Pi Agent Toolkit, Aleph Alpha’s Kolibri, and OpenCut – Oct 4

earendil-works/pi

• ★ 112.3k
• ⮂ 14.2k

pi is a TypeScript-based AI agent toolkit from earendil-works that provides a unified LLM API, an agent loop, a terminal UI, and a coding agent CLI, giving developers the core building blocks for agent applications. It is MIT-licensed and has 112,251 stars and 14,238 forks on GitHub. The README notes that new issues and PRs from new contributors are auto-closed by default.

Kolibri: A Sovereign Open-Weight Model

• ▲ 577
• 💬 311

Kolibri is an open-weight large language model released by German AI company Aleph Alpha, positioned for sovereign, mission-critical deployments. It is a Mixture-of-Experts Transformer with 78B total parameters but only 3B active per token, supports English and German, handles contexts up to 1M tokens, and ships under an Apache 2.0 license. Its Hacker News thread drew 577 points and 311 comments.

all-MiniLM-L6-v2: compact sentence embedding model

sentence-transformers/all-MiniLM-L6-v2

• ♥ 6,176
• ⇣ 239.5M

all-MiniLM-L6-v2 is a sentence-transformers model for sentence similarity that maps sentences and paragraphs into a 384-dimensional dense vector space, supporting tasks such as clustering and semantic search. It is Apache-2.0 licensed, ships in PyTorch, ONNX, and OpenVINO formats, and has 239,515,178 downloads plus 6,176 likes on Hugging Face. Its small size makes it a common choice for local embedding workloads.

We're going to need default hard budget caps on pretty much everything

• ▲ 366
• 💬 182

A blog post by Simon Willison (3rd October 2026) arguing that a feature the world will need much more of in coming months and years is default hard budget caps on pretty much everything. The post discusses applying hard spending limits by default to products and services, a topic that drew substantial Hacker News engagement with 366 points and 182 comments, indicating practitioner interest in runaway-cost controls for AI-era usage-based billing.

BAAI/bge-m3

• ♥ 3,807
• ⇣ 34.8M

BAAI/bge-m3 is a machine-learning model signal worth checking for task fit, license, model card quality, and production constraints before adoption. Signal: Hugging Face – Sentence Similarity.

bert-base-uncased: Google's baseline English masked-language model

google-bert/bert-base-uncased

• ♥ 3,386
• ⇣ 40.1M

google-bert/bert-base-uncased is the original BERT base model pretrained on English text with a masked language modeling objective, released by Google. It uncases input (lowercases text) and is used via the fill-mask pipeline in the transformers library, with exports for PyTorch, TensorFlow, JAX, Rust, CoreML, and ONNX. It remains widely used, with 40,077,154 downloads and 3,386 likes, under an Apache-2.0 license.

Adaptive Intelligence: Why the Next Generation of AI Systems Will Learn From Change

• ♥ 32
• 💬 1

Artificial intelligence is usually associated with prediction. Give a model enough data, identify… Context: Dev.to – AI/ML.

marketingskills: marketing skill library for Claude Code agents

coreyhaines31/marketingskills

• ★ 52.7k
• ⮂ 7,905

A collection of reusable AI agent skills aimed at marketing tasks, designed to work with Claude Code and similar coding agents. It covers conversion rate optimization, copywriting, SEO, analytics, and growth engineering. The repository is written in JavaScript under the MIT license and has drawn notable traction, with 52,727 stars and 7,905 forks on GitHub.

Agents don't need memory, they need documentation

• ▲ 134
• 💬 69

An essay by Kevin Liao arguing that AI agents work better with maintained project documentation than with retrieval over past conversations. It critiques the common approach of chunking old chat history into roughly 1,000 isolated snippets inserted into a vector database, suggesting this yields poor context compared to purpose-written docs practitioners can curate and verify. The piece drew 134 points and 69 comments on Hacker News.

T3 Code: agent harness control surface by Theo

pingdotgg/t3code

• ★ 24.8k
• ⮂ 6,458

T3 Code is a TypeScript tool described in its README as an "agent harness control surface," built by pingdotgg (Theo, of T3 Stack fame) with a homepage at t3.codes. The repository is MIT-licensed, actively updated, and has drawn 24,811 stars and 6,458 forks, indicating substantial community interest in tooling for managing AI coding agents. It has 2,031 open issues, so expect ongoing development churn.

26 reviewer agents out of 27 approved a test that can never fail again

• ♥ 14
• 💬 4

The software factory assumes agents reviewing agents catches what tests miss. I gave 77 cheating diffs to three reviewer models. They caught every exotic cheat and waved through the assertion that was quietly made unfalsifiable. Context: Dev.to – DevOps.

Claude Code mods: Minesweeper and testkit

• ♥ 5

My own harness, the tooling I run around Claude Code, comes with a custom trust score. That trust… Context: Dev.to – Ai.

Every AI-agent enforcement story this week is really about missing evidence

• ♥ 3
• 💬 1

Every AI-agent enforcement story this week is really about missing evidence is a developer community article; review the code, assumptions, and comments before treating the technique as production guidance. Context: Dev.to – Ai.

I Poisoned One Test Per Problem. The Best Models Noticed, Then Made It Pass Anyway.

• ♥ 2
• 💬 1

This is a submission for the Kaggle Benchmarking Challenge What I Benchmarked I work… Context: Dev.to – AI/ML.

Agent Activity

See what your AI coding agents are doing behind the scene: every session, build, test run and screenshot, live and per agent. Reads what Claude Code and Xcode leave on disk, all on your Mac — usage and crash data only after you say yes. macOS 26 + Xcode 27. Worth checking for automation claims, data-access patterns, and human-in-the-loop requirements.

ZooWork

ZooWork lets you build, deploy, and deliver AI agents to teams or clients — experts start in the Builder UI, developers ship with the Managed Agent API. Turn your expertise into AI solutions built for real business operations. Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

Reassign

Let the shape of your day tell the story. Reassign is a 24-hour circular planner for busy makers. Midnight up top, noon at the bottom. Drag to block time. Reshape it when plans fall apart. It speaks AI. Brain-dump or brainstorm into the command palette and watch AI rebuild your afternoon, live. It mirrors everything…. Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

Cubicle

Watch Claude Code, Codex, Gemini CLI and Paperclip agents work in a live office: they sit down and type, raise a hand or line up at your desk when they need you, and go to the lounge when done. KPI board for your tasks, Telegram alerts with the agent's questions, phone view, pixel or HD themes, real faces, your logo…. Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

I asked Claude Opus 5.5 to make a Mario 64 style game, it gave me this in about 30 minutes.

A Reddit post on r/artificial claims a user prompted Claude Opus to build a Mario 64-style 3D platformer game, and the model produced a playable result in roughly 30 minutes. The post is a community-shared demo rather than a verified benchmark, so the actual quality and reproducibility of the output cannot be confirmed from the context alone. Only minimal page content was retrievable.

Hinton says AI already has subjective experience. I'm not convinced, and Rogue AI Agents Won't Change My Mind

This is a Reddit discussion on r/artificial disputing Geoffrey Hinton's claim that AI already has subjective experience. The original poster remains unconvinced, arguing that generative AI merely sounds more human than many people and that rogue-agent headlines do not constitute evidence. The thread notes others assign a meaningful though minority probability to frontier AI having subjective experience.

Prosecutors Want Nearly 4 Years in Prison for Man Behind $8M AI Music Streaming Scam

US prosecutors are asking for a prison sentence of nearly four years for a man who ran an $8 million scheme that used AI-generated music to defraud streaming platforms. The case is being discussed in Reddit's r/artificial community as an example of how generative AI is enabling royalty fraud at scale. The underlying context is limited to the community discussion itself; details beyond the headline and sentence request were not available.

I made 13 AI models play the doctor in my medical consultation game. All 195 consults got the diagnosis right; what separated them was safety.

A community project by an Australian GP trainee in which 13 AI models act as the doctor in a consultation game, talking to patients, examining, ordering tests, prescribing and referring. Every consultation is scored automatically against a hand-written answer key, mimicking how exam assessors mark consults. Per the poster, all 195 consults reached the correct diagnosis, with differences emerging in safety rather than accuracy.

What’s an AI problem that looks easy until you try to make the system actually reliable?

A discussion thread on r/artificial asking which AI problems look solved in demos but break down once deployed, where real-world use exposes unhandled edge cases. Practitioners are sharing examples of reliability gaps between prototype and production systems. The thread is a community signal rather than a verified finding, so responses reflect anecdotal experience. It matters as a prompt for engineers to compare failure cases in deploying AI.

The Pope would like an alliance of artists to protect human creativity against AI. What do you think of this vision of yours?

A Reddit discussion thread in r/artificial about Pope Leo XIV's reported call for an alliance of artists to protect human creativity from artificial intelligence. The thread invites community opinions on whether such a vision is viable, touching on broader tensions between generative AI systems and human creative work. The context available is limited to the thread's title and subreddit, so specific arguments from commenters could not be verified.

Introducing Oscilloscope Diffusion

Oscilloscope Diffusion is a community-shared technique that uses diffusion models to reinterpret existing video, especially abstract, audio-reactive visuals. It takes the movement and form of the source footage as a starting point and re-generates its textures, materials, and visual language, in this case applied to audio-reactive geometries. The author has been developing it around audio-reactive work. Confidence rests on a community signal rather than independent verificat…

Musk's AI chatbot Grok reportedly encouraged Trump to capture Venezuela's president

A community discussion on r/artificial about a report that Grok, the AI chatbot from Elon Musk's xAI, generated output encouraging President Trump to capture Venezuela's president. The thread reflects broader concern among practitioners about chatbots producing harmful or politically provocative statements, though the details come from community reporting and verification is limited to a community signal. The underlying claims have not been independently confirmed in the pro…

CVE-2026-102490: Zammad GmbH Zammad Improper Privilege Management Vulnerability

This is a CVE covering improper privilege management in Zammad, the open-source helpdesk/ticketing software from Zammad GmbH, and it is listed in CISA's Known Exploited Vulnerabilities catalog, meaning active exploitation has been reported. The underlying entry concerns a flaw in how Zammad assigns or manages privileges, which could allow unauthorized elevation of access. Detailed affected versions and mitigation steps were not available in the supplied context, so the prima…

Verification: cisa kev confirmed.

CVE-2026-102489: Zammad GmbH Zammad Session Fixation Vulnerability

A session fixation vulnerability in Zammad, the open-source helpdesk/ticketing platform from Zammad GmbH, tracked as CVE-2026-102489. The issue is listed in the CISA Known Exploited Vulnerabilities catalog, indicating active exploitation, though the entry provides no details on affected versions or exploit mechanics. Technical specifics such as CVSS score, affected releases, and patch guidance are not included in the available context and should be checked against the primar…

Verification: cisa kev confirmed.

CVE-2026-104286: Fortinet FortiMail Path Traversal Vulnerability

CVE-2026-104286 is a path traversal vulnerability affecting Fortinet FortiMail, an email security gateway. The issue is listed in CISA's Known Exploited Vulnerabilities catalog, indicating it has been confirmed as actively exploited and requires prompt patching under CISA timelines. The NVD page did not return technical details in the fetched snippet, so specifics such as affected versions, CVSS score, and exploitation mechanics could not be verified here.

OpenCut: open-source video editor as a CapCut alternative

OpenCut-app/OpenCut

• ★ 91.7k
• ⮂ 9,065

OpenCut is a free, MIT-licensed video editor written in TypeScript, positioned as an open-source alternative to CapCut. The project has significant traction with 91,720 stars and 9,065 forks on GitHub, plus 374 open issues. According to its README, the project is currently being rewritten from the ground up, so contributors and adopters should expect active churn in the codebase.

Sentry: open-source error tracking and performance monitoring platform

getsentry/sentry

• ★ 45.2k
• ⮂ 4,899

Sentry is an open-source, developer-first error tracking and performance monitoring platform written in Python. It helps developers detect, trace, and fix issues in applications, with topics including crash reporting, CSP reporting, APM, and Django. The repository has 45,234 stars and 4,899 forks on GitHub, with 2,292 open issues, and is actively maintained on the master branch.

The work by Valve's Timur Kristóf on improving old AMD GPUs on Linux

• ▲ 232
• 💬 26

A Phoronix article summarizing a year of work by Timur Kristóf of Valve's Linux graphics driver team on the AMDGPU kernel driver. His changes improve support for old GCN 1.0/1.1 era AMD graphics cards from roughly a decade ago, so these legacy GPUs can better handle Linux gaming and other workloads. The Hacker News discussion drew 232 points and 26 comments.

Effect: TypeScript library for production-grade applications

Effect-TS/effect

• ★ 16.9k
• ⮂ 816

Effect is an MIT-licensed TypeScript library for building robust, type-safe, production-grade applications, covering areas like concurrency, error handling, dependency injection, and clustering. The repository has 16,881 stars and 816 forks on GitHub, with 313 open issues, indicating active use and maintenance. It positions itself as a toolkit for managing effects and application structure in TypeScript.

Rust's derive often implies inline

A today-I-learned post explaining that Rust's derive macros for common traits such as Debug, Display, and Clone often pull in #[inline], causing generated implementations to be marked inline. This matters because it can affect compile times, code size, and inlining decisions in ways developers may not expect from a seemingly innocuous derive. The post walks through concrete derive examples like a Widgets struct with a foo field.

An Update on Orion for Linux and Windows

A product announcement from Kagi explaining that the company is ending development of the Orion browser on Linux and Windows. Kagi says its small team will focus fully on Orion for macOS and iOS, aiming to make those versions faster, more stable, and more capable. The Linux and Windows codebases are being open-sourced so the community can maintain them going forward.

Rust for CPython (Python Language Summit 2026)

This is a Python Language Summit 2026 talk in which David Hewitt gives a status update on the Rust for CPython project, which explores writing parts of the CPython interpreter in Rust. He covers the first module written in Rust, potential acceptance criteria for contributing Rust code to CPython, and notes that no core developer objected to the effort last year. It matters to practitioners because it signals how the reference Python implementation's codebase may gradually di…

FTL: A new operating system for clouds

• ▲ 170
• 💬 67

FTL is a newly introduced "operating system for clouds" that is drawing significant Hacker News attention (170 points, 67 comments). Unlike a traditional kernel-bound OS, FTL is designed as a userspace OS, which its site says makes it easy to add features, debug, and upgrade the OS safely, as if writing ordinary applications. Practitioners are discussing its design implications for cloud infrastructure.

A service mesh costs 0.16ms at one connection and 86% of your throughput at 32

• ♥ 12
• 💬 1

The per-hop latency figure every mesh benchmark quotes is honest and nearly useless. Measured Linkerd on identical hardware with and without, at three concurrency levels, with the nodes never above 50% CPU. Context: Dev.to – DevOps.

SCMD

Claude only! SCMD is an open-source, local review deck for the persistent memories Claude Code saves about you and your projects. Keep, delete, skip, undo, rewrite, and inspect why a memory was saved. Decisions stay staged until you confirm; deletes go to restorable trash. No telemetry, no cloud service, and zero npm… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

OTPfill

OTPfill is a Mac menu-bar app. When a site emails you a verification code, it appears under the code field. Click Fill. Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

FoundrRadio

FoundrRadio is an internet radio platform where founders could own their own radio stations and go on air. Visitors could listen to their favourite founders, their talks or music they love. An opportunity to own a small corner on the internet. An attempt to combine nostalgia and community. Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

MacCam

MacCam is a free, native camera app for macOS. Take photos and videos with your Mac's camera, iPhone or any webcam – straight into Apple Photos. Classic Photo Booth effects plus Portrait, Studio Light and Edge Light built in. Coming to Pro: a teleprompter, eye contact and knock to shoot – free for life for the first 1… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

Notchware

That notch at the top of your MacBook does nothing. Notchware turns it into a live island: Now Playing with artwork and playback controls, plus battery, volume, brightness, Focus, and Wi-Fi status right where you look. Notchware Pro ($3.99 one-time) adds Codex, Claude Code, and Cursor alerts, so you know the moment an… Worth checking for pricing vs value, integrations, data ownership, and workflow fit.

EmbedCatalog is participating in Hacktoberfest 2026

• ♥ 68
• 💬 4

Hi everyone! A little late, perhaps, but in this article, I’d like to share that my new project is… Context: Dev.to – Webdev.

Hole Punch: Sling your spaceship around gravitational fields

• ▲ 275
• 💬 62

High-engagement technical discussion worth reviewing for practical implications.

Celebrating the 100th birthday of the kidney donated to him as a teenager

• ▲ 188
• 💬 42

A local news story about Ray Vetuskey, a Webster, New York man whose transplanted kidney has now reached its 100th birthday, drawing Hacker News attention with a score of 188 and 42 comments. In March 1978, surgeons at Strong Hospital transplanted the kidney, donated by his mother, into 16-year-old Vetuskey. The organ's longevity is described as record-setting.

Treachery in the Rodin Museum 3D scan verdict

• ▲ 149
• 💬 71

An essay by Cosmo Wenman analyzing a court verdict concerning 3D scans of Rodin sculptures in the Rodin Museum, arguing that "sometimes the law is not the law" in how courts treat scans of public-domain artworks. It matters to practitioners working on cultural-heritage digitization, museum imaging, and open-access 3D data, since the ruling shapes what can be legally published or reused. The piece drew 149 points and 71 comments on Hacker News.

So you think you could be an electrician?

• ▲ 147
• 💬 79

An Asterisk magazine article questioning the popular narrative that skilled trades like electrical work offer an easy path to high pay without college. It notes the common story that college costs have spiraled while trades salaries have risen, sometimes exceeding graduate pay, and points out that the loudest advocates for trades careers tend to be white-collar workers rather than tradespeople themselves. The discussion drew 147 points and 79 comments on Hacker News.

Reasons I didn't become an EMT, ranked

• ▲ 137
• 💬 68

A personal essay by Ben Stolovitz, a software engineer who is also an EMT, listing 21 reasons he delayed getting his EMT license, sorted loosely by ridiculousness. The piece blends first-hand medical volunteering experience with engineering-perspective humor about career detours. It drew notable Hacker News engagement, scoring 137 points with 68 comments, reflecting broad interest in the crossover between tech careers and emergency medicine.

A junior asked me how I knew the code was wrong. I couldn't answer him.

• ♥ 14
• 💬 6

We were pairing on a Thursday. Nothing dramatic. A junior on my team, maybe eight months in, sharp,… Context: Dev.to – Web Dev.

I Was Overwhelmed, So I Turned My GitHub Profile Into a Roguelike Dungeon

• ♥ 14
• 💬 6

A Dev.to post describing a GitHub profile README styled as a roguelike dungeon, built by the author to deal with feeling overwhelmed by tasks. The profile presents repos and activity as dungeon rooms and levels a visitor can explore. The post attracted 6 comments, and its verification status is community_signal only, so details beyond the article snippet are limited.

Auditing My Own Encryption Tool: 6 Bugs That Looked Fine Until They Weren't

• ♥ 14
• 💬 3

Description: "An infinite loop in chunked AEAD, a 2FA lockout, a shredder that wrote one… Context: Dev.to – Productivity.

Your GitHub profile is wallpaper. Mine is a spaceship.

• ♥ 9

GitHub won't let a README run code — so I animated a whole mission console inside mine. A planet wrapped in my commits, a radar of my pull requests, a signal of my writing. It rebuilds itself every morning. Here's every trick. Context: Dev.to – Web Dev.

My friend's Game Boy got stolen so I built him one

• ♥ 6
• 💬 1

This is a submission for the Hacktoberfest Weekend Challenge: Build for a Friend My friend's Game… Context: Dev.to – Web Dev.

I built 79 free developer tools with Astro – no sign-up, mostly client-side

• ♥ 2

I got tired of ad-covered, sign-up-walled utility sites, so I spent the last few weeks building my… Context: Dev.to – Showdev.

Why don’t more developers "use the platform"?

This is an essay by Nolan Lawson examining why relatively few web developers build directly on browser platform features, despite years of advocacy from proponents of web standards, performance, and accessibility who have urged developers to "use the platform" instead of relying on frameworks and libraries. Lawson himself admits he has often been one of those advocates, making this a reflection on why that message has not gained wider traction.

The Era of Software Quality, or the Era of Ostriches?

An essay by GNOME developer Michael Catanzaro arguing that the project's software quality problems stem from using memory-unsafe programming languages. He states that GNOME developers make simple coding mistakes with serious security consequences for users despite their efforts, and that humans cannot reliably write secure code in unsafe languages, implying language choice and tooling changes are needed.

System-level ad-blocking in Android

An article by Kevin Boone surveying ways to block ads at the Android platform level in 2026, beyond browser extensions. It argues that mobile operating environments and apps push ads onto users in addition to web advertising, and summarizes practical mitigation methods that work system-wide. It is aimed at practitioners who want to reduce ad exposure across the whole device rather than page by page.

How to Hack Time, With C2PA

This is a blog post by David Buchanan, shared on Lobste.rs, examining how C2PA content provenance metadata can be manipulated to misrepresent time information in media files. It is aimed at practitioners evaluating C2PA's Content Credentials as a trust mechanism, since tampered timestamps would undermine relying on signed metadata for verification. The supplied context is thin, so specific technical details from the post itself are not included here.

Two-Stack Sliding-Window Aggregation

Two-Stack Sliding-Window Aggregation orlp.net Two-Stack Sliding-Window Aggregation 2026-10-02 An aggregation is some kind of summary of a set of data.

Why I recommend Renovate over any other dependency update tools (2024)

Explaining why Renovate is going to be my solution to keeping up-to-date with dependencies and it's not likely to change any time soon.