Agent sandboxing formalizes today: burner VMs, command blockers, and a design layer against AI slop.
Top Signal
Clawk gives coding agents a disposable Linux VM, not your laptop
new tool
HN Show
Clawk provisions ephemeral Linux VMs for coding agents so every session executes in an isolated throwaway environment rather than on your host machine. This directly addresses the biggest unsolved risk in agentic coding: agents that rm-rf the wrong directory, leak secrets through shell commands, or corrupt your local git state. The pattern is architecturally clean — wrap any agent session in a fresh VM, discard on exit. 170 HN points, 140 comments, with practitioners drawing immediate comparisons to Docker-per-request as the right compute primitive. If you're running Claude Code, OpenCode, or any tool-using agent against a real codebase, this is the sandboxing step to take before your next accidental wipe. Pair with Destructive Command Guard (below) for defense in depth. The agent security layer is finally starting to formalize.
Read more →
Fast Signals
dcg blocks dangerous shell/git commands from agents before execution
new tool
GitHub Trending
Destructive Command Guard intercepts rm -rf, git reset --hard, force pushes, and similar commands before an agent can execute them — a shell-level gate that requires zero changes to your agent harness. GitHub Trending today. Drop it in front of any agent with shell access as the first line of defense.
Link →
Apple SpeechAnalyzer API outperforms Whisper on Apple Silicon — benchmark
platform change
HN Front Page
Apple's new SpeechAnalyzer API benchmarks better than Whisper on transcription accuracy and runs fully on-device with zero network round-trips. For iOS/macOS builders doing voice input in agents or apps, this is now the obvious default over self-hosted Whisper. 404 HN points — practitioners are paying attention.
Link →
J-Wash: customize open LLMs by writing to J-Space internal workspace
research to practice
r/LocalLLaMA
J-Wash extends Anthropic's Jacobian-Lens research from interpretability into model customization — you steer a model's hidden internal reasoning workspace (J-Space) to change behavior without touching weights. A practical tool is now shipping. Jacobian-lens has gone from a research paper to an active tooling ecosystem in under a week; this is the first customization primitive built on top of it.
Link →
Hallmark: design skill for Claude Code/Cursor that refuses AI-looking UI
new tool
GitHub Trending
Hallmark is an installable design skill for Claude Code, Cursor, and Codex that enforces non-AI-looking UI output with twenty opinionated themes and a live demo. If your agent generates UIs that look like generic Bootstrap slop, this is the constraint layer to add upstream. MIT, GitHub Trending today.
Link →
OvisOCR2: 0.8B local document parser beats much larger models
new tool
r/LocalLLaMA
OvisOCR2 is a 0.8B model for local document parsing — OCR, layout detection, table extraction — that reportedly outperforms models many times its size on structured document tasks. Runs entirely locally with minimal RAM. Directly actionable for any pipeline ingesting PDFs or scanned documents without sending data to an API.
Link →
DOM-docx converts HTML to native editable Word documents (MIT)
new tool
HN Show
DOM-docx produces real .docx files from HTML — not HTML-wrapped-as-Word, but native documents users can open and edit in Microsoft Word. MIT licensed, 132 HN points. Directly useful for any agent that generates reports, proposals, or content that non-technical users need to edit downstream.
Link →
Background Agents Open-Inspect: open-source async coding agent architecture
new tool
GitHub Trending
ColeMurray/background-agents is an open-source port of Ramp's internal 'Inspect' background agent system — agents that execute async while you work, then surface results. GitHub Trending today. Worth studying as a reference architecture if you're building any multi-agent or long-running coding pipeline.
Link →
Radar
Gemma 4 runs inside Godot via GDScript + Vulkan compute
One builder got Gemma 4 running directly inside the Godot engine using only GDScript and Vulkan compute shaders — no external server, no Python sidecar. Opens a path to fully embedded on-device AI in game logic. A template for any real-time application that needs LLM inference without a network call.
Link →
PrismML claims Qwen3.6-27B compressed to run on iPhone
Khosla-backed PrismML claims a compression breakthrough fitting Qwen3.6-27B on an iPhone — architectural details sparse, but if it ships it's a step-change for on-device agent capability. Watch for the release; could reframe what's possible for mobile-native AI apps.
Link →
Nobie: Excel-compatible spreadsheet runtime for agents and humans
Nobie is a runtime that lets AI agents read, write, and reason over spreadsheet data using the same format humans use — no translation layer, no schema mismatch. Interesting primitive for finance, ops, or any domain where the output needs to live in a spreadsheet. 68 HN points.
Link →
Convergence Watch
jacobian-lens j-space
TRENDING
4 mentions across r/LocalLLaMA, r/LocalLLaMA, r/LocalLLaMA, r/LocalLLaMA
J-Space has moved from Anthropic interpretability paper to active tooling ecosystem in under a week. Today alone: J-Wash (model customization via J-Space), hallucination signal mapping validated on Qwen3-4B across 7 datasets, independent Qwen3-8B replication of Anthropic's findings, plus yesterday's interactive GGUF visualizer. This is becoming a practical mechanistic interpretability stack for open models — not just a research curiosity.
agent sandboxing
2 mentions across HN Show, GitHub Trending
Clawk (disposable VMs for agents) and Destructive Command Guard (blocking dangerous shell commands) appeared independently today — two different teams solving the same agent blast-radius problem. The safety infrastructure layer for agentic coding is starting to formalize as a product category.
STALE: Latent Space newest item is >48h old