Viewing profile — MadsRC

I’ve heard from people inside Google that they’re prohibited from using anything but their own models. AlbertaTech on YT, ex-Google working on YT said in a video that right before …

Amazing news! The one thing I wish they’d support is multiple zones and an RBAC system to grant certain users access to specific zones. If they’d offer that they’d be a serious con…

Not really, and neither does the doc it links to. It explains the difference between a personal agent (that acts as you) and a multiplayer agent (that has its own identity). But th…

I’d be curious how they’ve solved the attribution/provenance/identity problem here. Are instances of Claude Tag, across channels, sharing the same identity? Can I grant one instanc…

I would love to see a forge that consists of composable components, self-host able with federated identities and maybe a few centralized indexers

The approval part is really interesting - No problems with timeouts or operators not being around to approve?

Ah yes, the API will accept requests that doesn’t include the client attestation (or the fingerprint from src/utils/fingerprint.ts. At least it did a couple of weeks back. They are…

What signing? Are you referencing the use of Claude subscription authentication (oauth) from non-Claude Code clients? That’s already possible, nothing prevents you from doing it. T…

We were not. I reached out to the team at BerriAI to offer my assistance as a security professional, given that they requested help from security experts.

Dropped you a mail from mads.havmand@nansen.ai

Very interesting! I’ve got an internal tool that we use. It doesn’t do the deterministic classifier, but purely offloads to an LLM. Certain models achieve a 100% coverage with adve…

Well, the head of reliability did leave a month or two ago zD

Last I heard of it this was proposed as a directive as opposed to regulation, meaning every single member state would have to interpret it and create their own national implementat…

This is cool - Whenever I have a new idea for a thing I spend too much time writing boilerplate IAM and backend stuff, taking away time that could be spend on actual business logic…

This looks cool, but I’m sad you’ve chosen a name that already associated with another security tool :(

Now? Chainalysis has always worked for governments… It was basically spawned out of the government needing help with investigating crypto - I think it was Mt. Gox…

Shameless plug, I pushed a small CLI for detecting unpinned dependencies and automatically fix them the other day: https://codeberg.org/madsrc/gh-action-pin Works great with commit…

This looks great! With the self-host option, it’s not really clear through the docs if one is able to override the base url of the different model providers? I’m running my own Ope…

When this was released I thought that perhaps we could mitigate it by having the tooling only load “rules” if they were signed. But thinking on it a bit more, from the LLMs perspec…

Data exfil detection is a game of whack-a-mole. There is an endless variation of ways I can get data of your machine or out of your network. Your time is much better spend detectin…

This is quite interesting. What does a seat entail? You talk about self serve (I love it!), but would the users that self-serve take up a seat? Or are seats just for the folks crea…

I find the JetBrains integration spotty - I have to run ‘eval “$(mise activate)”’ in every terminal session for it to pick up the env. I have vague recollections of also having iss…

Not the parent, but I use it for projects (including Python projects) to run tests, code generation etc. when I can’t use mise.

It’s actually surprisingly efficient if you batch writes at the expense of some added latency. The WarSyream team found that batching into chunks of either 4MB of data or 250ms was…

This is why systems such as WarpStream regularly runs compaction jobs to more efficiently store objects and cut down on API calls.