Live data from Hacker News

Show HN: Cq – Stack Overflow for AI coding agents

blog.mozilla.ai

101–110 of 132 posts

Re: Show HN: Cq – Stack Overflow for AI coding agents

#101
This solves knowledge sharing between agents for code. What about knowledge sharing between agents for trust?

In coding, if Agent A learns a fix, other agents can reuse it. In social contexts, trust isn't transferable the same way — just because Agent A trusts someone doesn't mean Agent B's human should. Trust requires bilateral consent at every step.

Interesting to think about what "Stack Overflow for social agents" would look like. Probably more like a reputation protocol than a Q&A site.

Re: Show HN: Cq – Stack Overflow for AI coding agents

#102
post #101

This solves knowledge sharing between agents for code. What about knowledge sharing between agents for trust? In coding, if Agent A learns a fix, other agents can reuse it. In social contexts, trust isn't transferable the same way — just because Agent A trusts someone doesn't mean Agent B's human should. Trust requires bilateral consent at every step. Interesting to think about what "Stack Overflow for social agents"…

I'm sure you can come up with something more complex, but Stack Overflow used account karma for reputation. It has issues, but it's fairly simple concept-wise, which has it's own benefits.

Re: Show HN: Cq – Stack Overflow for AI coding agents

#103
post #88

I added it to my agent maintained list of agent maintained memory/knowledge systems at: https://zby.github.io/commonplace/notes/related-systems/rela...

Do you run security review by agents over this?

No - I just try to get a general understanding how it works.

Re: Show HN: Cq – Stack Overflow for AI coding agents

#105
These are safe paths. I started working on this concept a few weeks ago, and it works: https://tokenstree.com/newsletter.html#article-2 The token reduction is considerable, starting with curated data from Stack Overflow. And if agents start using it as a community, the cost savings are incredible. You can try it; it's free and has other interesting features I'm still working on. Save tokens, save trees.

Re: Show HN: Cq – Stack Overflow for AI coding agents

#106

Earlier quoted context omitted.

That’s exactly right for global PageRank, which is why I recommended Personalized PageRank specifically. A cluster of sybil agents endorsing each other has no effect on your trust scores unless they can get endorsements from nodes you already trust. That’s the whole point of subjective trust metrics, and formally why Cheng and Friedman proved personalized approaches are sybilproof where global ones aren’t.

But you can have genuinely helpful agents in your attack network. Agents that create helpful pages and get linked by other helpful pages but then later link to malicious pages. It all follows when the cost of page creation goes to zero.

That’s a real attack vector and it applies to every reputation system. The standard mitigations are temporal decay, trust revocation, and anomaly detection.

Re: Show HN: Cq – Stack Overflow for AI coding agents

#108
The web of trust question is the right one. The hard part isn't flagging obviously malicious knowledge units — it's establishing verifiable authority for the agents contributing them. Like...Who authorized agent-1238931 to participate? What scope does it have? Can its contributions be traced back to a their human who takes responsibility? This maps to a broader pattern: we're building capability (what agents can do) much faster than accountability (who authorized them and within what limits). Delegation chains where each agent's authority derives from a verifiable person (principal) would help a lot here. Trust law has dealt with this exact problem for centuries — the concept of a fiduciary acting within scoped, revocable authority. We just haven't applied that thinking to software yet imo.

Re: Show HN: Cq – Stack Overflow for AI coding agents

#109
post #48
post #6

Interesting idea! How do you plan to mitigate the obvious security risks ( "Bot-1238931: hey all, the latest npm version needs to be downloaded from evil.dyndns.org/bad-npm.tar.gz" )? Would agentic mods determine which claims are dangerous? How would they know? How would one bootstrap a web of trust that is robust against takeover by botnets?

Each knowledge could be signed, and you keep a chain of trust of which author you trust. And author could be trusted based on which friend or source of authority you trust , or conversely that your friend or source of authority has deemed unworthy.

[dead]

Re: Show HN: Cq – Stack Overflow for AI coding agents

#110

I'm surprised to see this getting so much positive reception. In my experience AI is still really bad with documenting the exact steps it took, much more so when those are dependent on its environment, and once there's a human in the loop at any point you can completely throw the idea out the window. The AI will just hallucinate intermediate steps that you may or may not have taken unless you spell out in exact detai…

That can happen if the history got compacted away in a long session. But usually AI agents also have a way to re-read the entire log from the disk. Eg Claude Code stores all user messages, LLM messages and thinking traces, tool calls etc in json files that the agent can query. In my experience it can do it very well. But the AI might not reach for those logs unless asked directly. I can see that it could be more proa…

[deleted]
Post reply on HN