robbomacrae

I think I'm more on your side on that rather than letting agents go wild like Steve Yegge/Pete Steinberger do. In fact OrcaBot quickly adapted into a knee jerk reaction to OpenClaw because I saw that as inherently dangerous.

But with regard to Juggler and orchestration, have you seen "claude agents" (started in the terminal as claude agents instead of just claude). I ask because your tree like approach has similarities to how claude agents manages claude agents/subagents doing tasks with the ability to drill down in to each at a time which is why for me its not such a leap from what you already have.

This looks really interesting and a unique take on the AI agent orchestration. I think we need a bunch of experiments in this area as it's clear we are entering a new paradigm and the tools for it are lacking. The session tree in particular has merits.

I've got my own attempt with OrcaBot (short for orchestration of bots). It's also been a 6 month solo build experiment. I'm not trying to plug.. just that I'm also neck deep in Steve Yegge's Stage 8 AI-assisted coding chart and understand how much thought and effort went into this.

Thinking about where this is all going with talking to AI like fully autonomous employees similar to @Claude can you see a comms app type approach that combines something like slack with your tree/thread structure? It's somewhat orthogonal to your "inspect everything" but could intersect by bringing click through/open in options...

https://orcabot.com

OrcaBot was my Jan+Feb attempt to defeat the lethal trifecta whilst offering all the bells and whistles of a claw like sandbox: https://orcabot.com/blog#breaking-the-lethal-trifecta

This month I've been working on the free desktop version which is available as of today but probably carries a few too many bugs to not be worth promoting just yet.

AAPL and MSFT have a P/E an order of magnitude lower than TSLA whilst both having revenue growth % yoy in the teens. They both make over a $100b in PROFIT a year. TSLA's? $4b and shrinking btw. Their highest P/E's since 2005 was under 50. AAPL reached 100 in June 2003 (around the time of the iTunes Store release.. mid iPod era but pre iPhone).

Comparing with MSFT and AAPL makes TSLA look even more insane.

I've been working on addressing the exfiltration leg as well as the other legs of the lethal trifecta in my OrcaBot [0][1] platform and I thought I had it mostly covered with the help of a network snitch and egress allowlist until I read these comments.

Domain fronting and Steganography in commits to public repos are not solved and probably in all honesty not completely solvable. I wonder if this well end up like in banking where no bank can completely eliminate fraud. I've got some ideas to do bank like fraud detection within OrcaBot now so might be able to limit the impact a little. Thank you!

[0] https://orcabot.com/blog#breaking-the-lethal-trifecta

[1] https://github.com/Hyper-Int/OrcaBot

I believe it's the way the HN algorithm works. In order to give new and obscure posts a shot, it will add them to peoples feeds in their front page and see how they measure. Otherwise new posts wouldn't get seen and the flywheel would never get started.

So everyone acts as a sort of beta tester for obscure posts.

I'm trying to do this with orcabot.com

A figma like dashboard for turning ClaudeCode, Gemini Cli, Codex into an OpenClaw but with security measures to break the lethal trifecta while running on a VM.

But it's not quite there in terms of usability. I agree that is the hardest part of the equation. It's something I'm constantly experimenting with and haven't found the solution to it yet. Open to feedback!

I don't think that is entirely fair.. I don't see them stating anywhere they are measuring coding capabilities... "Using complex games to probe real intelligence."

And this seems very much in line with the methodology in ARC-AGI-3.

The results here, in the OP article and in https://www.designarena.ai all tell a similar story: Kimi K2.6 is up and in the SOTA mix.

You could have the actual output of the agent turned into TTS using the model of your choice with TalkiTo… or listen to whatever weird sounds this makes. Seems like this is copying that viral Mac moan app. 2026 is weird.

You sound like you’ve never been disdainfully stared at by a cat..

Really interesting article though. I’m very hopeful AI can help work out how all these things interact.

"Let's be honest here: there is no benefit to alcohol (for example wine) and is only detrimental." - That is a pretty extreme statement and easily falsifiable.

There are many studies a quick google away that show a much more nuanced take ie [0] and [1]. But the strongest evidence is our most successful societies and civilizations have been intentionally drinking alcohol for ~10000 years [2]. If it was only detrimental then I'm pretty sure it would have worked its way out by now. I acknowledge there are negative issues.

[0] https://www.webmd.com/diet/ss/slideshow-skinny-cocktails [1]: https://nutritionsource.hsph.harvard.edu/healthy-drinks/drin... [2]: https://en.wikipedia.org/wiki/History_of_alcoholic_beverages

OrcaBot does this with the VM but whereas the author mentions the risk of GitHub keys being leaked, OrcaBot uses a key broker to ensure the LLM doesn’t have access to any keys. It even works on the API keys to the LLMs themselves. https://orcabot.com/blog#breaking-the-lethal-trifecta

Genuinely surprised they didn't try to get away with department of peace.

Thanks for mentioning that. The bot filter has been causing trouble so I def need to go and look at it. Debated disabling it but any basic bot that starts a dashboard is spinning up a VM I pay for! Changing browser might be a workaround?

Really cool. A tangential task that seems to be coming up more and more is masking sensitive data in these calls for security and privacy. Is that something you considered as a feature?

“so the API use is in addition to the subscription, but it can't be helped.” - I beg to differ. OrcaBot.com is a claws that runs using vanilla Claude Code so you can do all that with your regular subscription. Disclosure: I’m the author. The only reason these other claws can’t offer that is because they front it with their own AI.

Thank you! Great feedback. Again agree with you on all points. Will take it onboard!

This is amazing. I agree with your take except "You’re not actually zeroizing the secrets"... I think it is actually calling zeroize() explicitly after use.

Can I get your review/roast on my approach with OrcaBot.com? DM me if I can incentivize you.. Code is available:

https://github.com/Hyper-Int/OrcaBot

enveil = encrypt-at-rest, decrypt-into-env-vars and hope the process doesn't look.

Orcabot = secrets never enter the LLM's process at all. The broker is a separate process that acts as a credential-injecting reverse proxy. The LLM's SDK thinks it's talking to localhost (the broker adds the real auth header and forwards to the real API). The secret crosses a process boundary that the LLM cannot reach.

Indeed. The biggest waste might be the overuse of MCP for everything. Sure it makes the initial development easier but then for every connection you're using a hundred billion dollar parameter model to decide how to make the call when it's usually completely unnecessary and then prone to random errors. MCP is the hammer that can make literally everything look like a nail...

As someone who has been waiting for the same thing as op tyre posted, I went to investigate this claim and it seems that it might be true but only when running apps within the Google AI Studio itself.. ie if you were to make an app that was on something like the App Store using Google AI Studio, it would be back to an API key that the developer bears the costs for.

The problem with the current model is that there is a high barrier to justifying the user pays essentially a 2nd/3rd subscription for ultimately the same AI intelligence layer. And so you cannot currently make an economically successful small use case app based on AI without somehow restricting users use of AI. I don't think AI companies are incentivized to fix this.

Hi Devin and other folks, I'm looking for software developers who are blind or hard of sight as there is a tool I'm building that I think might be of interest to them (it's free and open source). If you or anyone you know is interested in trying it please get in touch through my email.

Yeah that sounds reasonable. I've been thinking about how to make it more modular. I'll make it so that base TalkiTo doesn't need any heavy libraries.

EDIT: also to be clear whisper doesn't run or even download the model unless it's selected and the user confirms the DL. This can be configured. Google cloud has a free ASR option and ASR can be switched off completely.

You've hit the nail on the head of one of the main motivators of this project! I always context switch and miss when its done its task or sometimes forget completely..

So essentially at present when you setup TalkiTo with a Slack bot (instructions are shown by running `talkito --setup-slack`) it will do this its just its sending all the output to slack not just the final completion. I have verbosity levels and I could try tweaking them so that -verbosity 0 essentially does what you want ie filter everything except for prompts to the user. If you put in an issue on GitHub I'll get to it!

Right. On the whole I think these things are incredible.. looking to try myself after reading here in HN the other day about it working for all sorts of distractions. Just wanted to point out it's not all sunshine and rainbows which would certainly be suspicious.

There have been some. I've heard about eyesight related issues. A quick google found this article [0] where results showed that people using GLP-1 drugs were 68.6 times more likely to develop certain types of vision problems.

[0] https://www.aao.org/newsroom/news-releases/detail/do-glp-1-d...

I tried pushing this 5 years ago when at Apple but got nowhere. IMHO only the OEM’s can achieve this.

Yes and this helps us make a start. It slightly increases the odds of life elsewhere. And yes there are other dangers.. climate change, nuclear armageddon, bio weapons etc but the existence of another problem doesn’t mean you shouldn’t also attempt to tackle this one. Specially as unlike the others a band aid seems somewhat tractable..

Researcher: “with this new device we think we can attempt to create a gravity wave in the lab” Professor: “we should consider whether this might violate the 2028 embargo on dark forest beacon technology”

You absolutely can make a local MCP server! I use one as part of TalkiTo which runs one in the background and connects it to Claude Code at runtime so it looks like this:

talkito: http://127.0.0.1:8000/sse (SSE)

https://github.com/robdmac/talkito/blob/main/talkito/mcp.py

Admittedly that's not as straight forward as one might hope.

Also regarding this point "letting you easily connect to your own Agents SDK MCP servers deployed in their cloud" I hear roocode has a cool new remote connect to your local machine so you can interact with roocode on your desktop from any browser.

Regardless of incentives I think this is some of the most important research they should be doing. As a species we need to get a better understanding of the probability of life on other planets and therefore a better understanding of fermi's paradox in case the dark forest theory is correct. So if NASA has an incentive to discover potential pathways for extraterrestrial life... great!

Agree. Out of the available paid cloud providers, I only chose to work with Claude Code because of the data privacy policy. This isn’t a welcome move but still usable. Thankfully the open source models are not far behind with Qwen 3 coder etc.