before the user sees it. We just released a benchmark and write-up here with more info for anyone interested: https://vendo.run/blog/generating-product-ui-measured - We use QuickJS to make sure that anything the agent creates is sandboxed and can't mess with the company's site. Vendo compiles the component and runs it with Preact inside a QuickJS VM with no access to the DOM, network, or clock. The VM returns a UI tree, which the host renders using the product’s registered components. When the user clicks something, QuickJS emits a tool call; the host executes it through Vendo’s guard and passes the result back into the same VM, preserving the screen’s local state. There's a lot of generative UI right now: streaming developer-written components into a chat (Vercel AI SDK, CopilotKit, Thesys), or rendering your app inside someone else's assistant (OpenAI Apps SDK, MCP Apps). We differ on two things. Vendo lives in your product and acts through your API as the signed-in user, so what it makes is durable: real apps users keep, pin, and run on triggers while they're away, and not components that are merely confined to a chat. Plus, it's not capped at putting together a bunch of prebuilt components: the agent can build arbitrary apps, from a quick dashboard out of your own components to real custom code running in a sandbox, and either way data only ever comes from tool calls to your API. Here are some things customers are using Vendo for today: - Letting their users create custom dashboards and reports. These are mainly UI-based and focused on letting the user see the exact graphs and metrics they care about - Letting their customers create recurring automations. A big thing as well that has been used for these automations is the fact that we connect to external connections, so users have been automating many of their inter-tool workflows (ex. an automation that sends a slack alert based off of something in the product) - B2B customers letting their customers customize the product with specific business logic. Often this is simple things like an extra field on a form, or an extra permission, but it is hard for a business to keep up with them otherwise. - Creating and sharing custom dashboards/apps across an organization. Since the apps Vendo creates are durable, they can be shared, reused, and forked (which can’t be done with many of the other in-chat generative UI solutions) We've spent a lot of time thinking about how AI and agents will change the way people consume software. We think the answer is personal(ized) software: you see the UI you need to see, you tell an agent exactly what you need, and the product molds to how you work. The key insights that have enabled the product to work are: - A rule in code always beats a rule in a prompt. - Invent as little syntax as possible. Generation got faster and more reliable when the output looked like what models already know (JSX-shaped markup) instead of a clever custom format. - Deterministic beats model wherever you can get away with it. Theme extraction is pure static analysis, and a remix starts as a copy of your component, no model call. Vendo is completely open-source (Apache-2.0) and can be self-hosted, so feel free to check out all the source code here: https://github.com/runvendo/vendo . Would love you to try it out and give us your feedback: https://docs.vendo.run/ . Or if you’re a company looking to embed Vendo in your product feel free to book a call here: https://cal.com/team/vendo/intro-call Comments URL: https://news.ycombinator.com/item?id=49376038 Points: 6 # Comments: 0

Hacker News 熱門71

发布 HN:machine0 (YC S26) – 来自 CLI 的持久 CPU 和 GPU VM

HN 大家好!我是 Barnaby,machine0( https://machine0.io )的创始人。我正在构建一个用于长周期代理计算的 CLI:`machine0 new mybox` 会为你的代理提供一台持久的云端 VM,按分钟计费,价格从 $0.013/hr 起,最高可达 60 vCPU / 240 GB RAM,并支持 GPU(H100s、H200s 等),VM 级别正常运行时间为 99.99%。代理可通过 CLI 或 MCP 自主运行。 演示: https://www.youtube.com/watch?v=gyllkZ0M04E 代理工作负载正在从短暂运行转向始终在线。一个处理复杂功能的编码代理会运行 6-8 小时。由代理编排的训练和 RL 运行需要数天。OpenClaw 和 Hermes 24/7 运行。随着你并行运行更多任务: - 资源:大型代码库上的几个代理就会耗尽 RAM 和 CPU。模型训练和 RL 需要你没有的 GPU。 - 安全:在你的个人机器上使用 `--yolo`,只需要一次提示注入就可能导致凭证被外泄。 - 可用性:合上笔记本电脑,代理就会在任务中途死掉。 - 隔离:你和你的代理实际最低需求之间没有清晰边界。 machine0 为每个代理提供自己的计算机。它是一个足够简单的 CLI,人类和代理无需阅读文档即可使用: `machine0 new mybox` 会创建一台可 SSH 连接、带静态 IP 和 HTTPS 端点的 VM。始终在线(VM 级别正常运行时间 99.99%),直到你将其关闭。 - 按分钟计费。1 vCPU / 1 GB 为 $0.013/hr,最高可达 60 vCPU / 240 GB,另有从 RTX 4000 Ada 到 8×H200 的 GPU。 - 暂停、快照和恢复。让你可以轻松暂停工作,之后再回来继续。也可以制作一个黄金主镜像,用于为机群批量生成克隆。 - 块存储。持久卷(从 10 GB 到 16 TB),你可以用直观的语法管理:`--yolo` 并将其挂载到你的 VM。 - Profiles。凭证、MCP 连接、提示词和环境变量的组合包,在 VM 创建时注入。因此每个代理只获得你选择的能力,除此之外什么都没有。 - 代理自助服务。把 CLI 或 MCP 服务器交给 Claude、Codex 或 OpenCode,它就能管理自己的机群:为一次构建启动一台机器,创建快照,然后销毁。 - 可复现构建。使用 NixOS flakes 或搭配 Ubuntu 的 Ansible playbooks。 人们今天如何使用它? - 代理机群。人们运行一个试点代理来界定工作范围,并将其委派给子代理,每个子代理都在自己的 VM 上:用试点代理规划项目,工作代理实现它并提交 PR。一个客户一次运行数百台机器,通过 CLI 启动和销毁。 - 模型优化和 RL 环境。ML 团队使用 machine0 来进行由代理编排的 RL 环境和模型优化工作。一个客户在 60 vCPU 机器上运行 RL 环境,一次持续运行数天;另一个客户保留一台已暂停的 H100,并在夜间让代理使用它来反复优化推理速度。 - 产品基础设施。一个客户不是自己使用 machine0,而是将他们的产品构建在 machine0 之上:每个用户会话都会从他们自己代理运行时的版本化镜像中获得一台全新的 XL 机器。他们已经发布了数百个该镜像版本,并启动了数千台机器,其中大多数只存活两分钟。 底层是什么? 每台机器都是完整的 KVM 虚拟机,不是容器或沙箱。你获得的是暴露给 guest 的真实 GPU,带有其实际驱动;可获得内核级访问权限(加载你想要的任何模块或驱动);你和硬件之间没有 syscall 拦截层。技术栈本身刻意保持朴素:TypeScript、Postgres、Redis。我们非常重视安全性、可靠性和性能,使 machine0 非常适合持续的计算密集型工作负载。 关于我 我从事云基础设施建设大约 15 年了。我曾在 Imperial College London 攻读云资源分配方向的博士,后来退学;之后作为 Upflow (YC W20) 的联合创始人兼 CTO 工作了六年,在 ARR 达到七位数的整个过程中亲自负责 DevOps、基础设施和安全,因为这些事情风险太高,不能委派。machine0 最初是我为自己做的工具,我就是自己的第一个用户 :) 请求 希望你能试用并给我们反馈(见下方)。或者,如果你是一家公司,正在为软件工厂、模型训练或 RL 环境寻找计算资源,欢迎联系 barnaby@machine0.io # 安装 machine0 $ curl -LsSf https://machine0.io/install.sh | sh # 创建一台机器并通过 ssh 登录 $ machine0 new myvm $ machine0 ssh myvm 评论 URL: https://news.ycombinator.com/item?id=49348136 点数:3 评论数:0

OpenAI Blog90

推出 gpt-realtime 和 Realtime API 更新

我们正在发布一款更先进的语音到语音模型,以及新的 API 功能,包括 MCP 服务器支持、图像输入和 SIP 电话呼叫支持。