Sunday, November 1, 2026
-
Prospero: skeeto's native C++ coding harness with a headless engine
Chris Wellons, who blogs as nullprogram, released Prospero, a coding agent harness written in C++ with a Dear ImGui interface instead of a web stack. The same executable can run headless on another machine over SSH or WSL while the GUI attaches from the desktop, and agents get subagents, Git worktrees, MCP, skills and desktop control. No model provider is configured out of the box: it speaks the OpenAI Chat Completions API and Anthropic's Messages API, so it works with llama.cpp, OpenRouter or the hosted APIs.
Heat · Hacker News, 189 points and 121 comments; GitHub repo at 22 stars when checkedWhat people foundThe design rule is that every operation has a deadline: unanswered permission prompts are denied on timeout and slow shell commands turn into background tasks. Wellons says the permission system only reminds the agent of your wishes and will not stop a malicious one, so real isolation means a container or a separate device. He also claims it uses about two orders of magnitude fewer resources than other harnesses, without a published benchmark. A Claude subscription cannot be used, only API access.Learn it15 min · 5 steps
Key ideas
- Coding harness
- The program around a language model that sends prompts, runs tools like the shell, applies edits and asks for permission.
- Headless engine
- The agent loop runs without a window on a server or in the background, and a separate GUI connects to it to watch and steer.
- Operation deadline
- Every wait has a timeout, so a stuck prompt or command never blocks a long agent run forever.
Steps
- Read the nullprogram post of 2026-10-31 announcing Prospero, focusing on the sections about deadlines and permissions.
- Open the GitHub README and docs/configuration.md to see how endpoints, models and roles are declared in prospero.ini.
- Skim docs/remote.md to understand how the engine runs over SSH or in the background after the window closes.
- Compare these choices with the harness you already use: where does it wait on you, and what does it do when a command hangs?
- Self check: why does Wellons say permissions are not a security boundary, and what does he recommend instead?
Try it30 min · 6 steps
You need: Linux, macOS or Windows with w64devkit, CMake 3.25 or later and a C++20 compiler with#embedsupport; either a local llama.cpp server and a small model, which needs no API key, or an OpenRouter, OpenAI or Anthropic API keySteps
- Clone skeeto/prospero and build it with
cmake -B buildfollowed bycmake --build build, which fetches pinned dependencies at configure time. - Start an OpenAI compatible server locally, for example llama.cpp's server with a small instruct model, or set an API key in an environment variable.
- Edit
~/.config/prospero/prospero.inifollowing docs/configuration.md: add an endpoint section with its url and a key such askey = env:ANTHROPIC_API_KEY, then set the default model. - Inside a throwaway Git repo or a container, run
prospero .to start a session rooted in that directory. - Ask the agent to fix a small failing test, then give it a command that sleeps longer than the timeout and watch it become a background task.
- Leave a permission prompt unanswered and confirm it is denied when the deadline passes.
Small angles to try
- Compare memory use of Prospero and your usual harness on the same task with your OS process monitor.
- Try two subagents in separate Git worktrees on one repo and review how their changes merge.
- Point the same config at a local model and a hosted model and compare edit success.
-
LOWN: diffusion VLMs only need to look at the image on some steps
KAIST AI researchers propose LOWN, a decoding method for diffusion vision language models such as LLaDA-V that needs no training and no tuned threshold. They found that removing the image changes the token being unmasked at only about 22.8% of decoding steps on average, so LOWN skips the costly image pass when a cheap text only check certifies the answer would not change. Across ten benchmarks it keeps 99.6% of LLaDA-V's score while using 35.3% of the decoding FLOPs on average.
Heat · Hugging Face Papers, #1 Paper of the Day for 2026-10-30, 98 upvotes when checkedWhat people foundVisual tokens make up 89 to 97% of the input on the studied benchmarks, which is why skipping them pays off so much. The authors say LOWN works with key value caching and stacks with visual token pruning, so it can sit on top of existing speedups.Learn it15 min · 5 steps
Key ideas
- Diffusion language model
- Instead of writing left to right, it starts from masked tokens and unmasks them over many refinement steps, running the full model at every step.
- Visual tokens
- Image patches turned into tokens by a vision encoder, which in these models make up most of the input length and most of the compute.
- Certificate guided routing
- A cheap check decides per step whether the expensive path, here attending to the image, could change the result, and skips it when it cannot.
Steps
- Read the abstract and the 22.8% finding on the Hugging Face Papers page for 2610.36671.
- Look up how LLaDA style masked diffusion decoding picks which token to unmask at each step.
- Open the LOWN project page or paper figures to see when the text only prediction is trusted and when the image pass runs.
- Think about why this saves more in a diffusion VLM than in a normal autoregressive VLM that caches the image once.
- Self check: if the image changes the unmasked token at only a small share of steps, what exactly does LOWN compute to decide that a step is safe to skip?
Try it30 min · 5 steps
You need: Linux, Python 3.11, PyTorch with CUDA 12.6 and one NVIDIA GPU with 32 GB or more VRAM per the README; public LLaDA-V and SigLIP2 weights download on first run; no API key neededSteps
- Clone the repo with
git clone https://github.com/hyeon9698/LOWN.gitand enter the folder. - Run
bash setup.sh, which creates a local.venvwith the requirements. - Run
bash evaluate.sh --gpu 0to compare baseline and LOWN on the included image. - Open
outputs/result.jsonand compare the two answers and the reported FLOPs. - Try your own picture with
bash evaluate.sh --gpu 0 --method lown --image /path/to/image.jpg --prompt "Describe this image."
Small angles to try
- Use images where fine detail matters, such as small text or charts, and check whether LOWN's answer drifts from the baseline.
- Read
lown.pyto find where the skip decision is made and log how many steps actually used the image. - Measure wall clock time on your GPU next to the analytical FLOP numbers.
-
GPT-5.6 Sol beats Factorio in peaceful mode in 13.5 game hours
Ryan Madden had GPT-5.6 Sol play Factorio from Codex at a low thinking level, through a small Python library that applies the limits a human player has, such as reach and fog of war. It launched a rocket in peaceful mode, with no biters, after 13.5 hours of game time. Earlier GPT-5.5 attempts failed because that model never used transport belts.
Heat · Hacker News, 170 points and 181 commentsWhat people foundMadden writes that the rocket launch came only through significant manual effort: scaling problems appeared later than he expected and slowed Sol badly, and it covered for production lines it never connected by carrying supplies between factory areas by hand. Several HN commenters made the same point, that most items went into chests instead of onto belts. Planning a system that keeps scaling is still where the agent breaks.Learn it15 min · 5 steps
Key ideas
- Long horizon agent task
- A goal that needs hours of dependent actions, where early design choices decide whether later stages scale.
- Human limits in a game API
- Restrictions like reach and fog of war stop a program from acting anywhere on the map at once, so the model faces the same constraints a player does.
- Thinking level
- A setting that controls how much hidden reasoning the model does per step, trading cost and speed for planning quality.
Steps
- Read Ryan Madden's post on ryanmadden.net and watch the linked timelapse.
- Note where progress stalled and what the author calls manual effort.
- Skim the Hacker News thread for the comments on belts versus chests and on hidden information.
- Map the failure onto software work: a codebase that works at small scale but was never designed to be extended.
- Self check: why does hand ferrying supplies count as a planning failure even though the rocket still launched?
Try it30 min · 5 steps
You need: Python 3 and a coding agent you already use, such as Codex, with its usual API key or subscription; Factorio is not needed for this versionSteps
- Write a tiny text based logistics simulation in Python: a few resource nodes, machines with recipes, and an inventory that the player can only move a small amount per turn.
- Expose it through a few functions, for example place machine, connect machines and carry items, and make carrying slow so connecting things pays off.
- Give your coding agent the goal of producing a target number of end items and let it run for a fixed number of turns.
- Log every action and count how often it carries items by hand versus building connections.
- Raise the target tenfold and see whether the agent redesigns its layout or keeps ferrying.
Small angles to try
- Run the same setup at a low and a high thinking level and compare actions per end item.
- Hide part of the map until explored, a simple fog of war, and see how planning changes.
- Compare two different models on the same seed.
-
bootgpt: a tiny language model that runs from a PC boot sector
bootgpt is a character level neural network that runs in 16 bit real mode with no OS or C runtime. A 512 byte boot sector of hand written assembly loads an int8 model of about 11.5 KB from the next 23 sectors and prints endless fake Linux boot messages. It was trained on about 3 MB of synthetic dmesg style logs.
Heat · Show HN, 81 points and 5 commentsWhat people foundWeights use int8 with power of two scales, so inference needs only integer multiplies and a single divide. The author saystrain.pyuses the same integer arithmetic as the assembly, so its output matches QEMU character for character, and describes a bug whereidivoverwroteedxand broke every neuron after the first.Learn it15 min · 5 steps
Key ideas
- Boot sector
- The first 512 bytes of a disk that a BIOS loads and runs before any operating system exists.
- int8 quantization
- Storing weights as 8 bit integers plus a scale factor, so math can be done with small integers instead of floats.
- Power of two scale
- Choosing scales like 1/64 or 1/128 so rescaling becomes a bit shift instead of a costly division.
Steps
- Read the bootgpt README on GitHub from top to bottom.
- Open
boot.asmand find the embedding lookup, the hidden layer loop and the argmax. - Open
train.pyand match its integer math to the assembly line by line. - Read the Show HN post for the
idivandedxbug story. - Self check: why does using power of two scales let the whole forward pass fit in one sector?
Try it30 min · 5 steps
You need: nasm, QEMU, Python 3 with numpy; macOS commands are in the README, on Linux install the same tools from your package manager; no API key neededSteps
- Clone kerlenton/bootgpt.
- On macOS run
brew install nasm qemu, or install nasm and qemu with your Linux package manager. - Create the Python environment with
python3 -m venv .venv && .venv/bin/pip install numpy. - Build the disk image with
./build.shand boot it in QEMU with./run.sh. - Watch the generated boot log, then press any key to reboot and see a new sample.
Small angles to try
- Change
corpus_gen.pyto produce a different kind of log, retrain withtrain.pyand rebuild. - Print the model's integer outputs in Python and check they match what QEMU shows.
- Count how many of the 512 bytes each part of
boot.asmuses.
-
Studying × Gemini Notebook: hundreds of free textbooks as sources
Google added a textbook option to the source picker in Gemini Notebook, with several hundred open textbooks from OpenStax and Open Textbook Library in the US and S Chand Publishing in India. Subjects include computer science, business, humanities, math and medicine. After adding a book you can ask questions answered from its content and generate practice problems and flashcards, and ITmedia AI+ confirmed it works from Japan in a Google Workspace account.
Heat · ITmedia AI+ access ranking, #1 when checked on 2026-11-01What people foundITmedia AI+ presents it as an extension of Expert Intelligence, announced in August, which lets users add books bought on Google Play as notebook sources. For engineers the useful pattern is a curated, licensed corpus offered as one click grounding, so answers come from a fixed book rather than the open web.Learn it15 min · 5 steps
Key ideas
- Source grounding
- The assistant answers from documents you attached, which makes it easier to check answers against the original text.
- Open textbooks
- Textbooks under open licenses, such as those from OpenStax, that can be shared and reused for free.
- Expert Intelligence
- Google's Gemini Notebook feature, announced in August, for adding books bought on Google Play as sources.
Steps
- Read the ITmedia AI+ article of 2026-10-30, using a browser translator if needed.
- Look at its screenshots of the source picker and the textbook list.
- Compare this with uploading your own PDF as a source: who curates the content and who holds the license.
- Sketch how you would build the same feature with your own retrieval system over a fixed book.
- Self check: what does a fixed textbook source protect against that open web search does not?
Try it30 min · 5 steps
You need: A Google account with Gemini Notebook access; ITmedia confirmed access in a Google Workspace account in Japan, other account types were not confirmed; a web browser; no API key neededSteps
- Open Gemini Notebook and create a new notebook.
- In the source selection screen choose the textbook option and browse the list.
- Add an OpenStax computer science textbook as a source.
- Ask three questions on a chapter you already know and check each answer against the book text.
- Generate practice problems and flashcards for that chapter and solve them without looking.
Small angles to try
- Ask a question the book does not cover and see whether it says so or reaches beyond the source.
- Compare answers with and without the textbook source attached.
- Try a math or medicine book and check how formulas and terms are handled.
Sources:ITmedia AI+, 2026-10-30 -
Lean creator Leo de Moura: AI makes formal verification affordable
In an interview on The Data Exchange, Lean creator Leo de Moura argues that AI sharply lowers the cost of writing formal proofs about code. Once a program has a proof, an AI can try aggressive optimizations while the proof checks that the result is unchanged. He also warns that a Lean model of a program must be checked against the real code, which some teams do with differential testing.
Heat · Hacker News, about 100 points at last check on 2026-11-01What people foundDe Moura's point for engineers: tests can show that bugs exist but not that they are absent, so the work shifts toward writing precise specifications that code must satisfy. He compares Mathlib, about 2.5 million lines written by people over roughly 10 years, with an AI written Fermat's Last Theorem proof of about 13 million lines.Learn it15 min · 5 steps
Key ideas
- Proof assistant
- A program, like Lean, that checks every step of a mathematical proof, including proofs that code meets a specification.
- Specification
- A precise statement of what a function must do, written so a machine can check code against it.
- Differential testing
- Running two implementations on the same inputs and comparing outputs to find places where they disagree.
Steps
- Read the interview on The Data Exchange first, focusing on the parts about guardrails, faithfulness and specifications.
- Open the Lean Get Started page on lean-lang.org and skim what Lean is used for, both as a language and as a prover.
- Read the first chapters of Theorem Proving in Lean to see what a theorem and a proof look like in code.
- Skim the Hacker News thread for practitioner views on property based testing versus proof.
- Self check: why does a proof about a Lean model of your code not guarantee your real code is correct, and how would differential testing help?
Try it30 min · 5 steps
You need: A web browser for the online Lean playground, or VS Code with the Lean 4 extension. Any AI chat assistant is optional. No API key needed.Steps
- Open the Lean online playground linked from lean-lang.org, or install VS Code and the Lean 4 extension as the official install page recommends.
- Write a small recursive function in Lean, for example one that sums a list of natural numbers.
- Ask an AI assistant to write a Lean theorem and proof that your function gives the same result as a simple reference version, then paste it in and see whether Lean accepts it.
- Read the theorem statement yourself and check that it actually says what you intended, not something weaker.
- Change the function to introduce a bug and confirm that the proof now fails to check.
Small angles to try
- Ask the assistant to optimize the function, for example with an accumulator, and keep the proof passing.
- Port a small function from your own codebase to Lean and compare outputs on random inputs, as a toy differential test.
- Try the same proof task with two different assistants and compare how often Lean accepts the result.
-
Tencent's Youtu-Parsing-Omni: one 5B model parses docs, audio, video
Tencent released Youtu-Parsing-Omni, a single 5B parameter model that turns documents, images, charts, audio and video into structured JSON records tied to positions on the page or times in the media. It uses one shared encoder and one output schema across ten parsing tasks, and is post trained with a self distillation method the authors call OSAD. Code and weights are public on GitHub and Hugging Face.
Heat · Hugging Face Papers, 163 upvotes on the paper page; 123 likes on the model pageWhat people foundThe authors report 96.96 overall on OmniDocBench v1.6 and 75.08 average on OmniParsingBench, which they say is the best open weight result and second only to Gemini 3 Pro. The license is a custom one named youtu-parsing, so read it before using the model in a product.Learn it15 min · 5 steps
Key ideas
- Document parsing
- Converting a page image or file into structured text, tables and layout that software can use.
- Grounded output
- Each extracted item carries where it came from, such as a box on the page or a time range in a video.
- On policy distillation
- Training a model on its own outputs, scored by a teacher model, rather than only on fixed labeled data.
Steps
- Read the abstract on the Hugging Face Papers page first.
- Open the model card for tencent/Youtu-Parsing-Omni and look at the table of supported tasks.
- Skim the paper's description of the shared output schema and how audio and video records are timestamped.
- Check the license file linked from the model card.
- Self check: what does one shared schema across modalities save you compared with separate OCR and transcription tools?
Try it30 min · 5 steps
You need: Linux machine with a CUDA GPU, Python 3.10 or newer, ffmpeg for audio and video, and the model weights from Hugging Face. No API key needed.Steps
- Clone the repo with
git clone https://github.com/TencentCloudADP/youtu-parsing.gitand change into the youtu_parsing_omni folder. - Set up a vLLM environment with
bash scripts/setup_env.sh, as the model card describes. - Start a local server with
MODEL=tencent/Youtu-Parsing-Omni DATA_ROOT=/path/to/media GPU=0 bash scripts/vllm.sh, pointing DATA_ROOT at a folder of your own files. - Parse one of your own scanned pages with
python examples/infer_vllm.py --task document --media /path/to/media/page.pngand inspect the JSON. - Run the same script with
--task graphics_charton a chart and with--task audioon a short recording of your own, and compare the outputs against what you know is in them.
Small angles to try
- Compare its table output on a few of your PDFs against the OCR tool you use today.
- Feed the JSON into a small retrieval pipeline and check whether answers improve over plain text extraction.
- Use the Transformers mode from the model card instead of vLLM and compare setup effort.
-
Pika H3 Flex: open adapters for video with synced stereo audio
Pika Labs published Pika H3 Flex on Hugging Face on Oct 29, a pair of LoRA adapters on top of MiniMax-H3 that generate video with 32 kHz stereo audio at 24 fps in six sampling steps, at 480p or 768p. The FL2VA adapter covers text, first frame, last frame and first plus last frame inputs. The Ref2VA adapter takes up to 9 images, 3 videos and 3 audio clips as references.
Heat · Hugging Face, 198 likes and 87 downloads via the model API on 2026-11-01What people foundPer the model card, representative 480p and 768p requests ran on a single H100 80GB, and the base components total about 210 GB. The adapters use the MiniMax H3 Community License, while the example code is Apache 2.0, so check the license before commercial use.Learn it15 min · 5 steps
Key ideas
- LoRA adapter
- A small set of extra weights that changes a large base model's behavior without retraining the whole model.
- Few step sampling
- Generating output in a handful of denoising steps instead of dozens, trading some flexibility for speed.
- Reference conditioning
- Guiding generation with example images, clips or audio so the output keeps their look or sound.
Steps
- Read the Hugging Face model card first, especially the input limits and hardware notes.
- Look up the MiniMax-H3 base model card to see what the adapters build on.
- Read the license section and note which parts are under which license.
- Skim the inference repo README on GitHub for the supported setup routes.
- Self check: why does the card say generic six step sampling is not equivalent to its own sampler?
Try it30 min · 5 steps
You need: For local runs, a data center GPU with about 80 GB of memory and roughly 210 GB of disk for base components; otherwise only a browser to study the card. No API key needed for the open weights.Steps
- Open the model card and list the inputs each adapter accepts, plus the duration and file count limits.
- Read the license and decide whether your intended use is allowed.
- If you have suitable hardware, clone the Pika-Labs/Pika-H3-Flex inference repo and follow its quickstart to download the base components and one adapter.
- Generate a short 480p clip from a text prompt with the FL2VA adapter and check that audio stays in sync with the action.
- Run a Ref2VA request using one of your own photos as a reference and compare how well the subject is kept.
Small angles to try
- Compare first frame and first plus last frame modes using the same pair of your own images.
- Measure time and memory for a 480p versus a 768p request.
- Try the diffusers examples mentioned on the card instead of the CLI.
-
Weekend outings × Gemini in Google Maps: Ask Maps tops ITmedia
Ask Maps, called マップに相談 in Japan, lets users ask Google Maps questions in everyday language, and Gemini answers using Maps' live data and user reviews. ITmedia Mobile's hands on review, published Oct 31, tries requests such as a quiet cafe with parking, Wi-Fi and outlets for laptop work, or a one night Kyoto plan for a family. The reviewer's main complaint is the screen: on a regular tall phone the chat crowds out the map, while a foldable shows both side by side.
Heat · ITmedia Mobile access ranking, number 1 as seen on 2026-11-01What people foundThe ITmedia reviewer finds it most useful for requests with three or more conditions, trip planning and routes with time limits or stops, while ordinary search stays better when you already know a place's name or address.Learn it15 min · 4 steps
Key ideas
- Grounded answers
- The model's replies are built from live map data and reviews rather than only from its training data.
- Conversational search
- Users describe what they want in a sentence instead of typing keywords and filtering results by hand.
Steps
- Read the ITmedia Mobile review first, using a browser translator if needed.
- Note which example requests the reviewer found useful and which were faster with normal search.
- Look at the screenshots comparing a standard phone with an unfolded foldable.
- Self check: what layout problem appears when a chat panel and a map compete for one screen, and how would you solve it?
Try it30 min · 5 steps
You need: Google Maps on a phone in a region where Ask Maps is available, and a Google account. No API key needed.Steps
- Open Google Maps and look for the Ask Maps button in the search bar.
- Ask a request with at least three conditions near where you live, such as a quiet cafe with outlets and parking.
- Check two or three of the suggested places against their listings and reviews to see whether every condition is really met.
- Run the same need as a normal keyword search and compare the time taken and the quality of results.
- Note how often you have to scroll or switch views between the chat and the map.
Small angles to try
- Ask for a route with a time constraint and a stop on the way.
- Repeat a request on a tablet or foldable and compare the layout.
- Phrase the same request in Japanese and in English and compare the suggestions.
Sources:ITmedia Mobile review -
Users report Claude Opus 5.5 refusing game cloning and reverse engineering
Tom's Hardware reported on Oct 31 that users say Claude Code and Opus 5.5 now refuse to recreate specific existing games, patch games and handle some reverse engineering tasks, such as analyzing a crash dump or running the Reverse Engineer Anything tool. A Twitter user shared what they say is the new rule, which bans building a recreation of a specific existing game even if renamed, but Tom's notes it is unconfirmed. Anthropic has made no public statement on these reports as of Nov 1.
Heat · Hacker News: 141 points and 89 comments on the Mashable story, 71 points and 42 comments on the Tom's Hardware story, and 336 points and 190 comments on a related thread about blocks on model training questionsWhat people foundEverything so far rests on user reports, so treat it as unconfirmed. Tom's Hardware links some security related refusals to Anthropic's Cyber Verification Program, which began Oct 6, but says that link is also unconfirmed. Some HN commenters suggest moving reverse engineering work to open weight or local models.Learn it15 min · 4 steps
Key ideas
- Refusal
- When a model declines a request, often because of a policy, a system prompt rule or a safety classifier.
- Silent behavior change
- A hosted model or client starts acting differently without a version bump or changelog, which can break workflows.
- Reverse engineering
- Working out how compiled software works by reading binaries, dumps or traffic, often for debugging, interoperability or preservation.
Steps
- Read the Tom's Hardware article first and separate what is reported by users from what is confirmed.
- Read the Mashable Hacker News thread for developer reactions and claims about where the rule lives.
- Check Anthropic's official news page and release notes for any statement, and note that none had been made at the time of writing.
- Self check: which parts of the story are verified facts, and which are user claims that could change?
Try it30 min · 5 steps
You need: API access to two or more hosted models, or one hosted and one local model, with their API keys, plus Python or a simple shell script.Steps
- Write 10 to 20 benign prompts from your own work, such as explaining a function in a binary you built yourself or writing an original game with mechanics of your own.
- Send each prompt with the same settings to each model and save the full replies with timestamps.
- Label each reply as answered, partly answered or refused, and note the reason given.
- Rerun the same set a few days later to see whether behavior changes over time.
- Rephrase the prompts that were refused to add honest context about ownership and purpose, and record whether the result changes.
Small angles to try
- Compare the same prompts through a coding agent and through the plain API.
- Include a local open weight model as a baseline.
- Track the refusal rate as a small regression test you run before switching models.
-
Demoscener-7B: one person post trains Qwen2.5-Coder on 25k Dwitter demos
A developer adapted Qwen2.5-Coder-7B to Dweets, the tiny JavaScript canvas animations on Dwitter, using about 25k demos pulled from the Dwitter API. Training went through continued pretraining, a curriculum that shifted sampling toward the top rated 5,000 demos, and finally GRPO where the author acted as the reward model by picking the best of eight rendered completions, about 40,000 animations in total. The three stages are published on Hugging Face as separate LoRA adapters, next to the dataset.
Heat · Hacker News discussion, at least 43 points and 30 comments in the snapshot checked, with a mostly skeptical thread about AI in the demosceneWhat people foundPer the write up, continued pretraining alone cut perplexity on 30 held out Dweets from 28.63 to 8.57, and a friend blind judged 400 sets of demos from four checkpoints to choose the final one. The useful pattern is a cheap human preference loop for a domain where a person can judge output at a glance.Learn it15 min · 5 steps
Key ideas
- Continued pretraining
- Training a base model further on raw text from a new domain so it learns that domain's syntax before any task tuning.
- GRPO
- A reinforcement learning method that samples a group of answers per prompt and pushes the model toward the ones rated better than the group average.
- LoRA adapter
- A small set of extra weights trained on top of a frozen base model that can be loaded or swapped without changing the base.
Steps
- Read the author's Demoscener write up on datavorous.com from top to bottom, noting the three stages and what data each one used.
- Open the Demoscener-7B model card on Hugging Face and see how the cpt, curriculum and grpo folders map to those stages.
- Browse a few rows of the Demoscener-Dweets-25k dataset to see what a 140 character demo looks like as training text.
- Compare the perplexity results for the first two stages with the blind judging used for the last stage, and think about why perplexity cannot measure taste.
- Self check: why did the author need a human, not a loss number, to choose between completions in the final stage?
Try it30 min · 5 steps
You need: Python withtransformers,peftandhuggingface_hub, a GPU with enough memory for a 7B model in BF16 or a rented cloud GPU, and a browser to view demos. No API key needed.Steps
- Download the adapters from
datavorous/Demoscener-7Bwithhuggingface_hub.snapshot_downloadand load the base modelQwen/Qwen2.5-Coder-7Bwith transformers, as the model card shows. - Attach the
cptadapter withPeftModel.from_pretrained, then add thecurriculumandgrpoadapters withload_adapter. - Pick one partial Dweet from the dataset, switch between the three adapters with
set_adapter, and generate a completion from each. - Paste each completion into a Dwitter style canvas page or the Dwitter editor and watch the animations side by side.
- Write down which stage you prefer for five prompts without looking at the labels, then compare with the author's choice of the GRPO checkpoint.
Small angles to try
- Generate with the plain base model and no adapter to see how much the continued pretraining stage changes the output.
- Note the model card warning that later stages were trained on quantized bases, and compare outputs on a quantized base versus BF16.
- Sketch the same best of eight human picking loop for a small domain you know, such as SQL queries or regexes.
-
Talos: VOLTA infostealer asks an LLM to rank victims by worth
Cisco Talos describes VOLTA, a self deleting Windows infostealer that takes browser passwords, cookies, OAuth tokens, SSH keys, cloud configs and wallet data. An optional stage posts the stolen profile to OpenRouter and asks a model to write a target assessment with sections such as "WHAT THEY'RE WORTH" and "THEIR OPSEC". Talos says the design suggests a builder sold to customers, which would put the AI dossier in the hands of attackers of any skill level.
Heat · Hacker News discussion, at least 137 points and 61 comments in the snapshot checkedWhat people foundTalos reports the default model is anthropic/claude-opus-4.6 with moonshotai/kimi-k2 and google/gemini-2.5-flash as fallbacks, and the malware scans replies for refusal phrases like "I can't" before trying the next one. For defenders, Talos recommends blocking or at least alerting when a process that is not a known developer tool launches Chrome with--headless, plus revoking tokens fast after a compromise.Learn it15 min · 5 steps
Key ideas
- Infostealer
- Malware that collects saved credentials, session cookies and tokens from a machine and sends them to an attacker.
- App-Bound Encryption
- A Chrome protection on Windows that ties stored cookies and passwords to the browser itself, which VOLTA tries to bypass by driving Chrome in headless mode.
- Model fallback chain
- Calling a list of LLMs in order and moving to the next one when a reply looks like a refusal or an error.
Steps
- Read the Cisco Talos post on VOLTA in full, focusing on the data it collects and the OpenRouter stage.
- List which of the stolen data types exist on your own work machine, such as SSH keys, cloud config files and browser sessions.
- Reread the Talos defensive recommendations and match each one to a control you have or lack.
- Skim the Hacker News thread for the isolation and update delay ideas commenters raised.
- Self check: why does an LLM triage step make fast token revocation more urgent after a compromise?
Try it30 min · 5 steps
You need: Your own computer and browser, plus optional access to your own endpoint or proxy logs. No malware, no samples, no third party systems. No API key needed.Steps
- Open your browser's password manager settings on your own machine and note whether saved passwords and payment cards are stored there or in a separate hardware backed or OS level store.
- Check where your SSH private keys and cloud credential files live, and whether the keys have passphrases or sit behind a hardware key.
- On a Windows machine you own or administer, look at the running processes and their command lines with Task Manager or your EDR, and note whether anything other than known developer tools starts Chrome in headless mode.
- Write a short detection idea for your own endpoints: alert when a process that is not an approved AI tool sends requests to LLM API hosts such as openrouter.ai, and list which apps you expect to do so.
- Draft a one page token revocation checklist for your accounts, covering OAuth sessions, SSH keys and cloud keys, using the Talos post as the reference.
Small angles to try
- Turn the headless Chrome rule into a written policy for an application control tool your team already uses.
- Review which developer tools on your machine legitimately call LLM APIs so a detection rule has a clean allow list.
- Compare the Talos advice with commenters' ideas on separating machines or VMs for banking and development.
-
"Evil Qwen": hobbyists flip model personas by steering single neurons
VentureBeat reports on hobbyists steering open Qwen models through individual MLP neurons. Lyra raised neuron 8949 in layer 14 and lowered neuron 7956 in layer 13 of Qwen3.5-4B to get a villain persona, and released Neuron Explorer along with Neuronary, a set of 213 steering recipes. Another developer reported hostile replies on 7 of 12 prompts by steering one neuron in Qwen3.8-27B, a result VentureBeat says it did not reproduce.
Heat · VentureBeat feature on Oct 30; no Hacker News thread seenWhat people foundSauers gave a Qwen3-8B a new owl identity by training weights tied to 128 neurons, about 0.02% of parameters. VentureBeat stresses that none of these experiments show real desires or autonomous goals, but the point for anyone shipping an open weight model is that its persona can be changed with a tiny edit.Learn it15 min · 4 steps
Key ideas
- MLP neuron
- One unit in a transformer's feed forward block whose activation can be read or pushed up and down.
- Activation steering
- Changing internal activations at inference time to shift model behavior without retraining.
- Random control
- Steering randomly chosen neurons by the same amount to check that an effect is specific to the chosen neuron.
Steps
- Read the VentureBeat article to see the main experiments and the caveats about what they do not show.
- Open the Neuron Explorer README on GitHub and note the views it offers and the model it targets.
- Compare inference time steering in Evil Qwen with the weight training approach Sauers used for the owl model.
- Self check: why do random neuron controls matter before claiming one neuron controls hostility?
Try it30 min · 5 steps
You need: Python withuv, a machine that can run Qwen3.5-4B on CUDA, Apple MPS or CPU, and disk space for the model download. No API key needed for the explorer itself; the optional Claude panel needs theclaudeCLI logged in.Steps
- Clone the neuron-explorer repository from GitHub on your own machine.
- Install dependencies with
uv sync. - Start the explorer with
uv run python explorer/server.pyand open http://localhost:8791 in your browser. - Use the ranked neuron list to pick one neuron, steer it up and down in the per neuron chat, and record how replies change on three fixed prompts.
- Repeat with a random neuron in the same layer as a control and compare.
Small angles to try
- Look for neurons tied to a harmless style such as formality or verbosity instead of personality.
- Check whether a steered effect holds across different prompt topics or only on a few.
- Read the sweep scripts in the repo to see how they rank neurons at scale on a GPU pod.
-
Long agent sessions × Claude Ultra drops the 5 hour cap
Anthropic renamed its top Claude plans: Max 5x is now Max at $100 a month and Max 20x is now Ultra at $200 a month, with prices unchanged. Ultra removes the 5 hour usage limit for verified accounts, starting with most existing subscribers who get an email, while weekly limits of 10x Pro stay in place. Newer accounts keep a temporary 5 hour limit until verified, which the announcement says helps prevent fraud and abuse.
Heat · Claude by Anthropic was #16 on Apple's US top free iPhone chart and #27 in Japan on Nov 1, 2026What people foundWeekly limits are unchanged, so the change helps long continuous sessions such as multi hour Claude Code runs rather than raising total usage. Anthropic's own help article on Max usage still described 5 hour resets when checked, so the announcement and Impress Watch report are the current source.Learn it15 min · 4 steps
Key ideas
- 5 hour usage window
- A rolling limit that caps how much you can use Claude within five hours from your first message.
- Weekly limit
- A separate cap on total usage across a week, which still applies on Ultra.
- Account verification
- A check Anthropic uses before lifting the 5 hour cap, aimed at stopping fraud and abuse.
Steps
- Read the Impress Watch report on the plan changes.
- Open the official @claudeai announcement it links to and confirm which plan drops the 5 hour cap.
- Compare the old Max 5x and Max 20x names with the new Max and Ultra names and prices.
- Self check: if your bottleneck is total weekly usage, does moving to Ultra help?
Try it30 min · 4 steps
You need: Your own Claude account on any paid plan and a browser. No API key needed.Steps
- Open your Claude account settings and note your current plan name and whether it now shows Max or Ultra.
- Check your inbox for an email from Anthropic saying your 5 hour limit was removed.
- Look at your usage view for a typical day and note whether you usually hit the 5 hour window or the weekly limit first.
- Based on that, write down whether Max or Ultra fits your workload, given that weekly limits did not change.
Small angles to try
- Estimate how many multi hour agent runs a week your current plan allows before the weekly limit.
- Compare the cost of Ultra with paying for the same work through the API.
- For a team, list which members would actually benefit from no 5 hour cap.
-
Memdoor team-solve: five Qwen3.8-27B agents that talk only through files
Memdoor's team-solve example reimplements the GVS5H method as a workflow with a planner, two ideators, a solver and a manager, each starting with a fresh context and sharing state only through files such as plan.md and notes.md. A shell script that diffs program output against sample tests decides success, with one repair round and no human gate. The README reports a mean of 9.8 out of 10 over five passes on the first ten LiveCodeBench Hard problems using Qwen3.8-27B through OpenRouter, against 8.0 for Fable 5 alone, a claim by the author that has not been independently reproduced.
Heat · Hacker News discussion on Oct 31; the point count seen varied across snapshots, so none is quotedWhat people foundThe README is upfront about limits: only ten problems, contests from late March to early April 2025 that the model may have seen in training, and a Fable 5 column taken from the method authors' files rather than rerun. The author's reported cost was $35.79 for 50 runs, with a median of about $0.39 and 40 minutes per run.Learn it15 min · 5 steps
Key ideas
- File based agent handoff
- Agents pass work through files on disk instead of a shared chat, so each one can start with a clean context.
- Command verifier
- A shell step that runs tests and returns an exit code, so the workflow trusts tests rather than a model's own opinion.
- Benchmark contamination
- When test problems may have appeared in a model's training data, which can inflate scores.
Steps
- Read the team-solve README in the Memdoor repository, especially the table of steps with what each agent reads and writes.
- Look at how the final verify step uses check-samples.sh and why the loop only sees public samples while scoring uses hidden tests.
- Read the two failure cases and the caveats section of the README.
- Skim the Hacker News thread for the author's notes on how steps, models and temperatures are set in YAML.
- Self check: why is a 10 problem, 5 pass result weak evidence even if every number in it is correct?
Try it30 min · 5 steps
You need: Linux or macOS with bash, Python 3 and git, the Memdoor CLI, and a provider account such as an OpenRouter API key, which costs money per run, or a local model server such as Ollama or llama-server.Steps
- Read the install script from the README before running it, then install the Memdoor CLI as the README describes and connect a provider with
memdoor connect openrouterormemdoor connect local. - Clone the repo with
git clone --depth 1 https://github.com/guregodevo/memdoorand copyexamples/workflows/team-solveinto~/.memdoor/workflows/. - Make an empty problem folder, copy in the files from the workflow's
samplefolder, and runmemdoor workflow run team-solve --wait. - Open
notes.md,review.mdandfinal-test-output.logto follow how the agents handed off work. - Replace
task.mdwith a small problem of your own and add pairedtests/N.inandtests/N.outfiles, then rerun.
Small angles to try
- Point
/modelat a smaller local model and see whether the verifier still catches its mistakes. - Feed it a problem published after the model's training cutoff to reduce contamination risk.
- Use
memdoor tuiand/workflowto watch a run live.
-
Datasette Agent starts with no model config in datasette-llm 0.1a9
Simon Willison released datasette-llm 0.1a9, an alpha that now falls back to the default model already set in his LLM command line tool. Datasette Agent, a plugin that answers questions about a SQLite database by writing and running SQL, therefore starts without a separate model setting.
Heat · A release post on Simon Willison's blog on 2026-10-31, no wider discussion verified.What people foundThe whole setup is now one command,uvx --with datasette-agent datasette content.db --internal internal.db, as long as LLM already has a default model and key. Willison says bigger upgrades to Datasette Agent are "in the pipeline".Learn it15 min · 4 steps
Key ideas
- LLM
- Simon Willison's command line tool and Python library that stores API keys and a default model for many providers.
- datasette-llm
- A shared plugin that lets other Datasette plugins call models through LLM, and now inherits LLM's default model.
- Datasette Agent
- A Datasette plugin with a chat page at
/-/agentthat explores tables and answers questions by running SQL.
Steps
- Read Willison's short 0.1a9 release post first, it shows the single command and what it replaces.
- Skim the datasette-agent README on GitHub for the
/-/agentpage, the permissions it registers and thedatasette.ymlmodel options. - Read the LLM setup page to see how
llm keys set openaiandllm models defaultstore a key and a default model. - Self check: if LLM has a default model set and you also set
default_modelindatasette.yml, which one would you expect the agent to use, and why?
Try it30 min · 5 steps
You need: Python with uv installed, an API key for a tool capable model provider such as OpenAI, and a SQLite file of your own data. A local model through llm-ollama is an option but untested here.Steps
- Install LLM with
uv tool install llm, then store a key withllm keys set openaiand paste it. - Set a default model with
llm models defaultfollowed by a model id your key can use, and runllm models defaultagain to confirm it. - Copy a SQLite database you own, such as an exported app database, to
content.db. - Run
uvx --with datasette-agent datasette content.db --internal internal.dband open the/-/agentpage on the local server. If access is refused, add--rootas the README's development command does and use the sign in link it prints. - Ask three questions you already know the answers to, and compare the agent's SQL and results against your own queries.
Small angles to try
- Install datasette-agent-charts as well and ask for a chart of a time series in your data.
- Install
llm-ollamawithllm install llm-ollama, set a local model as the LLM default and see whether the agent still works without a cloud key. - Restrict the model picker with the
purposesblock foragentindatasette.ymland check that only the listed models appear.
-
Proton's CEO cancels AI "re-interviews" after staff backlash
404 Media reports that Proton had planned near company wide sessions in which staff would explain how they use AI, with leadership intending to use them to decide who could be fired for not using it enough. CEO Andy Yen cancelled them at an all hands meeting, saying they had "already served their purpose", after 404 Media published an investigation into the company's AI push. One employee told 404 Media the measures will instead feed into performance reviews, and Proton did not respond to a request for comment.
Heat · Hacker News, 290 points and 248 comments as checked on 2026-11-01.What people foundYen said "Going forward, I'm still going to push" and promised "no loss of jobs from AI" in next month's reorganization, while CTO Bart Butler told staff "We fucked up, we know we fucked up." For engineers the practical signal is that AI usage is moving into performance reviews, even at a privacy focused company.Learn it15 min · 4 steps
Key ideas
- AI usage mandate
- A company rule or expectation that employees use AI tools, sometimes tracked and tied to job security.
- Usage metric versus outcome metric
- Counting how often someone uses a tool is different from measuring whether their work got faster or better.
Steps
- Read 404 Media's earlier investigation, "Manifestos, Fear, and Loser Thinking: Inside Proton's AI Reckoning", for the background on Butler's manifesto and Yen's August Slack message.
- Read the follow up article on the cancelled re-interviews and note what was cancelled and what remains.
- Skim the Hacker News thread for how engineers at other companies describe similar mandates.
- Self check: what is the difference between measuring AI usage and measuring engineering outcomes, and which one did the re-interviews target?
Try it30 min · 5 steps
You need: A text editor and the two 404 Media articles. No API key needed.Steps
- List the AI tools your own team actually uses and one task where each clearly saved time.
- For each task, write one outcome measure such as review turnaround, defect count or time to merge, rather than a usage count.
- Draft a one page team guideline on AI use that covers security review of generated code, since Butler said AI use does not mean giving up on security.
- Compare your draft with the Proton approach described by 404 Media and mark which parts would feel coercive to an engineer.
- Share the draft with one colleague and ask which measure they would trust in their own review.
Small angles to try
- Write the same guideline from the view of an engineer working on security critical code.
- Track your own AI assisted versus manual tasks for one week using only outcome measures.
-
Logged out web × AI search: Reddit moves to a logged in experience
On its Q3 earnings call Reddit said it will shift to a primarily logged in experience, with a rebuilt "incognito mode" for anonymous browsing, starting with tests in select markets outside the US in Q4. Search referrals fell by more than 1 million per week on average in October as AI answers in search reduce clicks to websites, and Reddit says logging in also protects its data from AI scraping and supports licensing deals. US daily active users fell to 50.7 million in Q3 from 53.2 million in Q2.
Heat · Covered by TechCrunch on 2026-10-29 and by Gigazine in Japan on 2026-10-30, which also cites Ars Technica and The Verge.What people foundCEO Steve Huffman called it "the right decision for our platform and the right decision for our business" but admitted "there are still plenty of questions that are unanswered." For engineers, Reddit threads used as debugging answers or as RAG and training data will be harder to reach without an account.Learn it15 min · 4 steps
Key ideas
- Search referral
- A visit that arrives from a search engine results page, which falls when the search page answers the question itself.
- Logged in wall
- Requiring an account to read content, which blocks anonymous visitors and most scrapers at once.
- Data licensing
- Selling access to user generated content to AI model makers, which Reddit counts in its non advertising revenue.
Steps
- Read the TechCrunch report first for the numbers, the timeline and Huffman's quotes.
- Read the Gigazine article for the earlier steps, such as login for old.reddit.com and the 2024 API price rise.
- Write down which numbers describe traffic and which describe revenue, since revenue grew 53% while US users fell.
- Self check: why would an AI search feature reduce Reddit's logged out traffic, and why would a login wall help its licensing business?
Try it30 min · 5 steps
You need: Access to your own project's notes, scripts or RAG pipeline and, if you run a site, its analytics. No API key needed.Steps
- Search your own code, scripts and RAG source lists for reddit.com URLs and list every place that fetches Reddit pages without logging in.
- For each one, note whether it would still work behind a login wall and whether Reddit's terms allow that use.
- If you run a website, open its analytics and compare search engine referrals for this October against last October.
- Write down one replacement source for each Reddit dependency, such as official docs, issue trackers or Stack Overflow.
- Summarize the risk in three lines for your team.
Small angles to try
- Check whether your own site gets any referrals from AI assistants and how they compare with classic search.
- List which community answers you rely on most and whether they also exist in a public issue tracker.
-
SkyPilot: Grace Blackwell NVL72 racks need a topology aware scheduler
SkyPilot argues that multi node jobs on NVL72 racks only get NVLink speed when all their workers sit in one rack, and that free nodes scattered by failures and uneven job endings can block rack scale jobs even when GPUs are idle. Its scheduler places 16 node slices per 18 node rack, keeps two spare nodes to swap in for failed ones, and preempts only jobs that can resume from a checkpoint to free a whole rack. The headline 27% comes from SkyPilot plugging its own measured node unavailability of about 2% into NVIDIA's capacity model, not from a direct SkyPilot measurement.
Heat · Hacker News, 144 points and 22 comments as checked on 2026-11-01.What people foundAt about 2% unavailability on a modeled 128 rack, 2,304 node cluster, NVIDIA's model gives 2,037 usable nodes with 16 node slices against 1,602 with 18 node slices. Separately, NVIDIA's GR00T team measured 14.4% higher throughput with rack aware placement on 512 GB300 GPUs, 1.59 s to 1.39 s per iteration. Hacker News commenters noted that Kueue already has topology aware scheduling and asked for SkyPilot's scheduler to be open sourced.Learn it15 min · 4 steps
Key ideas
- NVL72
- An NVIDIA rack of 72 Blackwell GPUs across 18 nodes that share one NVLink fabric, far faster than InfiniBand between racks.
- Slice
- A group of nodes placed together inside one rack so a job stays on a single NVLink domain.
- Fragmentation
- Free nodes scattered across racks, so plenty of GPUs are idle but no rack has enough for a new job.
Steps
- Read NVIDIA's blog post on Slurm block scheduling for GB200 NVL72 first, since its capacity model, Figure 7, is the source of the 27% comparison.
- Read the SkyPilot post and find the sentence where it applies its own roughly 2% unavailability to that model.
- Skim the Hacker News thread for the Kueue comparison and the debate over reserving about 11% of nodes as spares.
- Self check: why can 16 node slices yield more usable nodes than 18 node slices once a few nodes per rack are down?
Try it30 min · 5 steps
You need: Python 3 on a laptop, no GPUs. No API key needed. SkyPilot's post publishes no scheduler code or config, so this test reproduces the idea with a toy model.Steps
- Write a short Python script that models 128 racks of 18 nodes and marks each node unavailable with probability 0.02.
- Count usable nodes when each rack can host one 18 node slice only if all 18 nodes are healthy.
- Count usable nodes when each rack hosts one 16 node slice if at least 16 nodes are healthy.
- Repeat both counts over many random trials and compare the averages with the 2,037 and 1,602 figures in the post.
- Sweep the unavailability rate from 0.5% to 5% and find where 16 node slices stop paying for their two idle spares.
Small angles to try
- Add 9 node slices, two per rack, and compare with the post's claim of about 4% less capacity than 16 node slices.
- Model correlated failures, such as a whole rack going down, and see how the gap changes.
- Simulate jobs ending at random times and measure how often a 16 node job cannot find a free rack.
-
Simantic, YC F26, simulates firmware so AI agents can test without boards
Simantic is a firmware simulation layer whose engine the founders rewrote in Rust after finding a Renode wrapper too slow, letting engineers and AI agents run firmware on virtual microcontrollers instead of flashing dev boards. It also offers an AI pull request reviewer that uses the simulator as evidence and CI checks on every commit. The founders describe themselves as former firmware engineers at Neuralink and Tesla.
Heat · Launch HN, 77 points and 36 comments as checked on 2026-11-01.What people foundIn the thread the founders listed STM32F042/F048, STM32F072, STM32F401, STM32F446, ESP32-C3 and RP2040 as runnable through the cloud API today, a shorter list than the launch post. A commenter warned that if one model writes both the firmware and the peripheral model from a datasheet, shared misreadings can make tests pass for the wrong reason, and the founders said they plan to publish a report on gaps between silicon and simulation. Analog behavior such as ADC sampling is not modeled.Learn it15 min · 4 steps
Key ideas
- Peripheral model
- Software that imitates a chip's registers, timers and buses so firmware behaves as if it ran on real hardware.
- Hardware in the loop
- Testing firmware on real boards attached to a test rig, the slow loop a simulator tries to replace.
- Differential testing
- Running the same firmware on the simulator and on real hardware and comparing traces to catch model errors.
Steps
- Read the Launch HN post first for what Simantic does and which chips it covers.
- Read the Simantic docs page for the
simcommand line tool and itscheckandruncommands. - Read the commenter's warning about shared datasheet misreadings and the founders' reply in the thread.
- Self check: name one firmware bug a digital simulator would catch and one it would miss.
Try it30 min · 6 steps
You need: A Simantic account and API key from its account settings, a firmware ELF you built for a supported chip such as RP2040 or STM32F401RE, and macOS or Linux. Pricing and any free tier were not stated in the sources checked.Steps
- Install the CLI with Homebrew using
brew tap simantic-dev/simanticandbrew install simantic. - Sign in with
sim login, then runsim modelsto see which MCUs your binary supports. - Build a simple blink or UART hello firmware of your own for one listed chip and validate it without running it, for example
sim STM32F401RE check --elf build/app.elf. - Run it with
sim STM32F401RE run --elf build/app.elf --ascii --timeout 3and confirm the UART output matches what you expect. - Introduce a deliberate bug, such as a wrong baud rate or pin, and see whether the simulated output reveals it.
- If you own the real board, flash the same ELF and compare its behavior with the simulator.
Small angles to try
- Let a coding agent write the firmware and use only the simulator output as its feedback loop.
- Try a chip marked
not-modeledinsim modelsand note what fails. - Compare timing sensitive code, such as a delay loop, between the simulator and a real board.