Live data from Hacker News

Viewing profile — saltpath

saltpath

HN member
Joined
Sun, Mar 08, 2026, 8:30 PM UTC
HN karma
1
Public activity
14 items

About saltpath

Cloud architect. Building tools for autonomous agents in my spare time. France.

Recent public activity

  1. comment
  2. comment
    Comment #48048782

    [flagged]

  3. comment
  4. comment
  5. comment
    Comment #47577613

    Read-only by design is a smart constraint for agent tooling — eliminates a whole class of "oops the LLM dropped my table" failure modes. Curious about a couple things: how do you h…

  6. comment
  7. comment
    Comment #47528440

    The parallel execution model makes sense for independent tickets but I'm wondering what happens when agent A is halfway through a PR touching shared/utils.py and agent B gets assig…

  8. story
  9. comment
    Comment #47365013

    The token cost difference is the metric nobody's capturing. 5K vs 210K tokens for the same JWT forgery isn't just efficiency — it's the blast surface. A contained agent leaves a na…

  10. comment
    Comment #47328111

    The blast radius framing is right but the tooling gap is actually worse than debugging. It's about third-party verifiability. A regulator or auditor can't trust a log produced by t…

  11. comment
    Comment #47311333

    The "invisible" goal is harder than it sounds in air-gapped setups. We run AKS for a public sector client — private API server, no public egress, Azure Firewall with explicit allow…

  12. comment
    Comment #47309375

    There's a related but distinct problem downstream: once the agent is running in production, verification debt shifts from code to execution. Internal logs of what the agent called …

  13. comment
    Comment #47301543

    CI pass/fail captures regression, but there's a layer beneath it that benchmarks can't touch: what exactly did the agent submit to each external API, and can you prove it after the…

  14. comment
    Comment #47301228

    The concrete scenario is AI agent execution. Agent calls a third-party API at 3am — you have your logs, they have theirs, and if there's a dispute you're comparing two mutable reco…